Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3Eq8Z9Czi1oeOejOzfNuEHgyEkk.roa
File: 3Eq8Z9Czi1oeOejOzfNuEHgyEkk.roa (raw, json)
Hash identifier: lFGxfXJkmNa6H/F+j354ySRWUoQ1PTGg0Acr53eQ2DA=
Subject key identifier: DC:4A:BC:67:D0:B3:8B:5A:1E:39:E8:CE:CD:F3:6E:10:78:32:12:49
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1937F59D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3Eq8Z9Czi1oeOejOzfNuEHgyEkk.roa
Signing time: Sat 01 Jan 2022 11:57:12 +0000
ROA not before: Sat 01 Jan 2022 11:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210822
IP address blocks: 193.230.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423097757 (0x1937f59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 11:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc4abc67d0b38b5a1e39e8cecdf36e1078321249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:ad:65:8c:4f:58:7e:af:98:5c:4d:7c:d4:
e2:d9:13:5e:a7:2a:fe:0f:c3:cc:57:bc:7d:e7:29:
57:cc:a3:5f:03:7a:1b:b3:c2:50:9e:72:e1:a7:4e:
60:f4:85:62:6c:ee:b8:ea:65:5e:44:cd:03:90:8e:
01:d7:5c:84:bb:34:28:b9:d6:0e:30:d9:a1:2f:0b:
78:48:f1:db:61:4e:9b:76:78:bd:93:de:95:b9:99:
19:59:8e:2b:00:94:13:a1:c9:1f:5e:ae:fe:e5:40:
9a:e4:0f:82:ff:cc:c3:e3:f6:d0:df:46:a8:98:8c:
7a:d7:46:85:c1:d5:50:82:16:dc:e6:d0:bd:19:7a:
08:89:1e:8d:ff:f5:7f:9a:a5:fb:5d:2f:e2:65:b6:
67:26:ee:b0:73:8c:d4:0e:eb:73:d4:c7:c0:d0:9d:
70:6d:bf:8d:e1:84:d6:a4:0b:63:99:ea:4d:0c:aa:
ca:07:33:c1:14:f4:4a:2f:e5:64:1e:f1:64:ac:bd:
93:de:0a:91:ad:4b:30:3e:9c:47:33:20:41:fd:9f:
e2:6d:32:e8:32:b8:03:15:fe:f8:13:6e:2b:3d:df:
70:d5:0b:5f:32:d7:47:97:f2:07:43:83:3c:47:ed:
47:ad:a8:e4:3f:ec:e1:24:33:8c:76:40:81:42:88:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:BC:67:D0:B3:8B:5A:1E:39:E8:CE:CD:F3:6E:10:78:32:12:49
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3Eq8Z9Czi1oeOejOzfNuEHgyEkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.133.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ae:b0:0c:a8:3f:6a:6b:5e:34:fb:e2:07:19:db:9c:fc:5f:
a5:f5:de:ca:80:34:36:c2:fc:46:b9:8a:43:a9:d5:25:6d:57:
ce:46:6b:76:6f:8e:d7:77:52:35:19:95:85:ce:cb:0b:74:95:
f5:20:cd:69:7c:8a:d4:79:53:59:78:58:b3:6a:bf:0e:11:05:
ab:07:c6:a6:f0:16:87:f4:1b:d8:00:32:65:2e:67:18:a5:f3:
14:80:60:60:bb:64:8f:16:7e:51:6a:3d:5e:17:2a:c0:f2:40:
a1:35:33:2b:76:56:5e:5e:0f:99:43:7a:91:3b:12:32:9a:57:
31:3f:cd:44:aa:d1:4b:4c:dc:d7:be:85:63:d7:fc:46:e1:06:
16:b6:c8:8e:fd:3d:e8:88:29:98:ee:f2:ba:51:0b:ea:47:93:
44:5e:ff:6f:39:f2:3d:f8:b0:bb:30:24:7a:eb:ac:d7:f5:82:
db:88:70:7a:af:8d:f5:41:1b:d0:0f:a1:2d:97:af:60:5e:9d:
d0:25:68:94:9c:23:14:a1:34:8c:36:d7:2d:49:26:29:b1:63:
96:5c:a4:62:c8:2f:fe:6d:e4:7c:af:d7:3c:e3:f7:4c:7f:da:
cf:c7:9d:e7:92:53:5d:cc:d9:4a:82:8c:26:f9:b5:2f:bd:57:
e4:19:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org