Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/y3z636Pf1x0-nTki8tFsjvXtKxU.roa
File: y3z636Pf1x0-nTki8tFsjvXtKxU.roa (raw, json)
Hash identifier: G6HrpnlPyxnYRYThxQ+F9OSHJldCZPe3tSq3WC88ZoQ=
Subject key identifier: CB:7C:FA:DF:A3:DF:D7:1D:3E:9D:39:22:F2:D1:6C:8E:F5:ED:2B:15
Certificate issuer: /CN=05072a23730bbe1a31051f07e3bb2d39d6085527
Certificate serial: 018465BA5D0B673C364C70724D3AE250E20B
Authority key identifier: 05:07:2A:23:73:0B:BE:1A:31:05:1F:07:E3:BB:2D:39:D6:08:55:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQcqI3MLvhoxBR8H47stOdYIVSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/y3z636Pf1x0-nTki8tFsjvXtKxU.roa
Signing time: Fri 11 Nov 2022 08:07:03 +0000
ROA not before: Fri 11 Nov 2022 08:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3561
IP address blocks: 130.193.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:ba:5d:0b:67:3c:36:4c:70:72:4d:3a:e2:50:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05072a23730bbe1a31051f07e3bb2d39d6085527
Validity
Not Before: Nov 11 08:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb7cfadfa3dfd71d3e9d3922f2d16c8ef5ed2b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:20:c1:ec:64:cd:fd:60:6a:3b:8f:21:5d:
b4:28:72:42:13:98:85:b0:e7:61:6b:69:a7:78:1e:
dc:6c:c5:b1:55:9c:f5:12:15:51:34:b8:db:e7:ec:
f8:26:88:da:25:38:2a:8f:aa:48:aa:34:56:99:28:
e5:d0:5e:ba:8a:2a:b9:48:c2:16:72:95:c5:f4:bd:
3a:b6:dc:90:5c:e8:c5:e7:c8:b1:39:01:2e:e1:d4:
e0:c4:17:e8:69:a5:ad:6e:6b:31:cf:47:99:e4:1b:
70:67:22:0c:76:29:c3:84:07:1a:fe:da:e9:7a:d4:
4c:3d:90:79:a0:de:e3:b6:99:66:ae:71:a0:10:c7:
11:fc:62:6a:a8:b9:66:55:ad:07:a6:c5:1a:af:e3:
51:1a:e4:2b:7f:b2:dd:14:77:ab:09:29:ed:dc:27:
e5:8a:ac:4d:49:e9:b5:8d:a0:8c:35:25:cd:41:05:
6f:5f:c3:3e:da:0c:26:3f:20:0d:4f:5a:ae:e6:21:
19:ca:14:68:99:c0:d0:13:29:59:5d:dc:2a:b9:84:
1c:cc:45:27:8e:d1:fa:0b:ce:b6:a8:3a:af:e1:85:
d9:3e:17:e2:93:17:93:7e:2b:2e:be:28:42:ad:43:
7e:02:e4:5e:be:5c:95:e0:00:7e:e5:6e:13:36:01:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:FA:DF:A3:DF:D7:1D:3E:9D:39:22:F2:D1:6C:8E:F5:ED:2B:15
X509v3 Authority Key Identifier:
keyid:05:07:2A:23:73:0B:BE:1A:31:05:1F:07:E3:BB:2D:39:D6:08:55:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQcqI3MLvhoxBR8H47stOdYIVSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/y3z636Pf1x0-nTki8tFsjvXtKxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/BQcqI3MLvhoxBR8H47stOdYIVSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
50:89:68:b0:8b:17:5d:1a:d3:b0:b8:05:bb:12:13:7f:ae:4c:
f5:e4:c6:f5:25:81:8d:28:9c:d6:7c:37:6c:2c:6a:77:df:69:
fe:89:fe:e3:93:44:47:e9:5f:2e:c3:af:79:cc:17:97:80:88:
e1:68:79:8a:b8:90:46:16:46:f3:3e:d0:c2:b8:dd:d3:e2:7f:
1e:45:1b:9c:37:f7:57:65:de:28:22:70:71:7b:db:23:79:09:
2b:6e:c4:55:fe:28:68:32:89:65:25:d9:83:8d:94:9b:bc:a3:
12:40:1d:1a:70:a6:8c:7b:be:de:51:c0:70:e7:e0:a9:3b:e0:
d5:ed:f6:16:f4:5e:d9:3b:f5:ff:fb:3e:3b:7f:61:5b:39:ab:
6d:67:85:96:c2:1a:26:cb:6d:15:a7:af:b1:1e:31:c4:fd:7b:
b6:29:f3:68:63:73:a6:c8:8f:75:68:3a:fa:db:14:27:74:1f:
ed:37:2b:de:d4:c2:84:18:d2:7c:24:8c:73:8e:38:81:e1:0e:
e0:50:9d:75:40:c9:ce:48:46:70:54:97:13:12:63:1a:98:8c:
79:96:9c:22:47:d9:b2:c5:f5:9f:75:6f:1b:30:b3:e6:34:28:
e1:9d:8c:f0:23:51:d8:18:a8:d4:5b:2b:5c:c5:76:7e:d9:20:
35:8c:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:00 2023 by rpki-client on console-ams.rpki-client.org