Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/76DePqZTRGfDqrGRe3ZhlL8ciN0.roa
File: 76DePqZTRGfDqrGRe3ZhlL8ciN0.roa (raw, json)
Hash identifier: TYqhYC7SYfD4B1d8ggG8IM0hJAW8r1N87PG3kqMnsZc=
Subject key identifier: EF:A0:DE:3E:A6:53:44:67:C3:AA:B1:91:7B:76:61:94:BF:1C:88:DD
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 084B18A3
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/76DePqZTRGfDqrGRe3ZhlL8ciN0.roa
Signing time: Sat 01 Jan 2022 02:00:45 +0000
ROA not before: Sat 01 Jan 2022 02:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6893
IP address blocks: 193.247.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139139235 (0x84b18a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jan 1 02:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efa0de3ea6534467c3aab1917b766194bf1c88dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:cf:b0:73:a0:24:3b:f8:b1:59:88:95:59:
49:7c:ee:5e:20:49:dd:62:87:09:bd:4b:5d:41:80:
a0:f8:65:eb:75:dc:a9:47:be:93:ad:d1:97:67:ce:
ad:3b:2f:f1:93:9e:d4:20:57:bc:cb:6c:66:97:f6:
aa:d2:b3:7f:96:fb:dc:ac:e7:35:98:b5:bc:7e:be:
e9:f9:45:0a:79:38:9b:40:e5:3c:e0:c7:3c:79:34:
34:e5:7a:8e:71:98:1c:14:d3:7b:a4:56:e7:65:b1:
fd:78:dd:a0:42:31:2f:cd:6b:0b:0e:06:a1:46:61:
6a:68:52:80:e8:1e:e6:37:95:f1:a0:77:96:2b:1a:
b3:ea:6a:c6:0c:78:44:19:c4:c6:45:4f:91:a4:64:
04:fc:b1:d8:02:56:f0:55:c1:50:73:ec:2c:99:43:
6d:23:70:56:9f:7d:b7:2c:6f:a1:f8:14:4d:19:5d:
0f:d3:d7:27:1d:bc:3b:bd:94:2e:16:0a:5d:a0:96:
ca:78:23:59:c6:6a:04:89:81:50:dd:ca:e7:1b:95:
59:d5:b1:a4:54:8a:29:7a:7d:82:2d:e6:f5:fa:87:
c1:97:69:0a:1a:7c:3d:25:74:3a:a4:df:37:f1:20:
e6:63:e0:60:e1:50:e3:e5:26:f4:c4:c1:c7:35:66:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A0:DE:3E:A6:53:44:67:C3:AA:B1:91:7B:76:61:94:BF:1C:88:DD
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/76DePqZTRGfDqrGRe3ZhlL8ciN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:41:b2:1d:cf:b2:7d:51:0c:a6:ee:95:6d:2e:da:93:ef:11:
85:b7:8f:06:20:51:49:b8:89:aa:54:d8:b1:12:0d:ff:46:62:
d8:92:59:f2:fb:32:1b:2e:96:2b:d5:0e:0d:c5:42:7d:bf:27:
e3:76:73:10:98:ea:2a:7f:34:33:be:f2:56:9e:49:55:21:42:
3c:bc:22:47:0c:1a:5e:fb:76:93:83:03:37:54:12:8a:e3:0c:
45:e0:7c:4f:c3:5b:0f:50:51:77:61:00:15:ad:c8:57:4e:03:
c0:ef:19:30:a5:77:10:2b:a2:38:f5:80:a1:28:07:0a:0c:f6:
58:0c:57:0d:de:d6:f4:f1:ef:75:d8:3e:14:71:3d:b8:1e:32:
20:b0:b1:da:e2:7a:ca:fa:7a:42:77:62:c5:bc:04:18:95:80:
51:b2:f4:02:96:c3:ce:f8:fc:03:50:ea:7a:8c:08:59:6c:3a:
65:de:0b:a6:be:63:9d:69:b0:84:55:5b:29:20:08:87:2f:6e:
5d:dc:58:ec:bb:97:8c:f4:85:03:5f:89:e2:aa:30:89:72:5a:
c6:de:ef:2c:6e:3b:f6:2f:fa:0f:f7:b2:9d:07:ca:16:6f:cb:
3b:bc:23:51:a7:e1:06:9c:9c:14:67:73:a1:09:51:5c:93:5a:
2b:31:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:33 2023 by rpki-client on console-ams.rpki-client.org