Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Sg121nu8DeaX0wRmugT-_OjJw2M.roa
File: Sg121nu8DeaX0wRmugT-_OjJw2M.roa (raw, json)
Hash identifier: oZc4S4VoVpUcdRZ2s/mqWHPpbm8/zpki7JPW4+q4Dlk=
Subject key identifier: 4A:0D:76:D6:7B:BC:0D:E6:97:D3:04:66:BA:04:FE:FC:E8:C9:C3:63
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 01831CBB0C39673CCC72CC58AB4CB23A8D9E
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Sg121nu8DeaX0wRmugT-_OjJw2M.roa
Signing time: Thu 08 Sep 2022 10:52:43 +0000
ROA not before: Thu 08 Sep 2022 10:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198932
IP address blocks: 193.242.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:bb:0c:39:67:3c:cc:72:cc:58:ab:4c:b2:3a:8d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Sep 8 10:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a0d76d67bbc0de697d30466ba04fefce8c9c363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:07:77:39:38:8a:c8:ff:a5:98:c4:d0:f6:
9d:6a:4b:19:54:42:dd:68:65:6f:8a:40:35:7f:f5:
35:7e:a8:50:8f:bd:a1:b9:78:6e:2c:11:7c:d9:66:
f4:7e:59:78:ce:ee:46:d4:a0:06:75:63:62:9a:e1:
3b:2a:be:68:55:84:d4:9d:7c:d0:b1:8a:51:cb:ae:
cd:f1:e5:57:49:cc:14:2a:f2:8a:c4:bd:a3:f5:11:
19:f2:cd:f1:21:9e:a8:15:08:4b:cf:ec:3f:4c:ee:
d6:96:8a:ca:af:da:e0:ac:cc:1c:36:ab:ed:71:33:
e9:e9:70:6e:3e:0b:ac:b1:d0:89:57:22:e0:67:70:
86:76:f0:ad:42:1c:ef:5f:70:4a:a0:e5:5d:bb:07:
de:e1:17:18:2e:36:96:69:35:44:c6:27:bd:ca:8f:
c7:d1:76:c2:06:50:7d:da:8e:9c:92:be:9f:9c:06:
54:5b:8e:9d:d0:7b:5f:5f:de:b0:ff:70:e8:a1:2a:
aa:32:b9:07:03:99:2e:db:e3:1d:f6:94:f3:2a:d1:
3a:da:18:87:e9:70:0f:33:f2:f8:95:94:01:cb:f5:
81:96:50:9c:6a:6d:1a:1f:d5:50:38:bf:57:99:57:
38:f8:ac:a1:a2:13:31:0e:03:ad:5d:8c:0d:56:b0:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0D:76:D6:7B:BC:0D:E6:97:D3:04:66:BA:04:FE:FC:E8:C9:C3:63
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Sg121nu8DeaX0wRmugT-_OjJw2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.135.0/24
Signature Algorithm: sha256WithRSAEncryption
24:64:76:5b:5e:e2:20:d6:8b:2c:98:3a:08:50:64:16:e3:b7:
7f:d3:f3:92:73:40:94:a8:17:be:9d:b7:c3:c1:a8:bc:02:91:
c9:5b:88:4b:26:c9:b9:28:4a:8f:af:a3:24:3e:fb:a0:47:6a:
db:2e:53:29:89:fd:7f:18:c7:f5:64:2d:0a:d5:c0:ff:95:62:
de:6b:9e:7c:2a:d3:74:79:19:a3:77:a9:1f:34:2b:e0:27:fd:
0b:44:61:25:86:12:66:31:0c:d0:3d:27:d9:fc:82:42:68:0f:
9f:9c:7f:43:d0:54:0c:60:08:f3:a9:a5:01:fa:b4:7e:aa:7c:
f7:05:be:5f:c8:dd:fd:3e:e1:b6:50:99:83:de:4c:03:2e:fc:
62:f4:df:dc:ab:3d:57:36:24:ad:88:d4:32:e0:c7:65:f6:77:
5c:69:39:a2:37:34:d2:d4:a1:01:5d:44:72:17:92:eb:18:c0:
12:ec:59:76:d4:74:47:72:0f:f0:eb:00:9c:ca:7b:32:b9:13:
7f:d0:87:c2:ce:e8:a5:97:f6:c5:67:1a:b8:f4:0e:88:39:ed:
30:23:a7:e2:ec:e7:f1:07:a7:2f:c2:57:7f:e8:9d:3b:1f:7e:
79:2b:4a:4d:f6:a9:53:93:69:e7:ac:e6:84:f6:ce:2c:7c:80:
f6:ee:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:40 2023 by rpki-client on console-ams.rpki-client.org