Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aBw5c6tA25AVewnsUD6LqB8H3rE.roa
File: aBw5c6tA25AVewnsUD6LqB8H3rE.roa (raw, json)
Hash identifier: RrQie6wAkoKyzMgDBNUZ3YrvNCkLZniloPuPngmw84w=
Subject key identifier: 68:1C:39:73:AB:40:DB:90:15:7B:09:EC:50:3E:8B:A8:1F:07:DE:B1
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0183F4FEF17BBF322FB5C4EC3CFE19837E66
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aBw5c6tA25AVewnsUD6LqB8H3rE.roa
Signing time: Thu 20 Oct 2022 10:44:52 +0000
ROA not before: Thu 20 Oct 2022 10:44:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57136
IP address blocks: 193.226.118.0/24 maxlen: 24
217.156.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:fe:f1:7b:bf:32:2f:b5:c4:ec:3c:fe:19:83:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 20 10:44:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=681c3973ab40db90157b09ec503e8ba81f07deb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:92:85:f7:48:17:41:45:35:dd:2b:14:c2:
f4:51:35:6a:56:12:3a:cd:4d:29:ff:1c:28:d3:2e:
d1:0b:30:3d:14:5b:87:d4:ae:e0:58:d7:3e:58:97:
49:f7:f8:72:0e:5d:41:9d:16:33:14:d7:32:11:f2:
25:4f:56:f2:fe:3e:a8:d1:53:39:63:6f:09:3a:ee:
5a:56:c2:52:9a:9a:bd:0d:92:56:36:b0:c3:f0:5f:
22:49:1e:20:e0:27:49:18:c2:24:0c:af:69:94:47:
b8:fc:20:77:3e:f2:1e:85:a1:5f:17:e7:7b:e1:24:
6d:24:4e:9c:79:26:be:39:67:29:ab:42:48:09:eb:
21:49:0b:75:44:9f:2e:9f:ac:75:22:32:85:a5:07:
84:61:42:e0:a1:7c:4a:69:26:35:ab:64:9b:4f:d0:
c2:94:d1:dd:b3:7e:e0:d1:12:bc:00:b9:57:67:53:
16:15:ec:fb:a3:59:3c:8f:01:e8:8f:7a:5c:e1:37:
64:5f:7d:f2:38:c3:31:fe:01:58:c1:a9:94:b3:d2:
de:22:9a:f9:83:bb:83:16:4c:97:9a:06:24:86:65:
13:68:ce:6e:62:e9:aa:09:78:a8:fd:23:9c:87:b6:
d6:d1:3b:76:da:b4:82:1c:8a:c9:25:a7:a4:fa:c6:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:39:73:AB:40:DB:90:15:7B:09:EC:50:3E:8B:A8:1F:07:DE:B1
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aBw5c6tA25AVewnsUD6LqB8H3rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.118.0/24
217.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:29:de:40:b5:3c:d2:de:55:76:1c:89:d3:65:79:89:f7:9b:
7a:47:c1:e4:2f:ce:57:87:19:36:e2:a8:73:fd:da:93:d3:37:
54:ad:fb:9d:a0:6d:2d:0c:47:66:cd:52:63:fc:e1:a4:8c:f1:
12:9b:b8:09:4e:52:5d:28:60:1b:6e:23:b8:f1:15:a3:ea:63:
27:72:a3:93:20:7d:f9:46:1c:56:1b:ae:bf:e9:33:38:74:56:
b6:98:b4:5a:a1:e0:15:23:50:f5:a3:63:1c:f9:de:ab:6f:61:
80:8a:b3:aa:96:55:f3:ba:a6:c4:07:0a:a9:4c:75:d8:0b:a0:
6f:cf:e2:f7:99:a4:c3:f5:42:12:85:45:cc:37:75:7f:6b:93:
af:bd:00:ee:8b:80:45:78:3b:a5:28:ce:19:74:7e:aa:89:90:
f1:3e:a0:24:3d:09:3f:08:48:9b:65:3d:0c:c6:7e:e4:e0:fb:
3e:96:05:c1:9d:8c:ee:0b:86:11:ae:ff:44:be:fd:61:40:5b:
3d:b4:06:3e:52:24:78:fc:88:8e:3b:1a:85:7c:8c:69:5c:19:
2d:52:b9:91:6e:9a:b5:c3:80:e6:1b:21:34:8e:6c:34:33:3b:
17:10:22:e3:12:65:10:0f:d7:dd:2c:87:ea:8e:76:ab:16:22:
16:38:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org