Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9aTpaRdDv07278bmWXbF0bFN_c0.roa
File: 9aTpaRdDv07278bmWXbF0bFN_c0.roa (raw, json)
Hash identifier: UaJNBeep1yKQeytJcIYQxuJx9lzjANlHqWYQpT6igFE=
Subject key identifier: F5:A4:E9:69:17:43:BF:4E:F6:EF:C6:E6:59:76:C5:D1:B1:4D:FD:CD
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 02FEC62C
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9aTpaRdDv07278bmWXbF0bFN_c0.roa
Signing time: Sat 01 Jan 2022 13:06:55 +0000
ROA not before: Sat 01 Jan 2022 13:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34092
IP address blocks: 193.106.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50251308 (0x2fec62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jan 1 13:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5a4e9691743bf4ef6efc6e65976c5d1b14dfdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:ec:9c:c6:ff:e7:bd:e0:01:97:21:69:3a:
ba:9d:ff:97:cb:c2:05:7c:01:dc:49:90:a1:b9:88:
78:fe:6c:e3:66:02:82:3b:35:76:05:16:7e:ef:c2:
93:08:49:a5:9a:eb:a5:28:ef:4d:8b:d6:79:81:14:
f5:de:17:80:4a:4b:e5:3c:c3:8f:b1:8e:9f:74:7b:
ee:f8:5f:cc:98:9f:41:12:05:1e:06:1f:8f:d4:17:
5c:0e:88:df:f2:83:82:9c:ce:f5:62:94:2f:3f:5b:
0e:ed:87:0d:e1:50:2b:00:df:fb:67:2b:64:8f:7f:
1f:69:9d:00:5f:f7:c0:29:72:6c:28:38:cb:6b:07:
40:3f:cd:d1:d0:14:46:56:98:73:a6:35:1f:47:24:
8c:f6:58:e3:e1:04:07:12:00:2a:6d:77:f4:40:e6:
97:80:a5:1d:93:e5:7d:11:00:ea:da:9a:46:88:f2:
f5:1f:e1:40:6e:68:e7:1e:d9:82:71:ea:aa:da:dc:
db:c2:54:8a:66:79:3b:a9:9a:a9:d2:23:30:c4:c3:
a4:ee:70:be:01:b6:bb:4e:45:d9:f4:3b:27:4c:cc:
68:e2:7b:f0:10:6d:94:78:37:61:ad:26:9f:2f:e8:
62:93:33:0e:d6:97:01:b6:05:eb:b8:13:60:9a:b0:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:E9:69:17:43:BF:4E:F6:EF:C6:E6:59:76:C5:D1:B1:4D:FD:CD
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9aTpaRdDv07278bmWXbF0bFN_c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.64.0/24
Signature Algorithm: sha256WithRSAEncryption
03:20:0a:b5:53:2c:2d:13:ce:9e:a1:da:2c:5f:c4:cd:07:07:
b8:75:32:3e:24:1e:12:4c:4c:86:62:da:14:c2:1c:35:41:6e:
b1:fc:c1:85:e6:ab:55:7a:c7:17:95:6b:12:37:52:a1:1a:91:
48:00:90:4a:5a:35:1d:fe:d6:c0:ef:d7:f2:3c:7f:7c:eb:be:
d8:43:fe:72:bf:22:5d:c3:4f:e6:3f:4d:92:20:87:8f:3f:d8:
a4:5c:d1:c1:3f:37:74:ca:b9:dd:bb:90:c4:85:24:f4:00:f8:
c1:cb:9d:47:07:20:7f:c6:1b:f2:0e:d3:8d:97:93:54:d9:73:
24:af:85:2f:dc:14:d0:60:c4:3b:88:ed:32:2b:f3:c2:09:4c:
30:02:98:8d:01:2e:f9:49:66:e4:21:9e:eb:b1:a0:54:3c:55:
5c:ab:81:85:27:95:21:5d:da:24:fc:80:0b:27:05:f6:a3:15:
ef:41:19:0f:70:ae:5e:5f:15:72:47:e5:68:35:10:a8:6e:11:
23:96:d2:a0:a5:5e:56:d3:e0:f8:0b:be:89:77:12:3c:0f:3a:
7a:c5:eb:5f:91:e5:3c:36:ad:89:6c:4d:27:d1:bf:0e:6a:da:
c7:4b:ee:76:78:e3:2d:b2:86:16:ca:85:67:0d:1b:2c:40:10:
70:ae:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org