Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/AVh-MWuEs98iUmYqC56iclJK3ZE.roa
File: AVh-MWuEs98iUmYqC56iclJK3ZE.roa (raw, json)
Hash identifier: iaElNz4ljPpwiNqkV2cEyGr7wsO+z9c858j7sV5TJuw=
Subject key identifier: 01:58:7E:31:6B:84:B3:DF:22:52:66:2A:0B:9E:A2:72:52:4A:DD:91
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 0214F971
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/AVh-MWuEs98iUmYqC56iclJK3ZE.roa
Signing time: Sat 01 Jan 2022 00:54:08 +0000
ROA not before: Sat 01 Jan 2022 00:54:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 193.30.161.0/24 maxlen: 24
193.17.68.0/24 maxlen: 24
193.200.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34929009 (0x214f971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Jan 1 00:54:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01587e316b84b3df2252662a0b9ea272524add91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:ee:4e:e9:c8:20:fe:20:ce:12:4f:5c:e8:
97:d0:43:d9:55:b7:91:d0:f1:f5:09:9d:64:78:c2:
58:81:35:02:23:42:76:20:4b:27:99:60:88:c1:34:
53:74:ea:86:c3:40:b3:18:e8:1a:68:9e:fc:9d:4d:
6b:d8:b6:17:0c:0a:52:d5:fb:b4:7f:ef:59:95:7d:
9b:13:36:36:0e:48:d6:be:1e:9f:54:bd:89:de:49:
06:df:84:2c:01:f3:bc:1d:0c:c3:83:66:c5:91:25:
a1:89:09:38:e1:75:8b:ca:59:ea:f5:d0:bd:73:55:
05:d3:c0:66:88:57:44:b0:92:2a:2f:c2:7b:79:f4:
86:83:f8:ca:a3:e1:60:74:87:39:cc:fe:b9:f8:b7:
62:b9:8d:ef:eb:40:9f:4a:ea:a0:33:3c:98:c5:e4:
96:c4:c4:5f:3a:1f:f4:be:77:e3:75:75:0a:33:6d:
d0:5f:ae:3d:cd:24:fb:ea:70:9b:db:4f:88:db:6f:
d2:36:e7:6f:82:38:1e:87:a5:47:c4:5c:23:5b:c7:
53:63:0f:7e:2c:30:e6:20:66:72:4a:4a:ad:8a:c2:
0e:b0:08:36:be:f1:a1:eb:4e:12:0b:6e:b1:ad:6d:
ab:c9:3d:23:a1:6d:1a:b6:fd:7b:65:1e:cb:45:85:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:58:7E:31:6B:84:B3:DF:22:52:66:2A:0B:9E:A2:72:52:4A:DD:91
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/AVh-MWuEs98iUmYqC56iclJK3ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.68.0/24
193.30.161.0/24
193.200.30.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a4:a9:9a:bf:92:d8:c1:09:41:1d:53:ee:0e:6a:63:cd:82:
87:55:60:59:a3:ba:d5:f0:c1:21:10:0a:a9:94:ed:51:c6:5d:
43:87:67:5f:26:f2:73:45:70:92:68:ec:b7:05:6c:79:2c:e5:
7d:27:ab:06:aa:99:54:ca:b8:2f:89:88:da:b9:e3:bd:5a:04:
23:da:7a:70:d0:70:9a:e3:e1:f9:bf:52:b0:27:4c:d6:8b:6a:
b4:3e:89:e4:43:56:a1:47:9f:75:0f:24:c2:0d:c5:a1:29:76:
e0:55:fa:64:5a:e8:42:3c:11:2e:40:98:fa:9b:b7:6f:85:d2:
bb:57:01:93:08:ae:6c:06:d5:10:6e:a3:d4:e1:40:f0:b9:25:
df:e1:70:75:d2:ad:0e:57:5a:af:f8:b7:9d:eb:ff:1d:bb:7d:
bf:a9:39:56:54:cd:1a:6b:0a:84:9f:34:8d:0d:4c:e9:5a:27:
78:a9:db:ff:e8:83:a2:fc:77:5e:db:ff:ab:42:bc:22:91:3b:
1e:5f:89:9e:42:36:12:55:94:0b:7a:fe:d5:77:a2:61:87:3a:
2f:30:b0:28:6f:4e:e8:71:98:d2:38:2b:32:e1:8b:50:eb:26:
97:03:fc:4e:23:fd:90:c8:09:90:21:0d:62:dd:83:82:c4:65:
05:ac:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:48 2024 by rpki-client on console-fra.rpki-client.org