Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/ITHzOoUgVu8UJyR3m7e8a8MBcpA.roa
File: ITHzOoUgVu8UJyR3m7e8a8MBcpA.roa (raw, json)
Hash identifier: qxJr1xssFzZdoOx/teNqkIdCvIh063jlvvMKkpwiin0=
Subject key identifier: 21:31:F3:3A:85:20:56:EF:14:27:24:77:9B:B7:BC:6B:C3:01:72:90
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 014FA10E
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/ITHzOoUgVu8UJyR3m7e8a8MBcpA.roa
Signing time: Sat 01 Jan 2022 12:59:50 +0000
ROA not before: Sat 01 Jan 2022 12:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35023
IP address blocks: 193.221.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21995790 (0x14fa10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Jan 1 12:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2131f33a852056ef142724779bb7bc6bc3017290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:d6:da:00:f4:c2:69:91:a8:9e:43:22:4b:
41:7d:a3:72:1f:e1:48:1f:75:e2:0c:96:d0:b9:ea:
64:e9:c9:03:d5:4b:e2:a8:dd:62:b2:5a:40:da:5f:
61:48:69:21:12:b8:98:7d:59:fd:da:4a:fc:5a:89:
1e:cb:67:62:4b:06:1c:8b:48:b1:ba:c4:19:25:3f:
b8:28:71:6d:bd:3f:88:7b:7d:c8:6b:fe:60:e3:95:
c8:e0:f3:84:46:8d:3a:66:26:b5:23:9e:7e:88:85:
d9:24:fe:49:cd:ef:f1:f7:d9:30:2b:74:2d:34:4f:
39:cd:dc:f2:68:6d:ff:d4:3c:c3:f8:ce:d6:47:f4:
c1:90:ac:bc:46:ec:cc:dc:3c:46:1f:93:c3:1c:f6:
98:73:56:d3:04:d0:9b:09:39:2b:44:3a:e3:0e:0b:
6c:fe:f4:6b:ca:1e:e2:81:fb:4f:bd:82:05:a1:18:
95:4c:64:dc:1c:77:fc:6e:17:a6:65:97:b1:58:48:
d0:30:71:e8:9d:cf:0d:83:6c:72:a5:82:29:8e:b4:
59:a9:14:6b:e7:36:1e:c5:a1:4a:47:1e:42:4a:64:
59:f4:ed:ee:4e:c9:96:c8:b4:26:20:6b:85:cc:91:
f3:fe:dc:e9:68:92:d2:2c:9a:9f:cf:be:ed:c9:e0:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:31:F3:3A:85:20:56:EF:14:27:24:77:9B:B7:BC:6B:C3:01:72:90
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/ITHzOoUgVu8UJyR3m7e8a8MBcpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.112.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4a:e3:e8:15:33:22:b7:76:b5:67:ce:0e:05:db:6c:ff:8c:
82:77:c5:cd:ea:53:64:da:b5:d1:dd:7a:e9:8f:95:e3:6f:f7:
4e:14:df:f0:ff:e4:36:d3:89:cf:51:7d:9b:55:a1:b2:06:a8:
d7:7f:b3:0e:9d:86:de:f9:25:cb:97:16:a5:15:c5:03:d2:26:
24:c8:6e:bc:c3:5d:3b:06:71:a0:36:ed:21:0c:16:9b:ca:55:
23:85:26:d2:0a:4a:8c:8d:b1:1d:ba:a3:98:43:7b:a1:1c:1a:
8a:a0:79:2a:5b:e9:34:4d:b6:10:bf:7a:e0:59:02:95:3d:bd:
66:f4:96:e9:40:c5:1b:23:da:5c:d3:64:95:42:0d:e7:7a:5b:
53:7a:63:c5:00:c6:12:61:47:ed:b7:ad:bc:c9:6c:de:45:0f:
4c:a6:58:5e:c0:f0:ef:be:84:82:d3:c5:7b:6a:21:2c:be:45:
22:77:0f:06:b6:3e:08:ee:29:82:e9:8b:66:76:5f:26:71:e6:
fd:06:77:c1:f3:06:ea:be:c3:25:e1:47:7c:8c:63:e0:56:7b:
c8:4f:91:b6:ad:80:1f:75:3d:29:6c:2f:f9:e1:1f:db:57:c9:
6e:03:1f:3d:b5:a2:4d:18:d8:32:2b:57:13:c9:f4:ce:55:86:
9d:0d:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:54 2024 by rpki-client on console-fra.rpki-client.org