Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/w65kPjcn2MJn3AhSitnuiXbeTGM.roa
File: w65kPjcn2MJn3AhSitnuiXbeTGM.roa (raw, json)
Hash identifier: epstXDKHTBYwpK/47s5kynrdm2gsm9HFX+fPhSbNUMM=
Subject key identifier: C3:AE:64:3E:37:27:D8:C2:67:DC:08:52:8A:D9:EE:89:76:DE:4C:63
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 099CB8B5
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/w65kPjcn2MJn3AhSitnuiXbeTGM.roa
Signing time: Sat 01 Jan 2022 11:01:51 +0000
ROA not before: Sat 01 Jan 2022 11:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20860
IP address blocks: 193.7.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161265845 (0x99cb8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jan 1 11:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3ae643e3727d8c267dc08528ad9ee8976de4c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:fc:bf:11:db:af:3f:60:1b:12:ea:fa:2e:
83:aa:bd:dc:3c:88:78:5b:c8:32:1b:95:31:ca:d4:
41:4b:63:cd:4c:e8:19:05:9c:04:7f:6a:f6:24:d8:
c0:30:4d:e9:3d:08:75:05:7e:b4:6c:98:c2:28:34:
12:ab:14:b7:bd:a8:20:1d:22:29:b2:7d:95:c3:ce:
bd:1e:2d:57:01:ab:86:78:56:d4:f2:fc:9f:75:bf:
6a:c4:61:4b:52:a0:ec:4c:c5:59:21:51:bb:2c:1d:
0b:8e:32:a2:94:87:fa:35:72:89:e7:13:a8:0b:b4:
81:14:55:2e:72:fb:74:e2:af:41:2c:79:7d:df:e0:
7c:09:7e:0a:86:9e:c2:71:af:b2:4b:90:e5:44:7a:
e1:cf:09:b2:e4:43:17:df:cc:ce:98:c2:25:d6:07:
38:47:63:8d:61:1e:58:31:92:2d:07:2e:ed:91:02:
cc:2f:7d:bf:78:07:34:be:68:6d:5f:35:ca:b1:9a:
ed:ab:e8:8b:b5:6b:ca:66:d4:b5:1e:c0:06:bf:ce:
a9:d6:87:f4:fd:02:11:40:40:20:d7:e2:8e:4e:90:
8d:b4:5e:46:b8:0d:c7:f6:ec:be:93:d2:da:16:44:
7f:ab:63:e4:27:c5:54:1f:3b:aa:c0:04:45:20:3f:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:64:3E:37:27:D8:C2:67:DC:08:52:8A:D9:EE:89:76:DE:4C:63
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/w65kPjcn2MJn3AhSitnuiXbeTGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.195.0/24
Signature Algorithm: sha256WithRSAEncryption
37:58:79:46:c9:0c:18:16:e6:27:08:06:a7:91:04:07:b6:70:
c8:6c:0f:3a:fa:be:1a:af:80:29:80:14:64:82:a5:85:1e:4b:
82:3e:ef:bb:e1:21:eb:2b:49:2f:df:16:e4:97:4e:0e:38:c1:
8b:d8:61:01:0b:4f:fc:be:5b:78:4e:fa:77:80:37:da:59:18:
1f:4e:d1:cc:cb:8d:5f:f9:39:55:4f:ad:25:1f:11:59:23:4e:
e5:25:5d:d1:dd:15:3f:4b:3b:4d:c4:4e:b6:3c:b2:b0:2e:3d:
f4:a7:31:4c:16:59:fb:5c:6d:02:52:a5:a7:73:ec:41:62:28:
ed:84:e7:fe:16:fe:d9:dc:b4:96:54:a9:e0:61:0c:0a:23:0a:
0f:5f:d1:99:e4:7b:5d:21:b4:da:f2:1e:71:a8:21:21:29:f5:
6f:9f:9d:76:0b:2e:39:e3:86:5b:ec:8d:48:43:aa:64:89:31:
3e:bf:e7:b0:4e:7b:17:f2:51:10:7b:d4:7f:33:e2:9d:c6:8d:
9a:42:79:3d:1a:82:85:6c:1a:a1:b1:7c:bd:2f:29:6d:98:8c:
48:97:38:e2:97:58:a1:1b:94:38:0b:b7:de:74:39:4b:84:92:
51:8a:80:bb:a3:91:cc:e5:fa:67:08:53:6a:c0:17:3d:f3:8c:
4a:16:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org