Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/4wW9uPIITj-ZM_R66POBDDLI7sU.roa
File: 4wW9uPIITj-ZM_R66POBDDLI7sU.roa (raw, json)
Hash identifier: g4Wj5r/euhhcDK5DkWPdmmI4VQv6zFjRsGAJF/j9gkw=
Subject key identifier: E3:05:BD:B8:F2:08:4E:3F:99:33:F4:7A:E8:F3:81:0C:32:C8:EE:C5
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0BC77A32
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/4wW9uPIITj-ZM_R66POBDDLI7sU.roa
Signing time: Thu 13 Jan 2022 10:09:56 +0000
ROA not before: Thu 13 Jan 2022 10:09:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 37153
IP address blocks: 194.233.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197622322 (0xbc77a32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 13 10:09:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e305bdb8f2084e3f9933f47ae8f3810c32c8eec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:cf:39:8a:61:03:d6:9c:4b:bb:a9:e7:ce:
0d:e8:1c:8a:36:ba:05:ef:2e:6f:b7:6d:69:57:67:
04:c5:c2:70:2f:9b:24:e0:5e:ef:15:fb:0e:1f:6b:
1e:12:a7:b1:be:ee:80:d3:2f:31:ae:ec:18:0b:69:
e8:fe:7f:aa:0b:83:a9:e7:54:bf:7e:f8:07:03:5d:
46:0b:b2:48:c7:00:76:2e:c4:a7:cf:2c:6f:e1:d7:
d9:1d:b6:14:0f:63:ef:01:96:c1:31:0e:75:f2:2c:
03:78:f2:22:d6:0d:ae:8f:10:d7:da:ae:88:ee:cd:
aa:3f:26:76:60:b3:9c:93:4d:c5:f2:f4:32:19:6a:
f5:a9:35:2e:bf:d4:45:36:dc:4b:d9:74:a8:a1:03:
eb:ea:b6:d9:d1:c0:62:7d:2d:a9:03:f2:90:f3:bd:
42:94:32:ff:15:4d:15:92:47:be:8d:81:ab:90:ec:
9d:7f:f9:a6:dd:d8:07:00:1e:c4:e4:07:04:03:20:
df:a0:41:5b:d7:29:f3:7b:ea:de:eb:26:08:0d:ec:
d4:a3:79:09:2f:e6:ac:95:db:8e:9f:96:2b:05:8f:
4c:a2:f3:78:3f:50:50:ed:c9:55:89:b7:10:9e:10:
d1:6e:2d:8d:1a:18:50:00:b9:00:35:01:58:b2:f6:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:BD:B8:F2:08:4E:3F:99:33:F4:7A:E8:F3:81:0C:32:C8:EE:C5
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/4wW9uPIITj-ZM_R66POBDDLI7sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.145.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e7:f6:9f:63:43:9c:f4:e3:bf:f1:e9:de:0a:55:cf:4e:34:
87:05:bd:6c:2a:62:4f:8e:46:27:4a:ab:87:d9:94:c7:31:50:
8d:5d:89:3f:67:41:0c:bc:7c:61:0e:51:17:f7:64:d2:53:5c:
dd:51:ce:e1:03:16:43:c9:e7:dd:12:ea:28:65:01:a8:45:2f:
f4:3f:53:32:a7:ca:5b:60:64:3f:6d:df:d1:85:fb:6e:f7:3c:
14:9b:a1:3a:f9:f2:c4:de:c5:f7:87:35:2c:8b:22:3e:97:6c:
08:ee:57:9e:a4:45:47:df:e4:16:4a:ee:b1:32:df:59:82:3e:
93:79:f6:32:ba:24:1e:0c:43:01:ee:40:e4:f0:a7:49:e0:9b:
f1:63:ae:16:f3:ed:03:dc:d7:f5:08:01:ed:01:c0:f7:67:3c:
f5:84:b6:58:56:80:fd:f7:25:f8:ef:6d:f9:77:b6:c3:eb:ad:
8f:1a:92:ab:14:ed:67:9e:d4:58:08:b8:a9:c7:f8:3a:f8:3f:
80:90:4a:0e:d1:4a:21:b3:fc:86:c6:bc:5a:75:95:2b:7d:e9:
eb:a8:3a:3a:2d:1f:ca:cb:0c:41:68:86:cb:a5:27:c9:57:c3:
5c:23:0d:68:74:57:c6:c9:52:78:26:87:55:02:fa:8c:39:b6:
12:a5:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org