Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/iLWSAta0wZAIb2RZio1YW00ustU.roa
File: iLWSAta0wZAIb2RZio1YW00ustU.roa (raw, json)
Hash identifier: Hq606QnviUgLcLIJcTgX9MBnNdmSy21GBVCnZgWYmrk=
Subject key identifier: 88:B5:92:02:D6:B4:C1:90:08:6F:64:59:8A:8D:58:5B:4D:2E:B2:D5
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 047A4569
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/iLWSAta0wZAIb2RZio1YW00ustU.roa
Signing time: Sat 01 Jan 2022 00:55:20 +0000
ROA not before: Sat 01 Jan 2022 00:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212052
IP address blocks: 193.30.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75122025 (0x47a4569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 1 00:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88b59202d6b4c190086f64598a8d585b4d2eb2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:b1:c7:d0:fc:ae:00:b2:3d:af:04:74:3b:
ab:2d:15:79:b5:12:51:f0:96:ae:bd:ae:11:fc:5f:
e5:12:b9:e0:54:a8:94:c7:6f:5f:f1:15:71:20:1e:
47:ae:e5:6f:df:55:bc:37:d7:9d:e1:ce:ce:a8:d4:
41:50:0d:3f:18:96:13:49:54:59:21:91:57:ef:8e:
5b:a4:71:d8:9e:5e:15:77:2e:c8:2e:62:43:1c:f8:
a9:de:07:44:a1:3d:0b:ea:b9:82:49:98:8d:7b:05:
12:ad:85:05:4e:4a:00:97:88:74:c2:8e:30:2b:24:
c0:e4:ea:54:ef:12:67:8c:26:73:33:c6:e2:2f:70:
4a:66:cc:fe:04:f0:cf:a5:af:76:80:f8:03:19:b1:
41:1a:3b:12:b9:c0:2a:a1:21:74:98:ac:93:f4:f9:
d4:37:24:1b:47:c6:1a:1a:8d:e7:15:9a:a8:24:3d:
75:0d:ab:6e:2e:cb:16:33:4c:11:06:3a:58:f3:f1:
d8:ca:18:3c:84:c9:ac:91:5e:87:f1:38:e7:25:54:
31:66:2c:2f:7d:86:09:74:3a:cf:ab:1a:0b:9e:cb:
19:2b:f7:75:1a:c9:92:95:8b:b8:53:24:27:2b:00:
59:ed:dc:4c:42:00:d0:23:3c:c9:40:04:2e:14:60:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B5:92:02:D6:B4:C1:90:08:6F:64:59:8A:8D:58:5B:4D:2E:B2:D5
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/iLWSAta0wZAIb2RZio1YW00ustU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.103.0/24
Signature Algorithm: sha256WithRSAEncryption
15:78:90:29:60:03:ae:ac:7e:b1:71:d3:b6:73:c5:78:c0:d9:
42:dc:76:f2:e6:45:b8:50:40:e9:15:e6:d4:ab:a7:d6:20:cd:
e1:c7:b6:36:25:df:37:2c:de:97:19:60:61:f5:98:df:d1:54:
dd:ca:f3:a1:ec:62:58:de:55:d7:1c:6b:91:57:4a:95:d7:f7:
39:99:d7:a1:13:29:46:e8:5f:80:6a:96:cf:be:5b:40:bc:38:
df:ad:d4:8f:8a:ee:54:9d:1b:91:52:38:a1:6a:98:cb:8c:e6:
23:cb:5e:c6:bd:a4:7f:1e:86:62:b3:fc:87:3d:d2:91:81:eb:
b9:ca:7c:97:d5:c6:a1:fb:6b:d8:8e:68:f7:98:83:45:c8:37:
a6:71:8a:a5:ae:ce:a2:9a:e5:21:b6:6e:16:f8:7c:f6:52:1d:
aa:80:5d:2a:9f:fb:da:7b:1c:de:48:6d:f5:4b:5f:97:a0:ee:
f9:52:72:b5:62:09:8c:05:4b:90:29:5b:0c:e2:76:1b:31:d7:
a6:06:f9:44:58:63:ab:98:38:e9:4a:51:e7:50:18:1c:70:5a:
77:89:25:a2:e3:c5:ff:cb:81:e7:ad:93:94:40:af:32:3d:89:
5f:2e:b5:8b:44:7c:70:7a:15:52:66:ca:85:65:63:d8:e9:af:
d8:dd:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-ams.rpki-client.org