Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/c14Lz8ny22s-pMb4KJKm3Q47Tt4.roa
File: c14Lz8ny22s-pMb4KJKm3Q47Tt4.roa (raw, json)
Hash identifier: njRlvpyuIxy38uA3QogZ+X9sNbDCRIc3rbMtcKsiIVU=
Subject key identifier: 73:5E:0B:CF:C9:F2:DB:6B:3E:A4:C6:F8:28:92:A6:DD:0E:3B:4E:DE
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 0185627AEE611B4EABE937B364D5FDBDD78A
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/c14Lz8ny22s-pMb4KJKm3Q47Tt4.roa
Signing time: Fri 30 Dec 2022 10:01:41 +0000
ROA not before: Fri 30 Dec 2022 10:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50143
IP address blocks: 193.104.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:7a:ee:61:1b:4e:ab:e9:37:b3:64:d5:fd:bd:d7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Dec 30 10:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=735e0bcfc9f2db6b3ea4c6f82892a6dd0e3b4ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:b9:65:bb:6f:2d:d4:c7:f2:47:66:0e:be:
9c:5f:0d:c4:69:b0:4a:c6:a0:85:14:d9:a7:80:ea:
a0:f2:e3:4c:15:76:53:54:56:45:2f:2e:f1:fd:0e:
68:da:37:23:5e:95:11:9e:ad:2f:0d:5b:88:90:ef:
e1:9b:c8:4c:e4:54:26:1f:d8:49:51:dd:52:6b:0b:
45:32:df:d3:08:28:f2:2b:f2:55:dd:3a:82:dd:00:
c7:d5:a9:4b:e4:10:e7:41:19:9e:42:c4:09:2c:25:
70:f6:ea:e6:b4:d6:53:38:4f:07:c5:57:44:bf:df:
3a:d2:ab:5c:ce:f9:da:5b:36:ef:16:73:b8:49:ff:
e5:44:05:32:4f:fc:5d:de:f9:ef:0f:70:ca:ea:2b:
f4:07:a1:46:4c:fc:83:c5:86:1d:c5:fa:c4:cb:ef:
01:74:1e:fc:ca:f1:32:17:f5:e3:7f:06:72:ce:fb:
06:34:69:26:54:d4:44:88:96:6c:3f:de:2b:0f:2f:
79:5d:02:7c:51:3f:b9:c7:a6:52:ea:a4:e9:df:12:
4b:96:ca:e4:6d:18:b3:86:85:2f:2a:9e:cd:41:7d:
77:62:7f:8f:e4:9a:de:50:10:d7:89:1e:29:64:1e:
0a:34:45:0b:52:83:c9:1b:18:44:5e:18:4b:a6:4b:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:0B:CF:C9:F2:DB:6B:3E:A4:C6:F8:28:92:A6:DD:0E:3B:4E:DE
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/c14Lz8ny22s-pMb4KJKm3Q47Tt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:20:0e:9b:3f:5c:24:44:0f:60:50:9c:4d:0b:22:85:88:28:
70:4a:5c:63:c3:f0:58:a2:19:3b:3f:77:29:be:0d:72:ea:d9:
47:a6:19:09:0a:3f:48:9c:9c:d6:7b:c5:1f:ed:16:75:dd:76:
d7:ab:05:e3:f9:5f:87:c9:a4:4e:e1:ad:19:e6:97:a4:04:bc:
cb:ef:24:cf:1f:64:c7:b6:6d:e3:85:1f:13:f8:7f:de:ee:c5:
1c:b5:c3:e8:ac:db:8b:a7:73:4b:a3:f3:a2:13:9f:63:5a:7b:
29:f3:b3:1e:1b:91:b3:39:b8:ee:63:eb:36:75:ba:48:c3:23:
93:42:fb:bc:b6:a1:4a:29:eb:36:c3:c1:80:64:50:2d:0a:48:
9b:64:e2:5d:84:46:8e:ed:8c:72:dc:c5:71:13:db:79:b8:65:
3e:97:67:b9:4c:4b:68:2f:61:5a:0d:f8:b2:af:0a:7f:cb:9a:
5c:02:4b:c5:10:11:75:68:3f:2e:17:9e:0d:f1:38:b2:49:8f:
56:ec:c8:5a:36:90:c3:26:ac:31:cf:01:b9:df:e4:21:14:bc:
c9:a9:85:b3:48:6c:dc:a8:c5:78:42:26:91:73:82:09:c1:e2:
51:3d:81:8c:88:7b:d6:11:29:24:9b:6b:06:34:b0:88:e9:df:
15:6a:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:28 2024 by rpki-client on console-ams.rpki-client.org