Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/QrtyxW1PAv8WSMWqUEpoDFo8etU.roa
File: QrtyxW1PAv8WSMWqUEpoDFo8etU.roa (raw, json)
Hash identifier: MMrUjIEAiyJ/b4wZfdoT7zxBuX0jr2/0BAvVMvkcgRk=
Subject key identifier: 42:BB:72:C5:6D:4F:02:FF:16:48:C5:AA:50:4A:68:0C:5A:3C:7A:D5
Certificate issuer: /CN=92680145cfb2371ecf4c364726b64708572c4223
Certificate serial: 01856258244675670A52FBAE460DCCC6A7E7
Authority key identifier: 92:68:01:45:CF:B2:37:1E:CF:4C:36:47:26:B6:47:08:57:2C:42:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmgBRc-yNx7PTDZHJrZHCFcsQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/QrtyxW1PAv8WSMWqUEpoDFo8etU.roa
Signing time: Fri 30 Dec 2022 09:23:41 +0000
ROA not before: Fri 30 Dec 2022 09:23:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39457
IP address blocks: 193.84.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:58:24:46:75:67:0a:52:fb:ae:46:0d:cc:c6:a7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92680145cfb2371ecf4c364726b64708572c4223
Validity
Not Before: Dec 30 09:23:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42bb72c56d4f02ff1648c5aa504a680c5a3c7ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:ae:7b:4f:7c:00:5b:50:1c:84:90:0e:b5:
f3:f4:f3:12:d7:d5:8e:a1:b7:82:7c:28:4e:45:e1:
20:8c:c2:80:f3:ee:8c:1e:66:72:48:36:17:a6:8a:
bd:7b:7a:e1:ef:90:0b:49:dd:6d:c5:74:d5:d4:08:
be:a6:15:42:b5:c6:12:c7:6b:2c:11:b2:ff:7f:c5:
ad:ba:7b:f9:e9:5b:2b:2b:b3:a7:b3:f2:85:d6:7d:
a4:18:88:3a:fa:39:65:05:06:f2:28:86:58:61:10:
68:ac:33:1b:4d:16:9c:34:82:4c:56:b2:67:dc:92:
bc:12:70:54:c8:f6:fa:46:cd:f4:28:f6:6c:10:ba:
fa:e3:96:52:7a:82:6a:7d:bd:82:e1:b8:e9:41:e8:
a1:a4:0e:33:d4:8e:74:7c:4f:17:c5:9e:f8:76:fa:
04:c0:f0:f2:e5:15:f0:99:49:49:ee:18:3b:ba:e9:
15:e9:6a:3b:d0:3a:42:8c:f8:17:c0:ff:d6:c4:89:
5f:fd:a7:e2:7e:53:3f:5f:24:e3:79:ae:13:5d:74:
8f:c4:85:6c:84:1c:c6:78:9c:d1:38:35:bb:91:34:
96:91:74:92:cb:4d:29:74:3e:06:42:19:da:48:21:
7e:76:07:f2:24:42:8a:8f:f6:2a:86:42:ba:0d:6c:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:72:C5:6D:4F:02:FF:16:48:C5:AA:50:4A:68:0C:5A:3C:7A:D5
X509v3 Authority Key Identifier:
keyid:92:68:01:45:CF:B2:37:1E:CF:4C:36:47:26:B6:47:08:57:2C:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmgBRc-yNx7PTDZHJrZHCFcsQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/QrtyxW1PAv8WSMWqUEpoDFo8etU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.25.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4f:7f:31:c8:fd:41:9b:f3:05:ff:86:79:e3:23:56:45:11:
70:ab:60:a1:71:19:0e:48:18:82:ab:fc:76:3e:6f:b4:75:4d:
52:0b:3c:98:97:7b:6f:1f:99:10:5f:2f:d0:61:34:56:02:62:
db:cd:7b:7b:54:f8:df:59:d4:0c:82:2f:ab:64:41:ce:ef:ff:
e1:5f:3e:61:b0:d4:c2:7e:8a:6e:84:d4:a4:e6:b8:93:ff:92:
0c:b2:00:6b:e6:3d:10:59:63:e1:29:c7:02:83:cf:fb:8f:18:
5c:85:7c:51:0a:8c:2e:6a:85:47:12:fa:ce:a4:be:ab:2e:4e:
9d:5f:29:48:74:95:4f:f7:ab:c0:1c:1b:45:e2:c4:e9:4f:94:
cd:b1:75:37:26:1c:4f:0a:d9:09:07:a1:fa:4c:56:a6:94:dd:
21:bf:d3:22:84:f4:63:52:f4:37:88:82:8d:06:56:ba:76:9a:
5b:05:34:bb:a4:3a:f1:fc:b5:78:1b:71:80:c0:37:c2:45:ae:
51:04:6c:64:69:c8:f5:c6:97:12:c5:44:06:3c:2f:ec:e8:17:
5a:e8:c7:f8:c1:7e:f3:ad:37:cc:d6:f3:ae:50:27:45:83:95:
26:ad:e5:08:24:26:f1:d5:b1:2c:2b:2f:5e:9b:f8:9b:10:96:
b6:e3:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:40 2023 by rpki-client on console-ams.rpki-client.org