Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/Ph7h63hOS20-FluZwKogcqMO6go.roa
File: Ph7h63hOS20-FluZwKogcqMO6go.roa (raw, json)
Hash identifier: gnrhobX5pKM7869vETMGRhDnBKQVGY4osh/O53qyCVo=
Subject key identifier: 3E:1E:E1:EB:78:4E:4B:6D:3E:16:5B:99:C0:AA:20:72:A3:0E:EA:0A
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 06C9B408
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/Ph7h63hOS20-FluZwKogcqMO6go.roa
Signing time: Sat 01 Jan 2022 05:55:46 +0000
ROA not before: Sat 01 Jan 2022 05:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12350
IP address blocks: 193.247.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113882120 (0x6c9b408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jan 1 05:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e1ee1eb784e4b6d3e165b99c0aa2072a30eea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:f2:af:91:f5:32:a7:80:c5:e9:89:9d:07:
5e:03:59:18:f3:51:a7:3a:80:67:c9:7a:ff:b4:bb:
97:86:ab:49:34:07:41:a9:38:56:74:1e:20:4a:97:
59:a1:c6:fc:f1:72:12:d1:2e:d3:8c:ad:de:14:71:
84:a3:fc:03:37:0d:a8:1a:65:c9:62:bd:96:ab:d3:
e0:4f:01:4a:55:93:79:c6:aa:d7:53:73:cb:63:b1:
c7:a5:2a:98:2e:0a:e3:e8:81:ff:98:5a:dd:d6:51:
d2:7c:f8:45:4c:3d:c3:6d:96:7a:c1:94:a8:ac:9b:
1b:c1:5f:5e:f9:97:43:06:02:58:b6:db:28:54:cf:
52:c0:78:7c:82:ea:82:82:2a:fb:d0:62:43:72:eb:
e8:1a:9f:df:94:41:77:66:8d:bf:69:ae:1f:0e:fe:
bf:af:17:6f:f1:41:cf:f4:10:ce:de:79:c3:92:57:
b6:51:ea:07:a0:16:1e:40:75:78:30:da:23:e4:6a:
58:e5:4a:d6:86:05:b0:71:55:94:7f:0d:7e:1f:09:
5f:c5:87:2a:64:2b:7b:6d:15:81:32:5b:0a:72:68:
df:11:e8:35:4a:ce:b0:91:06:e5:0a:77:c1:1b:ea:
0b:f1:c1:a3:b3:a7:b5:b1:fb:c2:b8:08:15:07:d6:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1E:E1:EB:78:4E:4B:6D:3E:16:5B:99:C0:AA:20:72:A3:0E:EA:0A
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/Ph7h63hOS20-FluZwKogcqMO6go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.66.0/24
Signature Algorithm: sha256WithRSAEncryption
26:64:10:4d:59:0b:cc:09:4c:bb:9a:d0:e8:69:b1:a6:7d:d3:
bb:9f:76:d6:5a:72:b2:02:e3:d7:6d:6a:a6:ca:0d:d5:dd:b5:
04:63:be:f6:3f:13:3c:30:e0:13:82:62:47:57:0a:a2:4c:ea:
58:24:1a:e3:6d:4a:81:13:e4:56:fc:27:4f:b3:37:36:88:02:
e4:b3:ff:4e:b5:70:b3:b1:38:31:51:c4:94:08:5b:ee:36:22:
00:66:ac:d3:b1:ef:39:2e:cf:d1:9c:16:4a:7a:37:f9:ac:bd:
3f:34:76:dd:d3:0f:30:c0:47:43:85:84:7a:de:77:15:f6:ce:
0f:5f:9d:69:e8:c0:a7:86:dc:45:b0:32:85:d4:e2:ec:b8:aa:
a5:f2:b7:fc:99:f8:1f:ec:09:a0:3b:49:89:bd:99:b0:d7:67:
49:ac:7c:b3:db:9c:42:de:5c:0d:67:c4:44:48:24:b8:a0:7c:
f1:a7:ce:7e:6e:f9:47:58:8c:6b:00:62:a6:e7:c3:ae:e9:2a:
51:46:10:03:38:7e:ac:6d:c9:a6:bc:46:06:93:76:a4:ef:b1:
b4:8b:47:b9:d1:54:7a:df:a4:78:00:af:09:58:27:22:58:91:
20:4f:d5:56:e4:39:4e:59:20:54:69:ca:09:fe:20:5e:2f:03:
4e:35:e3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:03 2024 by rpki-client on console-fra.rpki-client.org