Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PwVfIq7YpraRM-vyK4r72eKr9tU.roa
File: PwVfIq7YpraRM-vyK4r72eKr9tU.roa (raw, json)
Hash identifier: dmGzAqZKDc4JpZ5Op+ZFZHiR8NQO0aL8pUL8oaGFPYM=
Subject key identifier: 3F:05:5F:22:AE:D8:A6:B6:91:33:EB:F2:2B:8A:FB:D9:E2:AB:F6:D5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0183F4F4E06FCC3BF325B02CEC3B85DF28F4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PwVfIq7YpraRM-vyK4r72eKr9tU.roa
Signing time: Thu 20 Oct 2022 10:33:52 +0000
ROA not before: Thu 20 Oct 2022 10:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57136
IP address blocks: 193.226.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:f4:e0:6f:cc:3b:f3:25:b0:2c:ec:3b:85:df:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 20 10:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f055f22aed8a6b69133ebf22b8afbd9e2abf6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:a4:f9:c3:b9:8e:fa:b2:fc:7d:15:63:75:
67:b4:49:51:af:c2:7f:2b:53:6c:01:62:e6:09:eb:
37:9e:85:4e:a0:4b:50:e5:16:7a:9e:d0:48:20:a2:
16:f2:15:2d:a0:34:8c:40:f4:c1:36:d9:5b:4c:22:
87:ea:d2:ef:a4:c1:d8:48:e0:91:d3:b8:a7:14:ab:
35:75:92:99:d4:cb:72:68:8c:32:f4:0a:65:6a:76:
b4:30:4f:dc:69:1b:09:5f:c6:92:85:d4:d0:04:29:
bd:dc:0a:8b:23:c0:af:95:e9:df:e3:39:74:33:f1:
cf:3f:92:f2:fc:7e:11:6a:04:0e:8d:db:5c:79:6c:
79:8b:ec:2d:19:89:6d:ab:a7:f5:87:58:3a:f2:25:
39:20:35:b9:8d:32:fa:21:c8:b8:96:e0:7d:9d:79:
34:1a:bf:27:a8:12:52:9c:07:aa:73:98:00:ec:19:
da:fb:74:fc:7f:6e:aa:2d:d2:e9:78:20:04:84:1e:
9e:d7:db:be:62:86:b4:00:91:17:9a:20:41:f0:f3:
3b:a7:2a:8a:fe:ec:81:aa:af:71:0f:51:b4:58:2d:
bc:a0:61:a5:c6:5b:fe:f1:df:b9:a2:e5:94:38:ed:
f3:cf:eb:90:30:e0:8a:48:65:77:1a:20:39:0e:7c:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:05:5F:22:AE:D8:A6:B6:91:33:EB:F2:2B:8A:FB:D9:E2:AB:F6:D5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PwVfIq7YpraRM-vyK4r72eKr9tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.118.0/24
Signature Algorithm: sha256WithRSAEncryption
31:98:e8:14:b0:b5:93:11:e0:15:3b:84:2b:7c:1f:08:f2:d7:
68:8f:cb:c1:58:30:82:d6:1f:91:c3:23:5a:df:a4:ad:66:59:
37:8d:a2:7d:d0:67:d9:07:b4:ec:c5:5e:e9:09:d4:0e:9d:ea:
2f:d6:78:9b:0e:cc:f9:93:d4:e3:d7:5f:32:86:28:c0:b2:5d:
ec:72:8b:ab:50:0b:f6:97:01:df:9c:24:fd:4f:70:60:cf:95:
c5:24:e8:35:92:65:3f:7c:ef:76:97:97:24:51:9a:30:fa:be:
36:71:03:9a:9b:f0:da:57:01:92:81:a9:c4:c0:4f:a3:71:17:
4d:83:d9:58:51:fd:e9:a9:06:fc:77:60:b8:8d:c5:dc:6f:6d:
f6:88:d5:ad:21:2a:1c:11:2a:4c:23:45:ed:1c:94:5d:87:65:
23:c1:99:e4:48:68:f3:5b:1f:bb:f0:a5:ce:4b:5c:b0:7b:eb:
07:97:0d:c9:4f:55:a6:ee:dd:6c:3a:54:57:fb:8b:3d:ac:28:
62:30:92:46:da:e9:60:ec:df:5b:18:0b:ba:a4:5c:13:7e:a7:
0d:71:5a:f0:54:31:61:e5:80:c4:72:44:b3:39:73:ff:b5:76:
bc:52:f6:b5:e4:82:5f:40:ec:24:81:0a:0c:55:93:48:af:32:
43:2c:0b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org