Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/dtz4p5awZgCU0ytitGjtuIyd0e4.roa
File: dtz4p5awZgCU0ytitGjtuIyd0e4.roa (raw, json)
Hash identifier: oXkLY8qsF1MshG2Mng+cI82J857gafnA6p2nbjYTWcQ=
Subject key identifier: 76:DC:F8:A7:96:B0:66:00:94:D3:2B:62:B4:68:ED:B8:8C:9D:D1:EE
Certificate issuer: /CN=d24c656cd92aef05969d5af6096be0df98acc370
Certificate serial: F98561
Authority key identifier: D2:4C:65:6C:D9:2A:EF:05:96:9D:5A:F6:09:6B:E0:DF:98:AC:C3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kxlbNkq7wWWnVr2CWvg35isw3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/dtz4p5awZgCU0ytitGjtuIyd0e4.roa
Signing time: Sat 01 Jan 2022 12:05:09 +0000
ROA not before: Sat 01 Jan 2022 12:05:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 193.3.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16352609 (0xf98561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24c656cd92aef05969d5af6096be0df98acc370
Validity
Not Before: Jan 1 12:05:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76dcf8a796b0660094d32b62b468edb88c9dd1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:e7:b6:e3:d2:78:8f:20:04:e4:0e:c3:74:
e2:37:b8:f7:39:aa:cc:f3:5c:b4:f4:0d:da:11:e5:
a8:7d:47:62:51:f6:c6:00:da:6a:78:1b:56:bc:29:
87:e6:d1:c3:4d:2a:ac:10:6e:0f:5f:f6:2d:9c:f3:
bb:7c:a6:10:00:ed:43:fa:75:da:f5:5b:0a:8d:f8:
19:2e:07:83:f5:c7:82:56:26:b7:3b:7e:0f:68:d7:
34:3b:a2:76:91:1c:12:b7:7c:7a:57:23:fc:35:5e:
09:3b:ed:a3:53:e5:8f:f6:a0:2d:e3:4f:d8:9e:de:
1a:7e:51:38:34:aa:b7:cd:0d:97:da:79:39:a1:d0:
23:7c:cc:f3:e8:9b:2c:72:ab:80:7a:17:b6:e0:b2:
2b:32:d4:69:22:24:ae:e5:6b:26:b7:b5:d4:da:3d:
b1:a8:49:2f:5e:2e:b5:e9:db:ef:aa:47:5b:34:07:
49:d5:2a:ba:13:63:57:c4:bb:cf:6b:08:36:97:74:
18:e7:fa:59:d3:56:ca:fb:95:2f:aa:58:82:cc:19:
95:50:1d:a8:c4:dd:3e:8d:b0:11:45:34:47:be:c2:
ec:9e:75:c7:ce:df:ad:94:40:df:e9:05:36:ac:ae:
c1:f8:12:28:2e:45:9d:b2:8e:68:65:bb:20:1c:79:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:F8:A7:96:B0:66:00:94:D3:2B:62:B4:68:ED:B8:8C:9D:D1:EE
X509v3 Authority Key Identifier:
keyid:D2:4C:65:6C:D9:2A:EF:05:96:9D:5A:F6:09:6B:E0:DF:98:AC:C3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kxlbNkq7wWWnVr2CWvg35isw3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/dtz4p5awZgCU0ytitGjtuIyd0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/0kxlbNkq7wWWnVr2CWvg35isw3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fc:ba:31:f0:4d:7c:0e:09:09:19:83:9e:29:e8:9a:ff:4c:
13:89:c8:8f:de:f3:df:85:37:f8:24:29:4b:61:53:d6:3d:5a:
96:ef:3a:31:a6:14:91:1f:f2:33:df:43:73:0a:24:04:b6:3f:
bd:0c:e4:cf:2e:e8:90:7a:76:c2:0f:40:a0:b5:93:06:e3:a1:
bb:92:08:ec:4c:b2:1c:78:91:88:61:b1:eb:e0:97:de:9e:c4:
7f:2d:6a:8c:34:ef:ed:1c:2a:8b:fa:a7:a2:1b:c1:31:60:f8:
13:5d:e5:34:a0:38:78:7b:5a:d1:e2:e0:77:d6:25:45:c7:fb:
70:76:a7:7a:b4:c9:d3:67:bb:fa:a6:e2:6c:a8:a0:0f:48:00:
30:ba:a9:c8:37:ef:f7:98:5c:bf:53:ff:a8:2d:55:81:22:ba:
46:65:34:70:45:ee:9b:85:7e:a9:00:33:fd:45:08:4a:1f:93:
0b:17:0c:85:e8:3e:91:01:18:8d:d1:6f:0c:09:f5:a2:12:eb:
fd:4d:8d:bd:54:2d:4a:c4:ea:e9:76:b7:51:02:cc:a2:ec:3b:
ea:29:81:a2:27:85:6e:9e:f4:a1:da:c4:9b:6d:ec:cb:3f:18:
0a:3d:b9:5a:d7:a6:85:c7:0a:66:ad:b1:33:a5:ad:35:cb:24:
fd:94:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org