Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/DkT0M8EtA7fnGidFKX83zOgaVbo.roa
File: DkT0M8EtA7fnGidFKX83zOgaVbo.roa (raw, json)
Hash identifier: wqexQCBrEwDvhULTQoHI5x5d5xHw7doXTy6wsqp4oho=
Subject key identifier: 0E:44:F4:33:C1:2D:03:B7:E7:1A:27:45:29:7F:37:CC:E8:1A:55:BA
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 127B575B
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/DkT0M8EtA7fnGidFKX83zOgaVbo.roa
Signing time: Sat 01 Jan 2022 00:53:45 +0000
ROA not before: Sat 01 Jan 2022 00:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31446
IP address blocks: 193.16.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310073179 (0x127b575b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Jan 1 00:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e44f433c12d03b7e71a2745297f37cce81a55ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:60:df:5a:b7:6d:80:32:e2:b1:88:10:2b:
38:31:9b:60:d4:05:b3:b3:d8:11:27:2a:44:da:8c:
40:ae:fe:17:3e:a7:a8:77:2e:63:39:d1:0f:9b:25:
c7:02:df:c0:fc:72:02:ae:e1:2b:7f:0b:51:c5:e9:
81:c7:9d:f9:27:86:2b:fd:b1:9b:30:f3:1f:62:9c:
0a:9f:c0:0f:60:9c:90:5f:b6:75:09:3e:3f:94:04:
ce:1b:7c:34:6a:27:60:c8:30:9c:2a:a5:22:01:0c:
70:87:a6:b4:55:44:7f:fc:00:c6:92:38:04:b0:0d:
60:f2:20:89:91:e6:64:0b:f0:fe:1e:32:8c:80:29:
7b:6c:f0:c8:ff:ae:96:95:b9:1f:4f:47:95:b3:5f:
a1:05:a9:23:fc:e1:8b:94:cb:3d:a5:40:cc:88:81:
e7:05:29:3b:fb:86:69:a1:84:0c:b3:55:f5:01:79:
4e:c7:b7:e1:23:b2:86:d8:6d:df:27:c4:aa:70:ee:
7c:97:4e:08:8a:19:9f:a4:97:f3:96:5e:6a:ab:10:
35:61:d2:cb:c5:43:b5:0b:a4:8d:e2:05:47:bc:4f:
b8:79:68:00:1b:88:88:2c:5a:86:c4:89:bb:3d:54:
7e:12:0a:32:ed:13:1d:1b:93:90:4f:13:ea:c7:49:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:F4:33:C1:2D:03:B7:E7:1A:27:45:29:7F:37:CC:E8:1A:55:BA
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/DkT0M8EtA7fnGidFKX83zOgaVbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:15:b2:44:0c:61:82:bd:b3:ea:96:07:65:12:7c:d4:e7:81:
8a:54:8d:d1:e1:42:56:fe:f2:1a:5c:d9:cf:5a:93:37:71:dd:
d9:57:45:9d:90:c5:a3:2d:75:b5:71:8b:bd:2c:93:49:a4:70:
3a:3f:f4:df:0d:57:5f:66:56:08:15:20:6d:2c:21:b7:c9:13:
84:a3:d5:be:bc:e1:f6:58:7c:c0:d3:bd:f9:04:29:4f:7a:98:
d8:54:12:e3:69:b0:16:74:42:e1:05:78:c7:55:c2:1c:fe:06:
f5:48:10:aa:ad:96:79:fa:8f:74:c8:96:24:1b:0d:f1:fc:b8:
36:74:1e:23:be:d1:d2:a4:dc:06:e0:92:64:50:2b:bc:da:ec:
68:33:f9:c2:46:d9:93:ef:1c:a6:6b:80:29:83:1b:31:e3:53:
12:9b:b1:9f:86:af:15:42:94:89:4e:08:d2:b3:9a:86:15:45:
c6:57:5d:22:b5:06:be:26:0b:e0:8d:24:bb:4f:c8:a7:8d:c2:
ac:9b:e2:ea:06:ef:4b:fb:93:82:ff:a6:00:15:94:8b:f5:f3:
7b:c9:1b:2d:ad:c1:dc:13:07:84:af:bb:80:68:5f:e9:b7:2e:
ea:66:6e:06:68:bf:2f:61:2c:94:bc:c2:aa:d2:f6:63:e8:82:
ee:ae:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:05 2024 by rpki-client on console-ams.rpki-client.org