Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/xNrfbUSv9rEQ1pB9D4lFDhAujZE.roa
File: xNrfbUSv9rEQ1pB9D4lFDhAujZE.roa (raw, json)
Hash identifier: ZzhTrHZMALSAFhl2RZSSTkmO2YCaE0PLnHbZq+39uPY=
Subject key identifier: C4:DA:DF:6D:44:AF:F6:B1:10:D6:90:7D:0F:89:45:0E:10:2E:8D:91
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0183832F28AAB39B61468D760A872EF519C4
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/xNrfbUSv9rEQ1pB9D4lFDhAujZE.roa
Signing time: Wed 28 Sep 2022 08:20:49 +0000
ROA not before: Wed 28 Sep 2022 08:20:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 11402
IP address blocks: 193.160.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:2f:28:aa:b3:9b:61:46:8d:76:0a:87:2e:f5:19:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Sep 28 08:20:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4dadf6d44aff6b110d6907d0f89450e102e8d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:f4:e5:d4:2e:46:e6:38:23:f2:6f:a6:11:
c9:5c:4b:dc:dc:d9:b6:28:8a:0a:bb:76:81:e4:bf:
09:e6:2a:6d:83:1a:c3:be:64:63:9a:6a:f8:d7:8b:
2d:d9:e9:7e:5d:b7:d0:47:4b:b7:65:34:f6:56:11:
31:7a:d8:11:6b:16:d1:e4:39:70:01:c3:96:f3:e2:
24:eb:9f:65:c4:c0:ca:f3:71:ff:03:42:b6:42:2d:
12:c4:cf:4b:99:2f:5a:16:1e:62:81:c9:4d:eb:a0:
cf:8e:04:12:97:e9:08:5b:e4:b6:da:9c:d6:34:9c:
00:e0:4d:04:63:c8:32:3e:dd:79:25:45:fd:86:5d:
87:ec:60:dc:59:c1:fd:79:db:42:d9:e7:b8:a9:0e:
c3:ab:84:57:a5:ba:71:c3:19:56:f2:39:c4:94:37:
d2:2f:d3:94:e8:ee:23:a0:ef:6f:b1:82:aa:87:ea:
89:39:6f:1d:0b:03:ff:3c:2d:49:13:c0:1a:a3:a8:
a2:23:bd:b0:11:fa:f4:d2:d9:2e:94:3b:2e:d1:ab:
ff:cf:f2:d7:bd:4e:b4:de:ff:c6:99:d7:a1:af:bc:
97:a6:58:fd:e2:8d:98:1c:dc:be:ee:ca:92:93:19:
26:4e:e1:10:a2:4f:f8:6c:77:9a:01:b6:80:94:37:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:DF:6D:44:AF:F6:B1:10:D6:90:7D:0F:89:45:0E:10:2E:8D:91
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/xNrfbUSv9rEQ1pB9D4lFDhAujZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:59:e0:52:5c:00:71:5b:d9:05:8b:e1:8c:89:29:a0:b7:9c:
5d:dc:9c:91:12:dd:aa:e1:00:00:72:c7:1a:20:3a:14:5a:1b:
00:83:fe:58:e2:08:6b:14:b6:14:76:06:f6:19:72:b7:77:11:
87:02:9f:dd:91:4d:e9:a7:d1:38:74:40:9d:4b:a0:94:1c:60:
b4:cc:4e:1a:88:63:15:4e:bd:cf:f3:6b:77:f8:44:99:c3:09:
24:0c:10:4c:46:31:67:71:34:0b:0b:b6:bd:5b:6e:85:30:aa:
7b:67:3a:e2:e6:e4:14:bf:37:cf:a1:e2:e2:ce:42:29:18:aa:
c3:e4:44:82:d5:81:e8:c1:80:e2:90:3a:c4:ba:d2:82:75:43:
6c:19:23:3a:c3:18:45:0f:8d:60:14:80:bf:b4:c1:2e:69:5b:
73:47:c6:95:f4:3c:77:90:0d:e4:e2:66:e1:a7:de:f9:27:01:
ad:9a:e9:3a:1a:b0:50:b8:2d:35:bf:9e:7b:c2:46:ee:f0:0e:
10:94:a2:11:f7:7e:3f:75:73:03:11:32:32:c4:12:7f:6c:08:
47:c8:3e:c5:08:f3:e1:a0:c8:27:da:a4:1b:9f:92:67:7e:3f:
a2:56:80:62:e1:b0:1b:6f:2c:33:d2:29:84:0f:ba:5a:a4:bf:
0a:16:a6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org