Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7sna7rp-EhFuNRYG6fBr76r8jt8.roa
File: 7sna7rp-EhFuNRYG6fBr76r8jt8.roa (raw, json)
Hash identifier: mLcpa1FVGHECwP7hfhHYO0vJX422BcFWVoUbuEJ91a8=
Subject key identifier: EE:C9:DA:EE:BA:7E:12:11:6E:35:16:06:E9:F0:6B:EF:AA:FC:8E:DF
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 08DC1069
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7sna7rp-EhFuNRYG6fBr76r8jt8.roa
Signing time: Sat 01 Jan 2022 07:01:26 +0000
ROA not before: Sat 01 Jan 2022 07:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 193.107.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148639849 (0x8dc1069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 1 07:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eec9daeeba7e12116e351606e9f06befaafc8edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:bc:ac:a7:db:83:ad:1e:94:6c:34:4f:10:
51:89:58:90:d3:88:ba:1e:aa:49:b9:47:41:b4:95:
cc:07:90:f1:72:41:30:8f:65:53:80:20:c1:fd:4d:
77:36:dc:09:c0:73:90:bd:e8:69:66:26:cc:c9:49:
7c:76:dc:ac:df:b4:79:9a:db:a1:eb:6c:64:69:8c:
f5:a2:d9:4b:5d:0b:86:02:b0:9c:3c:54:9a:80:de:
70:38:0b:c4:56:cf:eb:42:58:a2:64:9e:21:bf:ee:
c0:de:81:70:d0:25:c5:c3:ee:5e:d2:cd:aa:fc:c0:
e4:28:bb:96:75:01:65:f9:38:f3:00:2b:c2:e7:af:
3c:ee:be:6f:fc:8c:df:08:71:f3:51:11:17:40:cf:
d0:e9:13:37:1b:26:ae:45:33:9d:70:c2:16:f2:83:
aa:f8:4d:41:6e:a9:1d:12:65:7e:0e:7f:9c:02:c0:
2c:28:b5:3a:5c:93:a9:78:6e:c5:70:7f:3a:83:ce:
13:12:4a:66:41:62:45:8c:56:c3:9b:8a:23:1f:11:
7d:14:10:38:e6:49:e1:22:63:6d:9d:83:9f:7a:e8:
ac:54:45:60:96:9c:45:21:66:0d:c6:51:84:88:76:
3d:03:77:2d:ff:f3:c6:f8:09:25:fe:56:f8:a7:9b:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C9:DA:EE:BA:7E:12:11:6E:35:16:06:E9:F0:6B:EF:AA:FC:8E:DF
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7sna7rp-EhFuNRYG6fBr76r8jt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:24:82:e5:e8:c4:cb:43:9b:3f:71:4b:fb:bb:8f:f4:d8:4d:
53:27:ed:0e:2f:c4:c3:70:f1:4f:74:31:fa:ea:75:a5:55:58:
ab:1c:6c:cb:a6:85:ed:09:63:41:ff:9e:c4:1c:e3:ef:0f:10:
60:49:c3:d0:61:be:d2:93:9c:f7:e6:5a:f0:ea:59:b7:f4:23:
bb:70:fd:45:d0:f5:85:56:56:32:eb:3b:3c:ad:39:65:4e:8f:
c2:79:58:88:a1:f4:7a:cc:c6:73:c0:7f:75:3b:90:27:44:d5:
45:d2:be:eb:0b:f8:74:b6:7e:36:6f:53:8a:c6:20:f6:d2:cf:
1e:52:93:ef:d8:50:ba:21:6a:53:70:1f:fb:f8:32:ea:90:ba:
2c:dc:05:4e:a0:0e:3d:a8:12:83:f9:5a:cc:27:ff:77:13:7e:
7d:1f:b2:ee:44:a6:1e:33:af:d8:a4:7d:51:76:19:72:db:d7:
95:1e:92:4c:a0:b9:4b:85:af:2d:a8:47:76:8e:db:8d:1f:77:
7a:ab:9d:2b:7d:d9:3e:db:c7:c3:6d:5b:40:f6:8e:0c:78:26:
2b:ef:e9:27:e1:8c:f7:0f:5c:5d:0b:43:32:89:32:9b:60:8f:
c3:af:39:f0:30:6b:1f:0b:ae:2f:89:d1:9b:0d:4b:7c:d5:4d:
62:43:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org