Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/eQCA7hPBFEsxHoTjEZsxq5O-9Uk.roa
File: eQCA7hPBFEsxHoTjEZsxq5O-9Uk.roa (raw, json)
Hash identifier: ZlNblpthARPk32w9lEkCBs1NrpNBy28KNehXVISHetU=
Subject key identifier: 79:00:80:EE:13:C1:14:4B:31:1E:84:E3:11:9B:31:AB:93:BE:F5:49
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 033F7AD0
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/eQCA7hPBFEsxHoTjEZsxq5O-9Uk.roa
Signing time: Sat 01 Jan 2022 05:02:01 +0000
ROA not before: Sat 01 Jan 2022 05:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.30.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54491856 (0x33f7ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Jan 1 05:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=790080ee13c1144b311e84e3119b31ab93bef549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:1e:b0:ba:c6:f4:b4:79:54:6c:8b:57:6e:
ba:3c:76:37:b5:bf:61:fa:a9:04:ea:dd:08:26:13:
61:38:68:23:3e:72:8e:ca:67:71:22:40:f6:04:f6:
48:87:bd:da:0f:24:e0:54:7e:6d:b9:d2:e0:f3:dd:
be:ca:9c:fd:f6:fd:ea:54:7a:58:61:1d:38:ac:d8:
ee:88:85:30:ae:84:55:7d:1f:d9:45:0f:dc:b3:96:
be:f5:53:3a:89:31:cd:bc:86:b3:bf:bf:9c:7d:26:
36:c7:15:5f:f6:fa:33:3a:f3:bb:0c:63:8d:62:a5:
70:48:83:7d:2f:8e:81:67:3b:79:26:cd:1d:f4:2e:
9a:00:3f:46:0b:9d:b4:8b:23:b5:19:91:a5:a7:f1:
01:53:ed:3d:c3:ae:c3:77:53:db:32:4a:e8:e7:22:
c7:29:4c:15:47:a1:24:94:d6:c5:57:66:bd:ed:a3:
ba:5b:d0:64:a1:f8:e3:68:29:31:2d:2a:59:84:1f:
2a:e9:f3:19:e4:ee:3c:4b:6a:95:f0:1d:ec:92:10:
f7:11:d6:3f:90:90:22:31:f5:f5:f7:d9:a7:bf:fe:
35:88:72:52:23:ca:30:a9:9a:63:fe:4d:c9:8a:da:
b6:24:55:d4:82:00:2a:40:f2:be:99:e8:0b:59:41:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:80:EE:13:C1:14:4B:31:1E:84:E3:11:9B:31:AB:93:BE:F5:49
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/eQCA7hPBFEsxHoTjEZsxq5O-9Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e2:7a:f1:6c:46:5c:df:8a:9f:ae:59:66:92:81:5d:a7:19:
30:cf:e0:14:85:2d:50:4a:08:26:52:73:3a:16:35:99:14:2c:
b0:cd:5c:dc:cd:7d:e9:b3:31:d3:f8:12:a0:87:0a:08:0d:b5:
5f:99:26:1d:43:9d:b5:7b:38:c5:a0:7a:5d:cf:73:40:99:9b:
1f:c6:26:8b:a6:f7:5f:d8:ff:34:d2:d1:13:4e:c4:7b:7b:3f:
e5:af:ec:ab:77:39:7f:19:2f:26:45:bb:56:31:2d:e0:b9:14:
5d:45:a2:a1:f5:9b:3c:78:a6:b2:19:a1:b7:b7:dd:05:6c:ad:
8a:00:0c:62:84:8b:7c:4e:2c:e4:15:ce:22:97:48:6b:f4:58:
99:82:fc:f7:94:93:4c:2b:fd:24:e4:b4:92:69:76:2c:c3:ad:
0b:e0:22:f5:21:04:55:14:d0:58:41:02:db:f0:91:69:ce:1c:
e3:6f:bf:d7:35:1d:e6:b8:d9:62:4d:0c:a2:1b:a0:12:1c:70:
16:09:86:7b:be:72:97:ec:16:a2:3b:b7:39:b8:9b:7b:cf:0b:
41:10:03:c6:fc:3c:4d:a3:04:a7:84:c2:e6:58:56:28:43:89:
93:90:f5:0b:be:db:ba:15:3f:a2:08:c2:4b:6e:d7:25:aa:a4:
18:3d:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:28 2024 by rpki-client on console-ams.rpki-client.org