Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/19zfAx8LcCTeTho2-fNqBlRFUaw.roa
File: 19zfAx8LcCTeTho2-fNqBlRFUaw.roa (raw, json)
Hash identifier: asjDtmGrQn8NFnCLWdqkuXniRp9ydf2KgIkIlOMT/OA=
Subject key identifier: D7:DC:DF:03:1F:0B:70:24:DE:4E:1A:36:F9:F3:6A:06:54:45:51:AC
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: DB9DE1
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/19zfAx8LcCTeTho2-fNqBlRFUaw.roa
Signing time: Sat 01 Jan 2022 07:55:28 +0000
ROA not before: Sat 01 Jan 2022 07:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210790
IP address blocks: 193.3.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14392801 (0xdb9de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Jan 1 07:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7dcdf031f0b7024de4e1a36f9f36a06544551ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:53:1f:ec:d2:9a:91:a0:7c:a6:76:99:8f:
be:ac:f9:98:8e:d0:49:ef:cd:5a:82:e6:b6:fe:68:
a7:50:32:7e:a1:28:ad:5e:44:28:a8:cd:8f:2b:aa:
78:85:6e:c2:a5:0a:3e:f5:8c:21:d1:d4:f5:b3:9f:
d7:54:88:b4:84:09:55:0a:0c:8b:cf:ca:1b:87:76:
fc:36:5f:cc:64:23:4e:94:42:e3:70:de:ba:98:7c:
db:07:ae:6f:c3:29:e8:54:90:88:59:21:50:0c:46:
45:f8:e9:98:42:b9:44:ad:a2:b9:60:8a:ad:62:b0:
92:48:f1:53:ee:2c:e6:fe:f9:84:a4:b6:60:fb:57:
9b:5b:32:40:c8:86:dc:58:8d:d9:08:00:94:82:7a:
61:c2:6f:53:e7:69:12:b8:56:83:6b:13:ed:98:a0:
cc:74:76:ca:25:e3:87:fe:fa:22:ff:1e:00:1b:aa:
8e:29:e2:cd:95:84:1b:dd:2a:aa:0e:3c:13:92:21:
18:44:6b:13:a3:16:ea:9f:ec:aa:c1:30:37:d0:c7:
a6:16:71:72:03:47:1e:9c:b5:c7:0e:21:84:cf:b3:
c0:b4:0b:33:27:79:bd:57:2d:7d:72:09:7b:02:60:
a8:b1:d7:8b:83:2e:84:87:84:8a:8d:38:1b:e1:6f:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:DF:03:1F:0B:70:24:DE:4E:1A:36:F9:F3:6A:06:54:45:51:AC
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/19zfAx8LcCTeTho2-fNqBlRFUaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:63:43:82:8f:bb:e3:11:68:1f:e2:a0:c8:21:6d:0b:f8:2a:
29:7f:98:0c:0c:b1:42:ff:b0:aa:2f:e9:85:fc:73:b7:fd:44:
da:4b:a8:55:c0:ad:fb:49:84:82:b6:a4:56:e7:5b:26:76:6a:
fe:2f:18:33:4c:e2:97:7b:97:64:5a:8f:ab:52:8b:cc:c7:ae:
bf:db:4b:e9:e3:19:f4:2b:52:be:09:b9:70:bc:07:04:e2:77:
f4:55:98:cb:de:9e:03:65:fe:66:d7:07:56:7e:ef:c0:b2:0f:
1b:f2:30:e4:db:d5:ff:a2:81:19:a7:69:d3:a2:be:69:f8:40:
bd:67:83:26:49:c9:c0:32:f1:02:c5:19:59:1e:f7:e6:28:c3:
97:ec:7a:13:63:13:42:08:ad:5e:da:99:97:8c:c2:cd:72:c4:
0c:58:74:47:3f:e4:5c:a8:6f:a7:51:dc:d2:59:00:dd:28:95:
85:78:a0:a5:91:03:25:65:d7:51:21:31:93:a8:38:19:2c:83:
2f:3a:12:49:08:22:a8:ac:d7:12:19:7a:17:45:48:be:d8:d8:
eb:b9:4f:36:84:13:8c:24:4f:52:e7:a5:ef:de:d6:3c:1d:ea:
2a:4a:f7:e2:a3:78:d7:20:6f:b5:d2:79:76:69:97:06:2c:7b:
6a:22:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:00 2024 by rpki-client on console-ams.rpki-client.org