Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/xxmCagqkXcdH4PHDIUyBOi04lUE.roa
File: xxmCagqkXcdH4PHDIUyBOi04lUE.roa (raw, json)
Hash identifier: ZwctSHrgC/4lcjT3KgYMZdPCOWAHsSvlNsioXbMZIJc=
Subject key identifier: C7:19:82:6A:0A:A4:5D:C7:47:E0:F1:C3:21:4C:81:3A:2D:38:95:41
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 8021
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/xxmCagqkXcdH4PHDIUyBOi04lUE.roa
Signing time: Mon 04 Apr 2022 09:38:21 +0000
ROA not before: Mon 04 Apr 2022 09:38:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49763
IP address blocks: 193.164.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32801 (0x8021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Apr 4 09:38:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c719826a0aa45dc747e0f1c3214c813a2d389541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:bd:66:18:d7:2b:d2:be:59:37:72:fe:93:
c6:95:63:91:39:d3:08:c6:1a:04:14:aa:10:c9:41:
ca:02:78:1f:6a:f9:60:62:ef:96:b5:cd:ff:a6:9a:
aa:16:13:d5:ed:49:a0:4d:81:b3:84:c5:e4:47:a9:
c7:a6:63:3b:d7:28:b1:05:51:02:24:09:93:4d:03:
7f:4d:e6:86:95:13:d3:b2:d8:b9:e9:c5:0b:6d:e1:
df:30:5c:ca:f4:d4:e4:ef:2d:e6:8f:73:ed:4e:0e:
fd:63:2f:4b:dc:9b:3c:bd:fd:8c:31:9d:a0:f5:72:
91:68:4a:af:dc:0c:89:dd:28:fa:9d:ab:bd:ec:eb:
da:b8:b5:8e:9f:28:f0:ab:07:23:5c:ad:60:0c:24:
94:5e:e5:24:55:20:8e:5d:1c:c3:d0:17:99:85:cd:
7a:ca:13:cb:4c:ae:9e:fd:f5:6d:e8:66:03:6d:7b:
5a:b8:8d:d5:c8:5d:ad:34:84:25:a6:05:55:55:71:
d1:f2:18:7d:a1:c9:e4:fa:87:f0:fb:fd:3b:41:21:
f5:e0:70:e7:b2:47:d5:d7:a6:9d:a3:47:51:03:b6:
99:36:f8:4d:2d:ab:b0:af:66:59:d6:13:ef:2b:4d:
41:a1:16:95:fc:a1:1d:c0:f1:01:5f:4a:3c:94:6d:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:82:6A:0A:A4:5D:C7:47:E0:F1:C3:21:4C:81:3A:2D:38:95:41
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/xxmCagqkXcdH4PHDIUyBOi04lUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.196.0/23
Signature Algorithm: sha256WithRSAEncryption
78:00:d5:9d:4e:54:a9:cb:cc:7a:3b:13:a5:56:5f:91:a3:cc:
d3:15:f7:42:93:d5:de:a1:23:9a:2c:85:5c:22:31:f0:8e:86:
66:e0:e4:a3:79:7a:16:ed:07:96:8c:da:a7:48:3f:14:6c:a7:
d9:04:d1:cc:c0:48:03:26:ec:4a:a7:b5:2c:3e:43:d5:4f:65:
c7:30:dc:da:90:16:59:e8:69:22:1a:12:2b:0f:76:e9:70:d8:
ea:0e:98:41:81:1c:d7:62:6c:59:6e:b0:a7:20:c2:77:1e:18:
20:b2:92:11:40:af:a3:98:d5:18:35:e1:90:60:ad:97:ea:ec:
37:c3:a0:84:3f:e7:e2:25:54:37:79:70:5c:0d:f1:2e:c9:d7:
a3:87:9a:ca:8e:4e:c4:1d:6b:94:22:60:fe:3e:3e:f5:03:7c:
a3:3a:a2:4e:80:63:38:c7:78:75:71:60:35:c8:46:e8:07:ee:
40:e8:f7:1d:1a:ff:cb:32:81:32:9f:86:97:0a:ce:07:5b:7b:
62:8a:11:78:6b:c2:17:1b:c1:ea:78:fd:9e:e5:3a:eb:be:c1:
14:f2:9e:30:a7:22:be:e1:48:cd:a4:f2:a9:60:46:d1:fd:c8:
a4:c9:f1:54:77:79:6d:3b:bd:c3:19:30:09:79:fc:5c:f2:0a:
8a:dc:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:00 2024 by rpki-client on console-ams.rpki-client.org