Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/H4BlftmKsud-Rqenzbu4Jd9f_oM.roa
File: H4BlftmKsud-Rqenzbu4Jd9f_oM.roa (raw, json)
Hash identifier: ipdVPZrNDlNEuIBOiWsv5sVd7lpTW2FJcUyrmefypT0=
Subject key identifier: 1F:80:65:7E:D9:8A:B2:E7:7E:46:A7:A7:CD:BB:B8:25:DF:5F:FE:83
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 08119FD0
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/H4BlftmKsud-Rqenzbu4Jd9f_oM.roa
Signing time: Sat 01 Jan 2022 16:03:20 +0000
ROA not before: Sat 01 Jan 2022 16:03:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24961
IP address blocks: 193.56.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135372752 (0x8119fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 16:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f80657ed98ab2e77e46a7a7cdbbb825df5ffe83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:e4:60:88:e6:b2:40:70:f2:c9:78:22:2f:
84:0c:17:ab:76:a0:ee:d4:46:25:c5:b2:66:9c:30:
e5:ed:6b:b7:9d:ec:0d:74:4d:54:b4:14:cd:91:d5:
9a:d7:43:a6:c8:b5:22:76:b2:6f:d4:e2:0e:f8:81:
10:25:96:5c:1b:cb:82:ee:f6:df:31:7d:7c:33:bb:
44:ba:2d:15:0d:06:3c:7c:95:7d:44:ed:9d:51:c0:
2b:95:f1:9a:70:47:49:d2:06:50:c1:84:4e:fc:e5:
ed:a4:b0:e4:cc:d6:d0:a2:93:aa:4e:67:6a:f2:b8:
7a:c2:ab:2c:32:6c:c2:36:1c:b7:0f:ea:f0:75:28:
bc:38:bd:16:a9:03:91:64:09:bd:bd:37:b6:d2:75:
ec:46:69:72:07:6d:e5:d5:56:f9:98:8e:7a:1e:7f:
c7:aa:5e:51:b2:54:2b:e4:e7:44:16:88:f6:69:56:
7d:3b:61:86:36:02:e3:b0:48:ee:f9:94:92:28:05:
3e:59:a8:28:95:05:3c:e2:1c:f7:7a:e3:07:a3:94:
6a:07:33:41:44:6b:78:7d:69:a0:7b:13:1a:03:d1:
7c:fa:83:b5:39:73:98:3a:c4:6b:f1:7f:a4:70:03:
aa:7b:3f:b2:f9:4d:f7:1f:1e:06:6f:37:47:b7:01:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:80:65:7E:D9:8A:B2:E7:7E:46:A7:A7:CD:BB:B8:25:DF:5F:FE:83
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/H4BlftmKsud-Rqenzbu4Jd9f_oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.239.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1d:c4:81:e0:fb:74:79:69:da:08:f9:95:b2:fe:dd:bd:14:
8c:8c:47:54:3f:2b:99:63:4d:92:a1:89:16:3e:b9:e5:0c:e6:
67:79:79:69:e6:3f:b3:c6:ab:19:84:b1:46:ff:64:3f:ca:9f:
1b:b6:6c:8c:09:16:a6:9f:64:96:a4:29:32:44:ce:45:eb:63:
38:28:5d:32:18:ac:5c:87:e0:b9:0d:e4:bd:65:bc:dc:67:e4:
34:40:e3:50:3c:19:14:3b:02:31:6e:12:5e:7a:44:4d:82:ff:
f1:75:8e:00:b0:86:41:c8:99:bd:09:68:b8:ce:9b:67:03:03:
b7:85:9b:45:e7:83:ed:fc:a7:06:74:f1:88:de:5c:93:ab:4e:
20:41:f2:d7:f1:89:53:5e:1a:4a:04:f1:ce:23:7d:bf:1b:27:
b3:dc:6a:d0:9c:d8:2c:ae:19:8a:49:ca:23:60:69:98:26:ac:
06:5f:0d:a3:bf:9c:a9:3f:12:df:76:2b:20:f7:a9:29:7f:fb:
81:97:c1:0a:c3:68:29:16:0e:60:96:26:69:37:c2:39:64:35:
bc:fe:1c:fb:48:10:25:d1:9a:c9:e1:bd:69:09:eb:a2:4a:8f:
c4:39:65:6d:da:58:eb:8b:8f:b7:8e:22:f0:71:fa:7f:fa:1c:
76:ba:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org