Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/i_NkTjlDR3M9pTEcphKTCn9dWIU.roa
File: i_NkTjlDR3M9pTEcphKTCn9dWIU.roa (raw, json)
Hash identifier: 4eXQ3280aHRfXO6n4GgcAiWgabHMZ584kC3/GqtKd5A=
Subject key identifier: 8B:F3:64:4E:39:43:47:73:3D:A5:31:1C:A6:12:93:0A:7F:5D:58:85
Certificate issuer: /CN=ad85ad0ca493b3bc06c99ba1a4aef5b079dc9efb
Certificate serial: 06219C63
Authority key identifier: AD:85:AD:0C:A4:93:B3:BC:06:C9:9B:A1:A4:AE:F5:B0:79:DC:9E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYWtDKSTs7wGyZuhpK71sHncnvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/i_NkTjlDR3M9pTEcphKTCn9dWIU.roa
Signing time: Sat 01 Jan 2022 14:58:39 +0000
ROA not before: Sat 01 Jan 2022 14:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41296
IP address blocks: 193.41.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102866019 (0x6219c63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad85ad0ca493b3bc06c99ba1a4aef5b079dc9efb
Validity
Not Before: Jan 1 14:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bf3644e394347733da5311ca612930a7f5d5885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:ef:83:78:f1:c3:06:17:66:07:88:d3:d3:
58:a3:6e:fe:a0:9c:b7:81:c6:f8:59:d2:62:7e:f2:
82:d9:b1:5a:a1:5f:dc:65:e4:09:4f:31:24:13:e3:
cf:d9:a5:39:6b:93:92:3f:31:8f:a4:09:e1:34:d2:
24:0a:e7:0f:64:69:ff:c8:1c:62:0b:0b:76:48:e6:
76:57:a5:e4:83:19:ef:32:c0:cd:0c:85:66:3a:54:
32:41:c5:37:14:96:1a:ef:37:f5:f6:b0:ea:91:20:
84:e6:69:4d:f4:58:07:66:e1:0e:b6:fa:a5:89:69:
0b:f4:f2:8d:56:68:24:54:23:52:5a:9d:8b:cc:bd:
48:9e:15:02:96:c7:c7:59:bf:92:18:fd:c8:46:be:
68:18:65:b0:9e:d5:2d:8e:a4:d9:96:32:3c:fd:d5:
55:9e:75:35:b2:68:e6:05:f0:71:96:34:83:66:54:
73:4b:f0:20:97:39:22:49:d3:42:28:42:b2:45:fd:
93:ee:f8:ec:63:ad:b4:ce:f0:b4:87:1f:d9:7e:b2:
a5:2d:14:6f:f9:8f:fd:0d:22:19:39:fc:e5:44:f5:
95:26:e9:31:46:fb:37:16:5f:0e:1b:8d:70:cd:db:
86:ac:b7:47:93:67:14:6d:d3:a8:0b:03:80:0e:46:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:64:4E:39:43:47:73:3D:A5:31:1C:A6:12:93:0A:7F:5D:58:85
X509v3 Authority Key Identifier:
keyid:AD:85:AD:0C:A4:93:B3:BC:06:C9:9B:A1:A4:AE:F5:B0:79:DC:9E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYWtDKSTs7wGyZuhpK71sHncnvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/i_NkTjlDR3M9pTEcphKTCn9dWIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/rYWtDKSTs7wGyZuhpK71sHncnvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.225.0/24
Signature Algorithm: sha256WithRSAEncryption
05:79:b0:9c:bc:f4:e5:b8:96:ff:1a:be:49:2a:9d:9f:03:7c:
84:08:39:1b:ea:e6:f9:33:55:9c:cd:db:bf:d1:9c:45:9f:32:
78:92:ca:f5:77:bb:3d:e2:94:75:ec:87:21:e2:a7:14:3b:28:
c7:b3:5a:af:77:f5:27:36:00:ad:f4:b7:36:16:d9:6e:b4:5a:
c3:73:06:4d:72:11:9b:a9:73:bd:1e:10:e2:55:d8:fe:ff:b4:
fd:07:02:5e:2d:70:d2:c3:18:8a:c4:89:6e:ce:ca:16:3c:b6:
28:11:b3:fe:2a:90:a8:9f:57:37:8e:80:20:57:c6:89:4a:f8:
30:72:64:c7:9e:c5:10:ba:e1:dc:0a:66:3f:60:a6:ef:3a:5a:
bd:00:95:1e:bd:35:09:f9:35:7a:f4:2c:9d:67:a8:6c:cb:aa:
dd:de:43:3c:0f:dc:38:68:ae:5a:e5:6b:86:55:d4:83:66:aa:
c2:2c:91:4c:2e:9f:a1:16:89:f0:1a:6c:1c:b2:24:30:a3:03:
63:89:0e:a5:9c:84:e3:6b:77:96:0c:82:05:14:b0:3f:dc:23:
75:da:87:84:97:e2:d9:4a:07:5a:e8:b6:46:78:6a:fa:19:a5:
b9:59:3f:14:11:ff:33:da:32:b3:21:2a:be:72:de:d6:8c:36:
c4:69:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:10 2024 by rpki-client on console-fra.rpki-client.org