Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/hV0S3vqRx-SqS0Yuv17Mo87mhQo.roa
File: hV0S3vqRx-SqS0Yuv17Mo87mhQo.roa (raw, json)
Hash identifier: pGdzs6K+Bsp3CNUn61keoQnprD6ErMix1HtDqgqIumE=
Subject key identifier: 85:5D:12:DE:FA:91:C7:E4:AA:4B:46:2E:BF:5E:CC:A3:CE:E6:85:0A
Certificate issuer: /CN=77fb3e86b1474db04a15cae0efc3773de4b835bb
Certificate serial: B8BF03
Authority key identifier: 77:FB:3E:86:B1:47:4D:B0:4A:15:CA:E0:EF:C3:77:3D:E4:B8:35:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_s-hrFHTbBKFcrg78N3PeS4Nbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/hV0S3vqRx-SqS0Yuv17Mo87mhQo.roa
Signing time: Tue 26 Apr 2022 14:45:33 +0000
ROA not before: Tue 26 Apr 2022 14:45:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 193.8.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12107523 (0xb8bf03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fb3e86b1474db04a15cae0efc3773de4b835bb
Validity
Not Before: Apr 26 14:45:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=855d12defa91c7e4aa4b462ebf5ecca3cee6850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:f9:da:70:f4:ee:94:9d:23:ad:a4:49:40:
1c:ab:ff:32:24:1d:ed:a9:4d:c4:1e:41:86:47:39:
8f:88:3f:a2:93:07:09:63:e9:69:89:e3:99:eb:22:
c0:d2:9a:26:8e:65:06:3e:fa:bb:f7:fc:f6:0e:09:
4a:da:cc:40:c7:9b:06:c6:54:58:7e:4b:96:06:29:
88:28:d0:9a:5c:c6:ac:6e:a0:e0:db:72:6f:22:a2:
1f:51:87:ef:93:90:e8:8c:b3:c6:1d:e9:18:bf:e1:
be:1a:94:dd:91:3c:ea:39:84:a4:79:e5:0d:f8:0c:
05:de:87:f8:73:9f:28:d9:69:4e:f3:eb:18:c4:41:
3b:16:00:0c:bc:95:d1:42:19:06:02:8f:bd:ec:29:
b4:82:64:a6:0c:22:99:1c:6e:9b:d6:e2:27:96:fa:
5e:f5:50:9e:52:ab:1a:47:16:52:bb:0f:5f:d1:65:
b5:76:71:a1:f9:ef:8e:c7:d0:56:5b:50:13:1c:b6:
8b:de:d3:29:8c:55:4b:66:17:f6:72:81:16:1f:5b:
3c:9d:a7:b1:3e:d1:21:fb:cc:5f:f2:14:85:ce:61:
35:5b:7c:33:71:82:72:9a:3d:74:fc:52:75:56:09:
08:e6:40:80:5c:3e:8d:c6:01:6e:4d:fd:f1:26:a1:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:12:DE:FA:91:C7:E4:AA:4B:46:2E:BF:5E:CC:A3:CE:E6:85:0A
X509v3 Authority Key Identifier:
keyid:77:FB:3E:86:B1:47:4D:B0:4A:15:CA:E0:EF:C3:77:3D:E4:B8:35:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_s-hrFHTbBKFcrg78N3PeS4Nbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/hV0S3vqRx-SqS0Yuv17Mo87mhQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/d_s-hrFHTbBKFcrg78N3PeS4Nbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.75.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:27:1c:a1:a8:f3:d9:91:bd:2c:93:30:df:93:f4:a3:b0:07:
a0:1d:a0:4b:ef:e5:d0:ee:df:b0:18:00:4f:10:a6:6f:91:c9:
23:e4:18:cb:af:e5:d6:58:0a:f7:6d:15:90:75:9a:ef:55:09:
45:6f:ae:37:a6:86:47:66:22:87:bf:af:b6:3e:ba:45:44:72:
fb:7b:f7:66:83:0b:f7:f6:26:96:72:29:d1:bb:82:3a:3d:ee:
9a:d4:38:c6:1f:73:0d:2b:c2:5a:07:35:c9:78:2b:aa:7b:3a:
3d:10:c2:9a:92:47:a9:37:70:7a:58:70:9b:05:a8:4c:26:a0:
7c:67:83:79:50:39:b6:a2:fe:4e:c8:8e:a7:f3:45:cb:d6:a8:
8d:bc:e4:15:48:88:41:f6:5c:91:b7:85:0e:0e:e4:18:a0:3b:
86:58:96:c7:96:d0:00:42:cd:1b:af:d0:ba:65:5e:73:b6:34:
ea:8f:ce:5f:e2:50:b6:f0:9e:b2:66:3d:7d:e5:f6:ad:03:09:
f7:99:0b:32:f6:1c:31:6d:37:65:12:8b:a6:01:16:12:57:79:
00:83:50:cf:98:ff:fe:9a:47:3a:b9:3d:f5:07:47:55:c8:04:
ff:ae:bb:5e:d1:a1:c4:3a:bd:2d:4c:0c:52:a2:ea:f4:b0:b3:
c7:6c:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:52 2023 by rpki-client on console-fra.rpki-client.org