Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/gFhWQ7TqsSAwaJz3Puqytpzj3CU.roa
File: gFhWQ7TqsSAwaJz3Puqytpzj3CU.roa (raw, json)
Hash identifier: O5CLhedXBIBbGf+5D9BNssKRehKp45PWL/SEM9ubnbQ=
Subject key identifier: 80:58:56:43:B4:EA:B1:20:30:68:9C:F7:3E:EA:B2:B6:9C:E3:DC:25
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 046C09EF
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/gFhWQ7TqsSAwaJz3Puqytpzj3CU.roa
Signing time: Tue 01 Mar 2022 08:30:18 +0000
ROA not before: Tue 01 Mar 2022 08:30:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209316
IP address blocks: 193.59.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74189295 (0x46c09ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 1 08:30:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80585643b4eab12030689cf73eeab2b69ce3dc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:49:c0:30:7a:c9:1e:f0:e3:8f:2b:9e:69:
d2:c8:0a:d6:80:0e:49:37:e7:ed:a3:fe:f2:1c:35:
84:78:07:d1:ef:3e:96:3d:c8:c5:1b:7f:1f:5e:1c:
fd:5b:d7:ab:54:fa:c8:c9:78:1b:c0:91:24:a3:22:
77:29:e3:31:4c:0d:80:3d:91:4e:40:c8:65:69:56:
0d:fa:2d:3d:95:e7:00:32:fa:65:e1:31:64:f4:6b:
9d:74:59:1e:f6:6d:2b:80:f5:c1:60:1e:26:b1:f6:
28:d1:b8:e3:17:76:d7:60:40:bc:a0:0f:af:b1:24:
67:db:a0:84:c4:d2:c6:18:31:25:d2:ec:de:3d:03:
89:e7:75:66:f2:0c:0b:c3:fc:0f:8c:e6:16:fb:b4:
63:11:e8:41:ab:0d:aa:ad:ed:27:64:0e:ae:50:ca:
00:ed:b8:c6:ff:25:73:df:a1:79:9b:c0:e7:de:7e:
81:d6:91:14:2e:54:3e:f1:41:f2:58:c0:4c:81:90:
88:ce:37:f9:04:ea:99:9a:ff:4d:90:dd:79:d1:a2:
eb:4e:32:00:af:8a:14:e7:e1:36:e6:b7:61:6a:c4:
6d:f8:f0:d5:65:9d:3d:af:d9:6b:a5:7b:5d:ad:bc:
52:29:eb:ce:4e:ae:44:79:2d:51:34:8e:3d:ff:fc:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:58:56:43:B4:EA:B1:20:30:68:9C:F7:3E:EA:B2:B6:9C:E3:DC:25
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/gFhWQ7TqsSAwaJz3Puqytpzj3CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.132.0/22
Signature Algorithm: sha256WithRSAEncryption
04:fd:e2:8e:c5:d5:a1:2b:f4:1d:ac:d6:13:1f:01:0b:5a:9c:
26:68:a6:9c:b7:25:84:8a:4f:8b:1d:18:47:2d:25:d3:27:ab:
23:7b:b5:45:63:8e:bf:92:b1:19:93:d4:c1:21:3b:5c:d5:b0:
9e:df:ff:51:0e:7e:81:c7:fa:ca:2b:5a:c5:d5:68:e3:90:4a:
1b:d5:a4:cf:92:98:74:d0:42:90:65:eb:7a:c1:7b:ae:4d:a6:
e6:e3:24:ee:03:87:63:aa:ac:07:6f:3d:1e:aa:8f:f9:53:14:
b0:fe:d9:40:04:42:4d:e4:15:6c:b6:f3:f6:64:29:5c:ac:a9:
eb:2c:d0:4c:52:2c:77:25:c0:57:c7:bf:34:ee:12:9b:3a:71:
2e:79:60:57:cf:3e:09:3d:8a:92:36:66:36:2c:36:d3:7c:33:
e0:ed:32:3d:82:65:ae:04:f2:f2:b5:6b:3a:e6:f0:25:78:5f:
7f:7e:68:56:a9:5e:5d:5e:f2:51:cc:04:52:f2:aa:0c:43:36:
e9:b9:ad:e4:be:26:6a:dc:0c:26:92:59:d6:f3:e3:36:13:0d:
47:b5:1d:cb:2e:91:28:7e:bb:ac:66:fc:c3:56:aa:5d:e0:3c:
0b:8f:4e:f9:97:f7:90:73:64:67:6c:ee:77:d4:66:83:6b:4d:
c5:c5:2b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org