Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/tUvmRkG3KcQGgYwAO3_eJJ1wEbc.roa
File: tUvmRkG3KcQGgYwAO3_eJJ1wEbc.roa (raw, json)
Hash identifier: NCchaCbUkdTVUw2sR0Bl0ZeXU++xAP1t2m/w4pHRBjo=
Subject key identifier: B5:4B:E6:46:41:B7:29:C4:06:81:8C:00:3B:7F:DE:24:9D:70:11:B7
Certificate issuer: /CN=c712041bc389ca87c960f3d13e73d5eafc01c152
Certificate serial: E0909A
Authority key identifier: C7:12:04:1B:C3:89:CA:87:C9:60:F3:D1:3E:73:D5:EA:FC:01:C1:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxIEG8OJyofJYPPRPnPV6vwBwVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/tUvmRkG3KcQGgYwAO3_eJJ1wEbc.roa
Signing time: Sat 01 Jan 2022 04:56:05 +0000
ROA not before: Sat 01 Jan 2022 04:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.35.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14717082 (0xe0909a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c712041bc389ca87c960f3d13e73d5eafc01c152
Validity
Not Before: Jan 1 04:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b54be64641b729c406818c003b7fde249d7011b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:2d:37:12:f5:ab:90:2f:56:3a:7b:11:ce:
7d:ac:28:f3:3b:a0:85:01:ec:33:f5:65:44:cb:b8:
05:12:11:20:fa:bf:64:37:5f:11:03:c0:c1:4e:19:
4e:10:80:a7:cc:2e:d9:cb:c8:0a:30:4b:ea:e5:96:
59:d0:18:35:48:6b:b8:71:b0:25:0c:24:4c:c7:15:
74:e7:46:ea:22:4f:91:8b:3c:23:2f:20:70:81:5c:
60:7b:a8:51:cb:26:61:dc:30:d0:c0:dd:6b:33:6c:
16:f0:67:15:9f:35:9d:45:80:61:51:2f:9c:df:ce:
bc:48:ac:8b:88:0e:b1:0b:ea:a9:03:f0:be:10:fe:
6d:ff:28:d7:5e:f9:8b:eb:14:46:74:05:65:d9:56:
1e:d9:ae:3c:0e:4e:20:9a:25:ec:ab:90:ea:4a:f4:
84:40:44:a4:4c:29:11:62:9e:65:6d:5a:ad:0c:cd:
09:d8:2a:08:33:0d:d0:3c:88:0f:87:74:7d:a0:ec:
a5:80:9b:de:8b:76:2e:49:03:e5:c9:6c:ee:d4:a9:
da:c6:af:02:55:ee:7b:a8:66:c1:ea:bd:75:4c:84:
63:d4:d9:d5:6a:3b:24:e0:4a:3b:d9:e1:dd:4e:b9:
68:22:3d:c7:f4:4c:fa:16:e8:00:54:8c:3e:58:9c:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:E6:46:41:B7:29:C4:06:81:8C:00:3B:7F:DE:24:9D:70:11:B7
X509v3 Authority Key Identifier:
keyid:C7:12:04:1B:C3:89:CA:87:C9:60:F3:D1:3E:73:D5:EA:FC:01:C1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxIEG8OJyofJYPPRPnPV6vwBwVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/tUvmRkG3KcQGgYwAO3_eJJ1wEbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/xxIEG8OJyofJYPPRPnPV6vwBwVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.231.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b9:c7:db:f2:a4:b7:fd:a1:90:61:9e:a4:09:d6:6b:23:50:
2e:42:fa:c7:ae:1e:be:09:25:a7:41:c9:6c:64:4d:8c:49:62:
cf:42:bc:90:26:7b:db:f5:34:bb:48:39:52:ce:cd:e7:d9:48:
0f:bc:c6:a9:d7:ec:09:86:d3:cb:18:b8:29:44:a8:0a:94:02:
62:ba:e6:0b:e0:32:2d:b0:8d:5f:c8:f1:ca:34:b9:50:ed:8f:
d6:f8:4f:f1:48:03:0e:22:1e:c5:6e:a1:93:1e:20:39:1c:bf:
74:ec:fd:c9:20:d4:f4:cd:51:a5:5e:e4:b4:9c:83:5e:e9:47:
fb:22:13:25:7e:03:fa:89:02:34:f6:23:e8:c8:23:3a:12:b6:
1c:5c:77:de:fd:35:f1:6e:53:30:20:3e:c8:22:40:27:9c:11:
6a:b5:ae:ae:ca:11:bd:24:66:f5:8f:7b:35:63:30:3d:3b:da:
1b:d8:4c:e1:33:3e:e7:3d:1e:8a:0c:33:0d:fa:18:9c:41:97:
07:b6:ec:d5:63:1b:8f:25:0e:38:59:60:56:cc:5e:b5:af:46:
23:56:56:18:dc:1c:f5:e1:ee:50:24:cf:88:81:e2:0b:62:c7:
0d:75:24:e1:23:9e:7f:4b:39:bc:6a:33:e9:0a:ee:3b:9c:63:
98:c2:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-ams.rpki-client.org