Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/7P_SMbhHAJU8XxDgmsvj_OpICUY.roa
File: 7P_SMbhHAJU8XxDgmsvj_OpICUY.roa (raw, json)
Hash identifier: uw2NuZVoyxQOIXwHeSIP4IpzXRM2pwnttWT/9nD5vgQ=
Subject key identifier: EC:FF:D2:31:B8:47:00:95:3C:5F:10:E0:9A:CB:E3:FC:EA:48:09:46
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 03634668
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/7P_SMbhHAJU8XxDgmsvj_OpICUY.roa
Signing time: Fri 22 Apr 2022 15:03:49 +0000
ROA not before: Fri 22 Apr 2022 15:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 193.22.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56837736 (0x3634668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Apr 22 15:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecffd231b84700953c5f10e09acbe3fcea480946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:6f:04:0f:a4:ab:9c:e4:32:e3:cc:7b:29:
10:09:e3:b0:6b:b5:53:25:d5:c5:2e:c3:54:cb:e9:
96:af:b7:0c:f8:ef:47:92:3d:18:97:b4:77:2b:d2:
0d:ae:77:5b:90:d2:b9:c2:b7:04:41:87:06:d6:06:
d7:1d:86:45:02:a5:13:c7:0a:01:32:5a:0a:53:37:
42:d4:d5:bb:65:45:6f:55:0b:bc:0b:74:a7:8e:60:
0b:7c:16:70:14:ac:32:3d:b2:76:f0:92:7e:ee:cc:
3a:50:50:ac:21:37:58:0f:50:db:6a:11:d3:a0:35:
30:db:33:d6:b5:01:f9:a2:42:51:b8:1c:f5:66:d9:
ec:d4:6f:08:ff:00:f2:32:d0:00:58:67:67:66:30:
48:12:93:5d:2d:20:58:aa:6d:85:0e:99:bd:0d:73:
de:81:e1:c1:7c:39:6d:7a:4b:1c:e1:2f:12:08:10:
fa:f2:ea:ee:66:03:7d:24:7c:df:ca:42:64:cc:cf:
3a:cd:79:0e:d6:07:64:d2:c1:94:fb:20:ad:f8:8e:
0b:1c:ff:7f:2b:fb:29:30:37:d2:40:9b:de:50:42:
e4:51:e1:e9:5b:2d:84:78:8a:92:fa:84:e3:cd:ef:
b4:b6:5c:45:ee:7e:43:31:7f:ff:21:d7:c6:40:6c:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:D2:31:B8:47:00:95:3C:5F:10:E0:9A:CB:E3:FC:EA:48:09:46
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/7P_SMbhHAJU8XxDgmsvj_OpICUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f5:dc:ac:12:27:c9:12:79:91:01:f8:2e:18:95:54:42:fd:
95:01:c1:be:00:b9:fd:05:be:83:83:2a:4f:56:a6:d0:25:09:
a9:76:af:f9:b4:c5:d8:a6:26:35:87:57:a9:3d:c0:a7:a0:0f:
44:39:f2:b4:8f:70:26:db:0e:76:5f:41:c7:ec:2d:76:4f:b7:
eb:86:03:03:69:49:b2:fd:0a:d0:ee:b4:e8:b5:01:82:63:39:
60:26:8b:0f:93:33:0d:ed:b3:9e:3e:63:d9:88:21:33:b8:6f:
de:a6:83:75:57:7c:f1:9e:64:81:9d:79:55:43:ae:ab:f2:7b:
ad:08:ee:1c:7c:ee:77:2b:b2:63:c0:8a:7a:c3:e0:79:f4:d5:
e4:31:ae:fe:83:55:e6:45:0a:5d:94:e7:3e:57:67:2a:27:04:
ca:55:2b:be:d4:9a:e5:b2:d0:18:21:b6:9b:22:35:84:50:71:
ed:53:dd:9c:5e:48:b1:7a:2e:73:7b:6b:a1:d9:25:57:66:3b:
ad:73:5f:af:36:d4:6e:ee:46:72:2f:0d:96:de:d3:5a:89:fd:
ae:65:c7:75:21:e9:e2:32:b1:e2:22:93:1c:13:94:1f:25:93:
1f:5d:e5:f9:dd:09:25:10:f6:93:c8:bf:8b:83:c2:75:b1:71:
20:dd:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:21 2023 by rpki-client on console-ams.rpki-client.org