Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/oMpXdIBzh3A_kCyQJZM3sIBOE0E.roa
File: oMpXdIBzh3A_kCyQJZM3sIBOE0E.roa (raw, json)
Hash identifier: m+5niK7bg+jYNalXEeq0Q50LChSGRWAYaP5GHMSLmPU=
Subject key identifier: A0:CA:57:74:80:73:87:70:3F:90:2C:90:25:93:37:B0:80:4E:13:41
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 0605C6B4
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/oMpXdIBzh3A_kCyQJZM3sIBOE0E.roa
Signing time: Sat 01 Jan 2022 06:01:27 +0000
ROA not before: Sat 01 Jan 2022 06:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15985
IP address blocks: 193.188.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101041844 (0x605c6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 06:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0ca5774807387703f902c90259337b0804e1341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:00:9e:74:5f:84:f2:a9:69:42:06:bf:17:
b5:2f:e8:eb:cc:8c:70:dd:76:8f:99:c6:2b:5e:76:
d5:57:c3:44:f0:d6:bf:89:a4:e5:65:46:ef:f9:b9:
67:fc:52:de:e2:19:6a:ae:ce:d6:9c:70:72:ee:dd:
1a:61:5e:92:ba:39:34:b1:62:3e:30:9f:80:2e:68:
7b:9a:a8:4f:01:ab:29:7e:56:c8:6a:0c:5d:0b:5f:
63:60:00:24:3d:d8:07:07:db:7e:7e:0f:d2:c0:98:
0d:93:b4:7d:0b:99:07:19:b0:5d:48:3a:e5:c8:2a:
83:60:2a:b8:c0:c8:80:54:14:e1:52:b6:7a:94:f1:
96:1d:a1:a0:30:29:25:77:be:8e:30:e6:51:8b:bb:
0e:b7:91:df:9a:08:4f:e3:e9:a9:bd:a0:a0:10:7b:
64:6b:77:49:c8:18:e7:eb:ed:37:2c:7a:c0:de:b0:
10:54:0e:93:1e:61:a9:ec:21:07:14:07:7a:75:89:
d4:6e:95:ec:a1:a4:ba:3b:d5:a2:af:f5:ad:ac:2d:
70:66:2c:33:18:e4:55:45:83:f9:b0:6a:ae:f9:32:
5d:e0:f7:9a:de:5b:9b:ef:21:86:37:c2:e3:4a:8e:
32:82:bd:6d:8a:2a:fd:4d:c5:72:d3:91:9f:ef:28:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CA:57:74:80:73:87:70:3F:90:2C:90:25:93:37:B0:80:4E:13:41
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/oMpXdIBzh3A_kCyQJZM3sIBOE0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ef:01:8a:47:c9:46:f4:f6:e3:59:65:19:e0:80:ae:cd:68:
c9:f7:47:c6:c0:e1:71:e6:cb:af:76:04:c0:05:1d:83:f4:6e:
38:6f:f9:c0:aa:66:1f:6f:0e:77:01:9a:b7:6c:07:fc:78:5f:
48:0f:f5:45:6d:83:b6:9e:b8:01:ed:93:31:a6:40:84:9a:53:
96:c2:a9:0b:55:75:96:87:90:4f:e6:df:5c:73:d7:22:80:cb:
e9:f9:96:d5:63:c9:ea:42:fa:06:eb:2c:f2:9a:15:4e:93:cf:
24:46:24:68:a6:0e:92:42:ed:dc:21:ed:99:51:b6:9d:66:4b:
be:34:f1:88:d8:9e:0f:4f:0a:b0:c4:d6:46:1b:50:6b:bd:d4:
1a:2e:13:6f:14:18:d2:df:34:e6:ab:61:10:9c:45:26:dd:9c:
1e:ab:3c:80:fa:2c:39:7c:7d:c7:c0:48:da:6d:8b:42:10:00:
61:11:a5:16:be:97:a8:5e:2b:63:31:d1:27:2e:a5:86:5d:49:
d0:e3:f4:af:6b:4c:3a:05:9a:18:5a:50:58:c3:3f:53:d8:74:
05:f3:cf:d5:9a:de:f8:24:68:32:13:e7:7c:4e:b8:d8:fa:5e:
17:e0:fe:95:e5:77:cf:4c:88:6a:70:59:00:c2:85:10:1e:94:
f2:08:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:34 2023 by rpki-client on console-fra.rpki-client.org