Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/qoXIvrahNxNKy7BYeMP2IKzrPHk.roa
File: qoXIvrahNxNKy7BYeMP2IKzrPHk.roa (raw, json)
Hash identifier: Y290ahPbEXCy4pPxmd+Qiv4uje2oBPhKD0N5xQ/DFE0=
Subject key identifier: AA:85:C8:BE:B6:A1:37:13:4A:CB:B0:58:78:C3:F6:20:AC:EB:3C:79
Certificate issuer: /CN=ff9f111bba32bc1439743df23e14ddd87101eb5d
Certificate serial: CDC7E6
Authority key identifier: FF:9F:11:1B:BA:32:BC:14:39:74:3D:F2:3E:14:DD:D8:71:01:EB:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_58RG7oyvBQ5dD3yPhTd2HEB610.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/qoXIvrahNxNKy7BYeMP2IKzrPHk.roa
Signing time: Sat 01 Jan 2022 09:01:00 +0000
ROA not before: Sat 01 Jan 2022 09:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.163.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13486054 (0xcdc7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9f111bba32bc1439743df23e14ddd87101eb5d
Validity
Not Before: Jan 1 09:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa85c8beb6a137134acbb05878c3f620aceb3c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:b3:4b:5e:66:86:62:d3:2e:37:f2:97:72:
e4:18:8a:f0:ba:07:58:aa:0a:87:a0:17:f5:01:75:
16:e0:65:56:06:d9:c2:01:7c:ab:63:51:1b:6b:00:
56:a9:d8:ec:51:a3:fb:8e:61:c4:fe:4c:7b:4d:2e:
04:8d:65:f1:08:69:25:3e:f0:d1:64:88:e6:3e:51:
c1:39:2d:f9:24:9c:79:cb:d5:3e:e6:b1:cf:49:8f:
87:ff:a5:46:05:1f:9c:cd:a5:20:18:9a:40:ed:1e:
92:fd:4e:a9:f7:95:f8:27:ce:da:c1:0b:75:fa:35:
7b:ea:c7:ce:02:8d:f8:d7:9b:3e:b4:96:63:9b:b6:
83:bf:18:c9:6d:0a:ee:13:ad:5c:28:8b:a7:0c:5d:
6e:a2:5c:7e:08:38:eb:90:4e:ec:8e:a9:34:b6:eb:
20:fc:85:3a:76:59:79:de:bf:26:c7:65:20:dc:c2:
e2:ad:c8:9e:3f:87:fc:16:25:f1:2b:a7:54:6a:a2:
c2:26:bd:9e:a3:22:b2:90:b5:23:2e:6f:f9:a3:24:
df:4f:37:f7:aa:95:c9:e8:e9:78:95:54:5a:cc:b7:
e4:ee:71:96:eb:79:71:9c:b5:ea:d3:f3:ba:7e:82:
08:31:8a:87:01:e2:ca:8f:fd:05:e5:6d:f8:13:d4:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:C8:BE:B6:A1:37:13:4A:CB:B0:58:78:C3:F6:20:AC:EB:3C:79
X509v3 Authority Key Identifier:
keyid:FF:9F:11:1B:BA:32:BC:14:39:74:3D:F2:3E:14:DD:D8:71:01:EB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_58RG7oyvBQ5dD3yPhTd2HEB610.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/qoXIvrahNxNKy7BYeMP2IKzrPHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/_58RG7oyvBQ5dD3yPhTd2HEB610.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.192.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ec:29:37:0a:96:e6:34:a4:96:9d:a5:fe:55:85:08:0b:3f:
ab:2d:2d:0a:0b:0f:14:ef:8c:4e:00:1a:cc:90:2b:00:07:3b:
eb:e9:2f:fb:58:2a:eb:ca:81:45:9e:2f:0c:e5:70:f9:00:18:
6a:53:94:ef:9a:80:52:da:2f:50:e7:6d:74:9d:70:51:1e:2e:
d2:2e:2e:1d:8b:61:9e:a6:81:e9:4d:5a:24:14:b8:cd:1b:f5:
70:1a:ab:4b:ca:5b:c5:8a:c0:10:95:6a:e0:04:46:59:b7:ce:
16:57:79:34:4e:0f:21:ca:14:26:55:e4:9d:67:7d:fe:22:8b:
2d:7e:39:b7:fa:87:d3:a8:7f:17:73:65:42:4d:ef:2a:aa:d5:
ba:20:1e:c6:55:a5:50:9e:73:83:ae:d0:6e:1e:85:71:70:77:
ce:43:dc:fd:70:2b:0f:4f:d6:ec:b9:b1:47:8f:3c:f1:4b:e5:
a2:27:71:3a:64:22:e9:e0:c7:0f:6f:a7:14:43:92:04:ec:a9:
86:cb:f3:e9:bb:f1:21:85:e7:36:31:f8:52:59:7c:dd:14:9e:
04:0e:e5:f1:4a:48:be:6c:99:5c:18:67:ff:9c:47:03:a1:c1:
df:96:c8:2f:ab:db:63:7f:09:ed:e7:d0:d0:40:63:c6:2e:34:
28:d1:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-fra.rpki-client.org