Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/aeDFCuK0ObeFG9hTT4Ph44K3DLY.roa
File: aeDFCuK0ObeFG9hTT4Ph44K3DLY.roa (raw, json)
Hash identifier: QucVCLq90iM5UurSqEwreN95nlWBC2XF7ctNUtIHPds=
Subject key identifier: 69:E0:C5:0A:E2:B4:39:B7:85:1B:D8:53:4F:83:E1:E3:82:B7:0C:B6
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 7899
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/aeDFCuK0ObeFG9hTT4Ph44K3DLY.roa
Signing time: Tue 26 Apr 2022 14:59:38 +0000
ROA not before: Tue 26 Apr 2022 14:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.84.0/24 maxlen: 24
193.247.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30873 (0x7899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Apr 26 14:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69e0c50ae2b439b7851bd8534f83e1e382b70cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:8e:29:6d:6a:97:ac:f0:6f:3b:4b:6d:ba:
e0:92:ed:51:49:09:0a:5b:7a:48:af:c4:9f:62:c1:
07:5b:70:67:ee:0b:42:80:b4:59:9b:cd:27:26:4c:
80:d5:3a:be:55:9a:17:a4:6d:d1:ed:b2:0d:5a:11:
d1:b4:5a:dd:fa:29:dd:22:16:17:d1:8c:57:9b:4b:
2c:41:ca:3e:75:72:ee:de:9c:dc:72:60:1f:69:fa:
1b:0c:ac:47:f5:8b:bc:d0:45:6f:9a:f0:fb:1f:9b:
7b:74:b0:9f:58:b3:08:60:5d:9e:d7:85:55:4b:f5:
7f:96:3d:e6:c7:16:9a:5d:10:a0:5f:d6:41:00:01:
52:50:2b:30:d5:bd:bb:d2:d4:2d:99:1d:24:5d:fa:
3f:a7:72:7b:93:c4:90:66:5e:2f:fd:18:a1:e9:11:
b7:fb:58:3e:fe:a2:e1:b9:6d:e9:5c:1b:bd:3d:08:
a0:86:db:33:5c:f0:2c:e5:5a:07:47:a2:88:5c:22:
95:6b:4a:2f:a8:31:c8:60:0d:07:ad:e0:40:74:c3:
65:f7:e9:00:1a:39:94:99:15:0e:75:c1:3e:ef:2b:
95:88:ab:3e:63:11:bc:57:8a:5a:05:8e:d2:e5:78:
67:59:6c:60:58:da:2d:77:df:f7:e8:42:b4:82:34:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:C5:0A:E2:B4:39:B7:85:1B:D8:53:4F:83:E1:E3:82:B7:0C:B6
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/aeDFCuK0ObeFG9hTT4Ph44K3DLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.83.0-193.247.84.255
Signature Algorithm: sha256WithRSAEncryption
b8:df:40:98:2f:be:ec:51:ec:9f:ff:03:c6:45:a1:2e:9d:fe:
50:a5:2e:58:ed:a6:cd:dc:76:45:d8:27:e1:ab:ae:f6:86:e2:
1c:a8:ec:7a:07:d2:82:40:eb:2b:c7:f8:ae:42:03:11:67:30:
2f:35:e8:8a:37:55:b4:93:46:e6:95:3a:de:43:be:8b:34:f5:
e8:96:ae:b0:09:9b:75:c2:dd:60:e2:a8:16:41:6d:2d:df:88:
0e:e7:92:00:77:8c:5e:70:3b:2b:ee:d2:71:93:de:41:e3:9d:
f5:f2:a7:ca:40:78:68:52:a2:58:dd:d0:d5:3b:87:9d:51:12:
f7:31:90:92:15:ad:09:c0:0d:dd:9c:d3:f9:1d:bc:b2:40:bd:
2f:80:99:c7:11:e0:1f:a8:5e:c3:46:20:97:b0:c8:4f:14:16:
7a:61:b8:e1:88:75:67:d0:f9:a4:dc:c3:36:d0:19:5b:41:33:
7f:63:6d:e2:d0:a4:59:02:2e:9a:3a:38:4d:74:d9:c0:f3:85:
d3:e6:b6:43:f5:97:78:63:ca:d8:76:cf:17:4c:4a:28:26:5e:
6e:92:f8:e0:36:45:15:60:f1:d2:41:d3:9e:24:3e:10:b5:ed:
49:7c:f0:43:d8:4a:6d:69:bb:b9:bf:06:2f:c9:86:23:7d:9f:
97:83:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:32 2024 by rpki-client on console-fra.rpki-client.org