Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/xxu2aCvREjvDCVKo_c8_3lDrng4.roa
File: xxu2aCvREjvDCVKo_c8_3lDrng4.roa (raw, json)
Hash identifier: fDvFJS1XJFWECOudZ1pgrWMdANUxtT7o9uW7cXCZoKU=
Subject key identifier: C7:1B:B6:68:2B:D1:12:3B:C3:09:52:A8:FD:CF:3F:DE:50:EB:9E:0E
Certificate issuer: /CN=d24c656cd92aef05969d5af6096be0df98acc370
Certificate serial: 0181F45662A930B741D0DA9C10A9D688EF90
Authority key identifier: D2:4C:65:6C:D9:2A:EF:05:96:9D:5A:F6:09:6B:E0:DF:98:AC:C3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kxlbNkq7wWWnVr2CWvg35isw3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/xxu2aCvREjvDCVKo_c8_3lDrng4.roa
Signing time: Tue 12 Jul 2022 21:35:10 +0000
ROA not before: Tue 12 Jul 2022 21:35:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 193.3.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:56:62:a9:30:b7:41:d0:da:9c:10:a9:d6:88:ef:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24c656cd92aef05969d5af6096be0df98acc370
Validity
Not Before: Jul 12 21:35:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c71bb6682bd1123bc30952a8fdcf3fde50eb9e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:77:42:5d:38:cc:bc:64:d4:bb:16:90:05:
43:78:67:9b:70:21:8b:f1:3c:55:be:dc:15:23:7e:
2d:42:ab:26:4b:d1:13:f2:1a:7d:43:a8:01:6b:ce:
15:21:54:bd:ef:48:76:78:b2:99:7b:63:bf:8f:f3:
45:69:e9:75:b8:03:e6:3f:1c:53:15:48:23:dd:dc:
43:71:c4:f0:eb:fc:1a:ac:eb:de:fd:03:f0:6d:81:
0f:ff:89:0d:99:79:f0:3b:3b:66:fc:a8:c8:e1:64:
57:3a:7b:c9:e5:3f:a8:fd:13:11:c2:86:88:82:34:
92:ea:1e:66:d6:64:5a:09:b1:be:bd:cb:6f:07:ff:
81:d8:dd:eb:7b:0f:9b:10:51:10:09:c2:41:89:39:
e6:10:bf:25:29:53:96:d4:06:1f:73:c4:46:40:86:
f1:6f:7f:21:e5:91:71:8c:32:0d:44:07:3f:7b:b8:
10:ca:be:ab:bb:8c:2d:fa:c9:d8:e7:71:56:a4:d2:
de:da:3b:39:13:22:79:45:7a:5a:9e:8e:a8:f4:b3:
65:b6:0a:0f:de:ea:5d:c7:68:bb:fb:bf:25:92:e6:
6d:43:82:81:23:e7:43:c8:ec:c0:2f:ac:6a:b1:0e:
0d:1c:10:36:b6:27:e1:f0:56:d1:8d:57:0d:37:8a:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:B6:68:2B:D1:12:3B:C3:09:52:A8:FD:CF:3F:DE:50:EB:9E:0E
X509v3 Authority Key Identifier:
keyid:D2:4C:65:6C:D9:2A:EF:05:96:9D:5A:F6:09:6B:E0:DF:98:AC:C3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kxlbNkq7wWWnVr2CWvg35isw3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/xxu2aCvREjvDCVKo_c8_3lDrng4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/0kxlbNkq7wWWnVr2CWvg35isw3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bf:d1:58:e4:af:96:10:74:c9:3f:1d:ef:36:01:e2:92:58:
85:34:5d:49:e3:9a:21:2e:ec:21:2f:cc:ff:8a:b6:89:f6:4e:
8f:c4:c2:eb:57:93:81:ac:2c:b4:3e:8c:d2:eb:e6:e8:34:45:
17:45:e1:c2:40:bd:1b:a6:77:0d:7a:b3:23:39:da:02:de:7d:
95:98:d4:6b:f0:51:e6:d1:cb:39:13:df:88:ed:ef:2b:bc:be:
48:ec:ed:2c:3b:13:d7:b0:74:10:ef:4c:71:c4:a5:a8:4f:d7:
72:d7:cd:12:25:6d:b7:bd:9d:48:29:ca:97:c7:0b:30:83:5e:
bb:0c:be:9b:f1:ea:56:ae:45:61:2e:7e:30:50:e7:ef:72:bd:
08:a4:e2:1c:3b:bf:f7:c2:a1:b0:c9:ee:41:5a:45:c0:70:4d:
49:87:39:fb:d2:99:11:26:39:e2:b7:35:3e:eb:ee:22:7e:49:
69:16:73:a9:82:0f:09:10:93:18:e4:30:3f:59:14:65:f8:51:
6c:04:91:01:d6:db:ba:49:54:d3:08:8b:62:2f:a4:f3:40:3a:
50:9d:78:b9:89:3d:8e:ec:08:2b:36:5a:4f:da:a2:23:a9:ec:
1b:4f:ad:18:69:8a:30:ff:b5:32:17:03:29:64:a6:db:ca:09:
81:f7:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:41 2023 by rpki-client on console-fra.rpki-client.org