Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/94AXq3hSjP2xOu1xw45lsb3plzQ.roa
File: 94AXq3hSjP2xOu1xw45lsb3plzQ.roa (raw, json)
Hash identifier: x82WDI6uQsUpiIKsRPMOGE448MDINmRUCs32agvcAQg=
Subject key identifier: F7:80:17:AB:78:52:8C:FD:B1:3A:ED:71:C3:8E:65:B1:BD:E9:97:34
Certificate issuer: /CN=1c010aa8438a825a5542013f1b90d348ed8a00c6
Certificate serial: 7E32
Authority key identifier: 1C:01:0A:A8:43:8A:82:5A:55:42:01:3F:1B:90:D3:48:ED:8A:00:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/94AXq3hSjP2xOu1xw45lsb3plzQ.roa
Signing time: Thu 28 Apr 2022 12:39:40 +0000
ROA not before: Thu 28 Apr 2022 12:39:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.246.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32306 (0x7e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c010aa8438a825a5542013f1b90d348ed8a00c6
Validity
Not Before: Apr 28 12:39:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f78017ab78528cfdb13aed71c38e65b1bde99734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:27:15:3e:20:d1:78:12:c9:6e:35:50:eb:
63:01:01:e8:58:61:61:d5:e8:bc:16:94:2d:75:d2:
99:3e:72:57:0b:96:fe:54:b3:89:cb:9e:a3:1c:f2:
3e:3a:84:2f:e7:7a:a9:ce:18:b1:bf:5b:5c:0b:a3:
ce:00:77:ff:a1:8f:78:f7:17:bf:87:93:4d:83:71:
e4:7a:7e:22:1f:7a:8b:1f:9a:5d:c3:8a:be:c8:75:
1b:74:84:cd:f4:c8:36:fb:53:72:a8:3a:73:10:f0:
18:17:d0:70:66:01:4d:23:ff:3a:f5:8a:de:39:81:
39:42:d4:0d:3f:89:8f:4c:48:43:96:a5:ef:16:4c:
d0:0f:9a:1a:62:9c:2c:b5:e2:1f:e4:a9:ff:e0:cc:
45:d2:7c:12:22:20:f9:c7:35:13:ee:e3:11:4c:55:
cf:0d:61:99:5f:66:4e:de:c6:b3:c0:09:76:99:b0:
17:db:7e:56:41:1b:e1:9c:26:08:7c:7c:da:9b:78:
c0:d2:a9:ac:ed:b9:bd:47:ab:48:73:b7:cd:dc:5f:
93:1c:a3:59:53:6c:37:ad:e2:d3:ad:9f:50:4d:ac:
53:df:23:5a:47:70:53:de:ea:6d:b9:55:09:05:76:
40:2c:a1:1d:30:a6:dc:91:9d:2b:6a:15:41:d2:8f:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:17:AB:78:52:8C:FD:B1:3A:ED:71:C3:8E:65:B1:BD:E9:97:34
X509v3 Authority Key Identifier:
keyid:1C:01:0A:A8:43:8A:82:5A:55:42:01:3F:1B:90:D3:48:ED:8A:00:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/94AXq3hSjP2xOu1xw45lsb3plzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.62.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:96:39:27:30:af:d4:70:70:4c:d3:f1:35:96:9a:4f:52:6f:
75:97:47:0f:12:e5:5a:e4:dc:65:d1:17:76:9b:f6:ea:aa:15:
8d:a5:47:b0:b8:99:62:4e:4e:ea:39:1c:10:05:a0:01:da:9c:
e6:5c:6f:5b:34:7b:6f:57:d6:9c:ee:f8:84:0e:d2:cd:93:ea:
cf:41:29:59:73:85:25:79:6d:e0:91:5b:c5:f9:ea:0b:63:65:
ff:eb:12:c5:31:87:2f:e1:b3:0f:6b:05:a0:ef:39:29:ce:f7:
95:f2:98:eb:8b:1a:4d:5a:34:2d:c2:49:77:20:4e:12:44:82:
3d:c4:94:f7:88:72:9c:41:4d:19:31:53:d0:d0:c2:ce:26:b3:
a7:03:05:bf:77:bd:38:4a:35:94:35:07:05:33:7a:72:94:65:
50:76:1d:ff:30:88:33:8f:73:a5:c9:01:fe:92:19:ad:01:63:
26:b1:cb:74:01:39:80:02:ea:1a:54:7c:50:97:ee:97:76:df:
9f:c1:b2:d7:f8:44:d8:2f:53:61:8d:1e:02:3f:58:4d:52:a9:
fd:64:bc:78:da:d5:0d:66:65:76:b6:8e:3a:c1:15:81:54:8d:
85:5a:a4:e8:81:6a:9d:89:5a:8a:20:e9:1a:78:a4:c3:0e:3e:
e3:29:24:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:10 2024 by rpki-client on console-ams.rpki-client.org