Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/t18eDTedGjvYU7kra8nqnKe820E.roa
File: t18eDTedGjvYU7kra8nqnKe820E.roa (raw, json)
Hash identifier: 60J7ATPSBNsuS9B4abpeegodgli45sgzLjn7tRyMf0Y=
Subject key identifier: B7:5F:1E:0D:37:9D:1A:3B:D8:53:B9:2B:6B:C9:EA:9C:A7:BC:DB:41
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: F78D3B
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/t18eDTedGjvYU7kra8nqnKe820E.roa
Signing time: Sat 01 Jan 2022 01:03:09 +0000
ROA not before: Sat 01 Jan 2022 01:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8412
IP address blocks: 193.187.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16223547 (0xf78d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Jan 1 01:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b75f1e0d379d1a3bd853b92b6bc9ea9ca7bcdb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:c3:1c:93:61:d7:58:3c:3e:93:4d:10:29:
7b:cb:d6:7b:b6:87:4f:4d:fc:6f:df:5d:1d:3c:09:
3a:7f:20:73:d6:cc:fa:31:9c:d9:62:27:03:1c:bf:
a2:88:1f:4f:9c:9a:28:0f:8b:d5:0a:43:77:ff:42:
6e:27:62:e1:9e:2b:76:b7:fd:87:60:66:61:89:f7:
64:58:0d:8d:70:fa:74:d7:89:50:c7:31:ba:8e:e6:
b2:8e:58:0f:42:2a:91:85:49:d7:59:6b:a8:9e:9c:
1c:b3:88:67:e8:5e:90:cd:e1:21:b7:27:07:ba:c8:
66:67:9c:c2:f5:89:0a:80:60:e1:d6:ee:c6:fe:56:
97:de:c1:1a:f2:cd:21:5c:05:75:10:70:0c:a0:e2:
ed:82:e1:97:11:df:80:20:fd:c3:a5:bf:1a:1b:54:
59:68:67:0e:47:68:99:b6:c7:5a:49:8f:4d:c4:8d:
61:b5:9f:01:02:35:96:88:2c:e5:98:d5:f2:39:3f:
c7:ae:aa:cb:f4:7f:e1:3b:83:83:f2:db:00:3a:92:
68:b5:54:0d:60:40:1c:d9:95:23:3a:d2:d2:73:0b:
0a:98:89:b8:f2:52:d9:d4:3e:46:36:61:de:a2:68:
52:dd:17:81:b0:25:46:5c:b4:2b:3a:2d:63:fe:34:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:1E:0D:37:9D:1A:3B:D8:53:B9:2B:6B:C9:EA:9C:A7:BC:DB:41
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/t18eDTedGjvYU7kra8nqnKe820E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.248.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f4:6f:7f:49:bd:9e:39:ab:c2:a9:2e:38:5e:5f:de:b9:2b:
6e:fd:56:9f:3a:b8:03:67:92:c2:c7:9f:ad:ab:65:8b:ee:9f:
8b:bb:74:27:a3:4a:ee:9f:e0:39:cd:64:6e:22:c2:d4:f6:0b:
59:6a:7d:35:84:e5:f7:27:0e:44:7d:53:15:0b:14:10:ad:4b:
1f:a7:0b:3e:d9:a2:88:02:62:f1:d5:32:54:c1:a8:16:62:c6:
2f:00:d9:cd:cc:e1:f3:2b:59:6f:3c:f0:e2:1c:e4:19:2d:31:
e4:ed:d5:5d:83:1c:60:73:78:81:5a:47:e0:23:44:e8:0f:d0:
c2:b9:fb:d9:96:ec:47:4a:8a:26:a4:6f:9f:a9:44:a2:ad:a5:
70:02:56:45:68:d8:a8:76:8c:53:94:67:55:23:e1:5c:bf:5d:
e1:e5:ce:01:d0:97:65:1b:d7:8b:ec:d8:8f:92:ae:df:d9:8c:
1c:19:72:ca:44:1f:64:a9:a6:8c:73:e9:6f:49:26:35:ca:71:
80:c5:6a:32:e6:e8:ff:fa:ba:57:2e:cc:f5:97:da:03:a8:51:
af:d5:10:d8:fc:55:37:74:d8:8b:bf:f1:fc:c3:26:b8:6f:26:
9f:6c:fc:ce:51:b7:9a:6e:45:11:d7:9b:26:4e:92:d6:f2:ee:
82:5b:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:37 2024 by rpki-client on console-ams.rpki-client.org