Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/dedSkXZh7cBDmrFWMcXdDungSDc.roa
File: dedSkXZh7cBDmrFWMcXdDungSDc.roa (raw, json)
Hash identifier: J7vRNL2uNOnh8tU1SUNgJJu/WsqgaU4QZ4M/r09BQYI=
Subject key identifier: 75:E7:52:91:76:61:ED:C0:43:9A:B1:56:31:C5:DD:0E:E9:E0:48:37
Certificate issuer: /CN=543b0e6e50655043357a552d4b6c2b302de597f0
Certificate serial: 8C983D
Authority key identifier: 54:3B:0E:6E:50:65:50:43:35:7A:55:2D:4B:6C:2B:30:2D:E5:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDsOblBlUEM1elUtS2wrMC3ll_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/dedSkXZh7cBDmrFWMcXdDungSDc.roa
Signing time: Sat 01 Jan 2022 03:56:16 +0000
ROA not before: Sat 01 Jan 2022 03:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42724
IP address blocks: 193.3.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9214013 (0x8c983d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543b0e6e50655043357a552d4b6c2b302de597f0
Validity
Not Before: Jan 1 03:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75e752917661edc0439ab15631c5dd0ee9e04837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:8a:73:74:98:2d:86:47:b2:37:15:f8:0e:
1e:ec:0d:8d:e7:c2:b0:ea:c6:2a:d5:a6:46:a4:04:
a9:09:eb:30:15:e9:c6:c6:7c:85:23:9a:3d:2c:17:
35:3f:1e:e0:05:12:c1:ed:1c:cf:a3:9f:2a:8e:af:
40:0a:c4:c1:93:1a:d1:31:a9:25:a5:ba:b9:7f:d0:
c0:1f:2e:4d:ef:5a:ad:36:11:ea:b4:00:9b:de:14:
25:e4:53:41:4d:f5:87:4c:33:b3:fd:c9:86:73:18:
6b:4a:e2:af:65:37:fe:de:01:34:5c:68:ac:11:02:
f3:30:9a:df:88:13:40:3b:ca:d5:38:fc:cf:f8:51:
31:2c:34:e9:1e:a9:8a:a8:2d:78:60:2a:95:7e:3a:
8b:12:6b:d4:3d:b5:84:8c:6a:03:48:58:0b:89:33:
60:dc:b5:d3:2f:f5:24:98:98:08:6b:4f:e5:29:8a:
91:85:aa:b6:9c:94:b8:1c:95:14:64:6f:a3:68:51:
47:32:c9:b0:3c:f1:78:97:16:cc:39:23:46:77:61:
f5:c8:af:29:73:bb:aa:bf:da:b7:9a:f5:19:e4:5e:
4c:04:0f:c1:aa:a0:d2:f6:7b:e6:68:74:2c:c1:69:
a0:fc:c9:93:54:77:b0:35:bb:82:93:37:40:d0:b7:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E7:52:91:76:61:ED:C0:43:9A:B1:56:31:C5:DD:0E:E9:E0:48:37
X509v3 Authority Key Identifier:
keyid:54:3B:0E:6E:50:65:50:43:35:7A:55:2D:4B:6C:2B:30:2D:E5:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDsOblBlUEM1elUtS2wrMC3ll_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/dedSkXZh7cBDmrFWMcXdDungSDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/VDsOblBlUEM1elUtS2wrMC3ll_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.167.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c6:b8:1a:c9:4a:9a:d0:9f:99:bc:3e:ca:ec:a8:18:9e:37:
0a:42:44:2f:71:8e:92:5a:ce:b8:21:2d:48:f3:2f:a3:4f:39:
17:8e:82:ff:e3:56:27:77:66:60:fa:e9:81:fd:90:2b:4a:74:
55:9d:a4:7c:d9:b6:bb:5b:bc:2e:bf:09:9f:87:44:64:05:07:
a5:15:3a:29:bc:0b:af:09:2e:32:18:08:0b:03:9d:fb:aa:3f:
3a:47:b5:ff:74:49:cf:3e:17:29:5b:2e:3c:34:8e:91:17:ed:
45:bc:14:ac:c7:50:14:d9:97:66:d5:ca:dc:1b:22:b4:fb:3a:
73:2d:02:7d:39:d0:2a:39:19:53:43:93:38:ae:44:24:7a:67:
dd:8d:43:02:11:3d:45:42:1f:df:94:fe:4f:3d:45:63:3d:9e:
29:66:0f:b2:ce:86:59:ca:4b:bf:66:ce:32:8e:e8:24:e0:66:
01:7c:85:38:46:b5:23:02:fc:4c:5b:dc:a2:94:0f:fe:ea:fc:
74:d6:5b:80:5f:68:42:36:c2:7b:65:c2:90:e5:05:d3:be:79:
39:e6:53:82:55:66:ff:bf:90:73:91:0f:0f:9e:06:11:e9:79:
4d:4b:6d:64:14:df:14:6a:5a:23:60:d1:3c:5d:0e:e7:32:60:
70:9b:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-fra.rpki-client.org