Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/sUp-0sDegMloFkSEb-KavQjCGJY.roa
File: sUp-0sDegMloFkSEb-KavQjCGJY.roa (raw, json)
Hash identifier: H+KpCHQ2ca+KFzRkCg2/cNPWDkuUWmIV9ScWkf2f54w=
Subject key identifier: B1:4A:7E:D2:C0:DE:80:C9:68:16:44:84:6F:E2:9A:BD:08:C2:18:96
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 024EFD0C
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/sUp-0sDegMloFkSEb-KavQjCGJY.roa
Signing time: Sat 01 Jan 2022 09:58:46 +0000
ROA not before: Sat 01 Jan 2022 09:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48038
IP address blocks: 193.73.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38731020 (0x24efd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Jan 1 09:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b14a7ed2c0de80c9681644846fe29abd08c21896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:27:48:31:16:c6:f4:86:ed:0c:e3:c7:81:
9f:69:fd:1a:cf:dc:11:53:30:25:76:62:21:9c:ed:
a7:52:4a:a3:9f:cc:fa:aa:5a:71:5a:e0:44:c2:ea:
28:be:d6:2a:a1:9a:58:35:d0:f6:ae:10:af:81:66:
e8:99:4b:2e:a0:ea:79:6e:14:ba:f2:44:bc:30:b5:
1b:62:5b:c6:88:f6:06:19:8b:9d:0f:fb:ef:51:21:
ef:51:57:ae:e8:37:83:d9:0b:6a:1d:89:0e:ac:ec:
c6:e9:dd:78:bd:de:fe:9e:24:a0:39:c4:b1:41:08:
7c:bb:8f:a4:25:cf:bc:64:9b:1d:40:c1:ee:99:9f:
02:87:ab:c8:b0:eb:ba:8b:4b:6e:4d:57:e2:41:8f:
85:e8:7f:f1:42:35:ed:e9:08:3b:e4:7a:a2:b9:93:
9a:8f:28:fb:a8:9a:42:9e:7f:8f:72:fa:b1:be:66:
d2:ea:77:ca:5e:74:4e:8e:3c:0b:84:98:c7:a5:d7:
35:ad:86:b8:7c:cf:69:39:2d:00:81:60:ba:68:29:
57:57:b2:ba:c3:3f:ed:8a:7f:16:a9:c7:99:20:5d:
9b:f3:d2:07:0b:e0:84:0f:e6:64:72:b6:af:85:bc:
f9:69:6f:65:f7:6a:0f:5f:52:c7:ea:f1:ac:c9:f2:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4A:7E:D2:C0:DE:80:C9:68:16:44:84:6F:E2:9A:BD:08:C2:18:96
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/sUp-0sDegMloFkSEb-KavQjCGJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.208.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c0:46:0e:27:19:54:d4:e3:4c:af:3a:c9:6b:df:44:2f:00:
c1:df:7f:f2:40:0b:0a:0b:c6:9d:26:ec:aa:38:fb:0a:ee:f5:
bc:97:d8:81:06:ae:9c:15:2a:e0:21:a5:08:48:8e:ee:82:20:
9c:c8:88:99:b4:87:e3:0f:43:13:91:e7:b3:a2:77:5a:ec:5b:
59:ed:0c:ad:17:9c:3f:be:38:4e:6b:d8:d4:c9:48:77:6a:9d:
a7:c9:8b:c9:1b:cd:09:2f:12:cf:69:fd:d1:30:f5:ca:2c:54:
e1:ab:2d:c8:1c:a2:a8:0d:83:14:03:3f:2a:79:e4:6b:ef:5f:
bb:a4:af:9a:05:2d:b0:26:73:d6:0e:e3:65:64:cf:48:e1:e6:
1f:bd:9b:d9:cd:57:de:6e:1f:7d:d3:8a:89:b6:ba:1a:c3:52:
5a:3e:eb:af:27:33:4a:d4:2f:e9:c5:30:f1:94:b9:91:db:86:
48:fd:6a:91:b7:8e:af:f4:a8:dc:b6:2f:9b:9c:c9:0c:f2:88:
39:22:b6:7e:14:78:62:f6:c2:b9:e9:11:2d:32:32:a6:e5:65:
25:41:bd:11:86:fe:ac:6f:1d:b2:77:61:a2:72:63:3d:45:35:
74:9e:da:c5:2b:b3:73:8b:c9:9d:f9:cf:20:40:db:29:a8:71:
97:55:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org