Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fmJVzEgpl3iBrlv2HBmMU6D0acg.roa
File: fmJVzEgpl3iBrlv2HBmMU6D0acg.roa (raw, json)
Hash identifier: wSimIcHf+l0EVJ+sWowjpZ5IAJmcHi7Hgyrs3bNpOHI=
Subject key identifier: 7E:62:55:CC:48:29:97:78:81:AE:5B:F6:1C:19:8C:53:A0:F4:69:C8
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0184106393E4EAF00E502779D859C670CF84
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fmJVzEgpl3iBrlv2HBmMU6D0acg.roa
Signing time: Tue 25 Oct 2022 18:24:32 +0000
ROA not before: Tue 25 Oct 2022 18:24:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 193.111.76.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:63:93:e4:ea:f0:0e:50:27:79:d8:59:c6:70:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 25 18:24:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e6255cc4829977881ae5bf61c198c53a0f469c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:3b:5a:e2:6d:e8:c5:cc:3a:ee:88:fd:84:
4a:47:f9:8b:a0:40:d1:e7:b5:61:0f:60:d7:91:57:
d2:a7:19:21:37:56:99:8f:22:b4:92:2f:97:ee:4b:
9f:21:7d:9e:05:a0:5e:77:c7:a2:2e:e6:e5:98:c4:
d2:5f:80:b5:92:fa:54:ff:35:55:a2:4a:96:4a:24:
42:79:20:5c:2e:35:22:8a:74:f8:57:f3:62:8a:8e:
cd:89:b5:3a:41:f0:c5:ac:ca:83:c1:d7:34:a6:d4:
39:5a:0d:20:c2:8a:c8:43:db:54:c0:62:cb:de:9a:
83:26:21:c1:5a:18:48:be:a5:28:61:71:da:6d:db:
2f:c1:91:63:57:6c:dd:a8:eb:98:4d:0f:9a:c3:c5:
1d:a4:85:10:8b:64:28:ee:d0:83:46:78:2b:c2:2a:
d7:95:f0:b6:09:b1:00:34:b4:f7:9b:d0:f2:fd:47:
10:d3:75:dd:24:c6:ca:10:c4:6d:57:95:2a:55:9d:
bd:f9:4e:12:dd:b8:c1:6b:2e:a4:c9:f9:ca:b4:79:
39:9e:1d:37:69:4b:b0:38:6b:2f:b6:bc:16:b6:92:
bd:83:45:6f:09:b2:95:36:8e:fa:db:42:4a:b9:61:
5d:8b:4a:8b:c6:4f:3e:7e:a1:59:67:1c:9f:a5:9a:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:55:CC:48:29:97:78:81:AE:5B:F6:1C:19:8C:53:A0:F4:69:C8
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fmJVzEgpl3iBrlv2HBmMU6D0acg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.5.0/24
193.17.7.0/24
193.111.76.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ef:9e:8c:95:3f:50:f5:30:34:03:9d:f4:0c:a6:05:5b:d9:
e4:38:22:3d:9b:56:05:bf:60:d5:12:c5:cc:7c:ac:d1:35:8b:
2b:82:40:37:3f:59:04:4b:64:52:3c:a5:42:49:ef:da:40:36:
4d:67:6b:6c:df:15:9d:92:ae:15:02:28:ad:99:0e:08:c4:9e:
c1:fd:53:08:e2:6e:29:24:6b:fb:96:cc:21:96:0a:27:84:06:
31:44:be:96:9e:84:ca:7f:cb:f5:84:fa:a9:da:a7:1e:0a:63:
86:30:8a:f1:82:f2:11:24:69:d3:fb:b6:6c:1d:f3:d1:c2:08:
3f:a7:35:d8:74:8b:f8:c7:d8:5a:d7:74:4e:13:38:d7:5b:d6:
9b:db:58:c2:cf:54:e8:87:32:47:d3:da:01:98:ae:0a:27:5c:
d7:b4:fd:65:2a:45:0d:7f:25:ca:fb:d6:80:42:66:9b:ae:f8:
3b:4a:4b:68:b0:8b:f4:1e:35:6e:d4:2e:8a:6c:3f:72:54:e7:
25:ee:84:bf:20:eb:8d:80:a2:29:a3:07:42:e5:96:fc:cb:49:
a7:65:e5:59:2c:74:92:9d:b5:10:4d:1f:48:df:32:c1:9b:b4:
cb:d8:d7:05:a2:d8:12:71:31:3c:f6:c6:bc:07:6f:15:30:5b:
fd:f2:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org