Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/1-O3yMdHWS4LMsaYzlIC5OoSPj_E.roa
File: 1-O3yMdHWS4LMsaYzlIC5OoSPj_E.roa (raw, json)
Hash identifier: EkDS2weVWx68IFl1DEXcdN8ifi2cq6Q7NEc93pnCuVQ=
Subject key identifier: F8:ED:F2:31:D1:D6:4B:82:CC:B1:A6:33:94:80:B9:3A:84:8F:8F:F1
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 06080C72
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/1-O3yMdHWS4LMsaYzlIC5OoSPj_E.roa
Signing time: Sat 01 Jan 2022 06:01:27 +0000
ROA not before: Sat 01 Jan 2022 06:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39679
IP address blocks: 193.188.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101190770 (0x6080c72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 06:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8edf231d1d64b82ccb1a6339480b93a848f8ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:7f:b5:99:c3:cb:9e:c9:55:d6:59:52:31:
fe:60:1a:ac:59:41:86:3b:d2:f7:90:d3:1c:9b:4e:
e7:87:d4:35:cb:97:83:5b:54:34:96:6a:2c:c3:68:
95:fe:b1:cd:e2:11:b8:77:41:58:a7:d4:75:b1:42:
fc:a5:f8:7e:31:4f:e0:c9:27:b6:a7:da:43:76:8e:
be:bc:50:ee:05:90:e8:d2:48:38:25:7d:0b:04:3f:
a0:de:35:3e:d5:5b:24:0f:1a:d5:d0:ce:fb:93:bf:
ae:60:ec:e9:e3:6f:a3:bb:4d:04:5c:c1:ff:52:cf:
99:af:87:db:32:52:af:98:ec:f8:1e:af:9d:a9:37:
19:17:40:38:55:80:de:6a:af:94:4e:c2:b0:2c:a3:
6b:40:6b:67:f7:b9:8c:f8:9c:38:da:0e:90:52:cd:
12:24:ed:c2:c4:93:75:c5:50:3e:bf:c3:9e:27:38:
91:48:f3:5f:7f:3e:c5:41:7c:5e:5e:09:e6:a6:2d:
9b:cb:2d:2d:f0:da:ff:05:ad:8f:89:a2:f3:53:47:
86:3d:26:0e:d6:d1:fb:1c:0c:7e:d4:51:cd:b0:97:
f7:36:af:c8:ef:55:f5:61:32:d9:b3:6e:eb:7c:37:
a8:f6:e2:37:c5:c4:c0:5f:0f:cf:21:1b:8b:b3:91:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:F2:31:D1:D6:4B:82:CC:B1:A6:33:94:80:B9:3A:84:8F:8F:F1
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/1-O3yMdHWS4LMsaYzlIC5OoSPj_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.192.0/24
Signature Algorithm: sha256WithRSAEncryption
42:43:44:8b:b3:a2:1e:c8:9c:31:94:96:03:e1:d4:31:f3:bb:
08:f8:a2:bf:9c:06:a0:9e:2f:5f:43:c8:85:31:77:fe:3c:c2:
00:a4:78:a7:e4:7c:4f:d1:0a:53:af:87:f4:08:0a:08:0b:dd:
9d:cc:62:8b:94:c3:2b:f8:cf:76:7c:f0:31:ae:3f:1c:6d:46:
6b:f7:15:32:c8:ac:5e:4c:05:fe:eb:c3:b3:00:b0:b2:e7:15:
53:5c:8c:ed:f6:2a:b3:27:39:24:2a:a0:51:14:6a:41:0c:0a:
39:12:88:9e:ba:f3:f4:89:94:d6:ba:20:6c:25:47:7a:3d:7d:
fd:5f:ac:b6:71:fb:e5:d8:38:8c:10:1d:69:f8:87:31:fe:51:
68:4f:a3:29:f0:33:28:71:bb:36:5f:ec:1e:e0:aa:9e:0a:ca:
23:44:77:37:8a:ac:c9:4e:41:1e:1e:96:f2:9a:9a:33:96:39:
d3:6b:53:cd:8b:f6:9d:3f:86:2f:6b:2c:27:2c:bb:28:e8:37:
c8:b3:23:80:3b:8a:b5:23:af:17:df:04:52:81:62:2c:61:5b:
c7:b7:97:3e:14:2b:87:5a:73:7d:99:46:b9:86:e3:b8:00:19:
13:f1:2c:ae:c4:e4:46:4f:ce:93:05:1c:8d:6d:f4:69:06:34:
31:66:02:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:34 2024 by rpki-client on console-fra.rpki-client.org