Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/NGYfXx7KRJ-mvTZOoofBt2E9Zq4.roa
File: NGYfXx7KRJ-mvTZOoofBt2E9Zq4.roa (raw, json)
Hash identifier: OAXNwyk3xsvn+sjp8BUeWagVuXTpAQb/atxjuvTN2LU=
Subject key identifier: 34:66:1F:5F:1E:CA:44:9F:A6:BD:36:4E:A2:87:C1:B7:61:3D:66:AE
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 047920A0
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/NGYfXx7KRJ-mvTZOoofBt2E9Zq4.roa
Signing time: Sat 01 Jan 2022 00:55:20 +0000
ROA not before: Sat 01 Jan 2022 00:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.30.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75047072 (0x47920a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 1 00:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34661f5f1eca449fa6bd364ea287c1b7613d66ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:e4:49:b7:53:64:48:cb:39:5d:e9:84:99:
87:42:77:5f:d7:94:91:2c:ab:f0:14:83:3a:17:f3:
c4:16:e2:27:d8:64:43:88:e9:af:ac:68:5b:cd:31:
f5:b0:e7:b7:6a:22:34:57:8f:19:4c:c4:e8:69:8a:
07:5a:f6:8a:18:40:d3:80:b8:63:01:f7:90:3e:14:
3e:31:97:a2:c4:7c:0f:3e:7d:38:2b:74:36:14:fc:
81:c0:96:51:b2:8b:06:a9:1b:bd:f0:cb:a3:d9:3a:
38:74:2d:95:52:0f:e9:be:01:62:56:fa:aa:bc:0f:
a5:90:51:3c:93:65:3b:14:ec:20:66:8d:91:f6:9a:
70:d2:39:5e:0d:25:60:ce:24:f0:b0:0c:40:13:41:
12:90:ef:58:b3:f8:a1:aa:82:fd:ab:df:0a:d0:73:
d3:a2:79:b7:d4:94:76:68:11:b7:0e:e1:42:a3:f3:
9b:6d:8d:e3:56:90:70:91:f6:29:8b:b9:fd:18:c4:
ce:e7:4a:99:41:2a:9b:a7:84:ec:6d:89:23:59:10:
a6:f5:15:4d:c6:4f:cc:c3:0c:d3:21:00:af:a9:69:
bc:c4:06:4a:87:1a:90:85:03:0f:2e:b6:4a:e4:ed:
db:cf:77:98:f4:43:e9:1d:95:3d:f5:22:78:b0:e8:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:1F:5F:1E:CA:44:9F:A6:BD:36:4E:A2:87:C1:B7:61:3D:66:AE
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/NGYfXx7KRJ-mvTZOoofBt2E9Zq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.103.0/24
Signature Algorithm: sha256WithRSAEncryption
18:34:a8:ad:de:3a:0a:38:93:15:cf:89:e0:0b:3c:fd:d0:b9:
8f:d8:68:24:99:a0:53:73:f2:eb:61:89:94:e0:73:33:b9:da:
87:7e:58:af:db:0c:38:12:ad:42:4e:ba:0d:c3:40:a4:63:7e:
09:eb:cb:e4:2b:e5:eb:55:31:e5:28:ae:01:96:96:13:4e:4d:
e7:94:2f:16:eb:8d:38:4d:ac:e6:66:d6:f9:1a:7c:42:19:1f:
f9:6c:7b:67:d5:e6:a1:a8:34:e1:59:75:3b:b9:50:1d:82:94:
f4:7b:60:4b:18:78:8d:5f:31:a7:aa:99:e8:7e:c4:14:7f:5b:
6a:65:bf:08:22:64:9c:1b:f0:52:56:f7:41:37:61:a1:84:18:
ed:b7:e7:6e:b0:35:d2:67:0e:52:bb:ea:db:91:98:4c:2d:fb:
f9:2f:b6:e3:97:c6:c6:6d:a5:46:72:4c:7c:e3:c7:2d:ab:5f:
f6:55:42:ff:e8:08:cc:3c:45:c5:97:da:81:ea:68:5d:fe:c3:
ba:f9:ee:c6:35:14:8b:bb:79:c6:3f:e9:ad:ea:91:a9:87:35:
e2:48:49:9f:b6:b9:c9:49:bf:ec:50:d9:7d:cf:c5:d9:8d:10:
06:31:6b:2a:a8:da:86:f8:69:7d:80:87:75:f9:2b:4e:b9:93:
16:87:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----