Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/oywP9YZtjdXD1oxeG9myz0M-vL8.roa
File: oywP9YZtjdXD1oxeG9myz0M-vL8.roa (raw, json)
Hash identifier: Au9wLN2+XxIVsc4wH3ecrt0zR2Zvf40IyTqlpPgvWwI=
Subject key identifier: A3:2C:0F:F5:86:6D:8D:D5:C3:D6:8C:5E:1B:D9:B2:CF:43:3E:BC:BF
Certificate issuer: /CN=219f8d1fba35d49835d42fcd2294008fa741da8f
Certificate serial: B0F2BC
Authority key identifier: 21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/oywP9YZtjdXD1oxeG9myz0M-vL8.roa
Signing time: Sat 01 Jan 2022 04:59:55 +0000
ROA not before: Sat 01 Jan 2022 04:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 193.32.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11596476 (0xb0f2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219f8d1fba35d49835d42fcd2294008fa741da8f
Validity
Not Before: Jan 1 04:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a32c0ff5866d8dd5c3d68c5e1bd9b2cf433ebcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:9a:55:41:2c:b7:0a:16:32:f2:1c:ea:58:
32:ba:cd:2a:11:13:26:49:b5:a7:e3:ff:c6:02:e4:
bb:12:e5:21:ed:25:91:e1:eb:42:6f:e3:63:21:30:
4f:b3:14:e5:f0:67:fc:c9:f6:11:73:b3:60:06:cb:
43:62:ef:6e:c8:69:8d:44:3c:4f:6b:74:22:19:3c:
8a:a3:d2:78:ec:b8:74:f2:af:df:c0:02:e0:a0:a1:
3b:78:12:33:cc:36:af:b6:cd:de:b7:c2:3d:11:03:
fe:70:65:44:92:de:f4:26:5b:67:8f:90:e8:e3:b6:
91:b9:bf:67:23:0a:e3:8d:57:6f:71:a0:8c:63:5a:
7d:ee:2e:9e:ce:ae:b5:18:09:b7:b4:01:c8:bf:6e:
b3:51:02:29:69:0e:91:ba:fa:64:a3:83:9b:14:d3:
ca:27:5b:25:8a:61:3d:0e:9c:d0:13:1c:ff:09:6f:
74:c5:08:dd:11:f7:d6:96:f7:8b:68:e0:d6:ae:93:
01:06:a8:5d:a6:9f:0a:a5:fe:5c:f7:eb:69:16:ae:
74:9a:f5:40:bb:aa:af:3b:62:94:e8:24:e6:e3:3a:
e7:70:b8:0b:15:7e:cf:10:c4:1d:2b:a1:37:f5:d7:
6b:4e:82:b3:f2:5a:f0:6a:d2:d3:3e:7c:fb:00:d7:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2C:0F:F5:86:6D:8D:D5:C3:D6:8C:5E:1B:D9:B2:CF:43:3E:BC:BF
X509v3 Authority Key Identifier:
keyid:21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/oywP9YZtjdXD1oxeG9myz0M-vL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4b:18:be:6f:96:8a:dc:e7:b6:0a:16:d0:8b:b8:e9:2c:57:
6a:b4:21:e6:1a:ab:94:66:be:a5:c5:3c:92:35:44:7d:26:54:
b3:4e:0a:d2:5a:42:a7:01:63:84:b5:52:f3:dc:6e:af:db:8f:
fc:08:3e:c9:45:24:ad:99:05:3f:9d:46:01:95:e5:55:20:72:
f6:0d:4b:69:b4:88:f2:58:ff:d1:a5:20:5d:8d:e7:20:1c:a1:
71:a0:a3:17:37:2b:6b:00:12:82:70:87:f1:36:3f:fa:9b:2f:
3a:cc:cb:1a:b8:d0:99:ce:1e:79:33:7a:d7:f0:a7:70:26:e1:
fa:20:11:b8:96:49:7e:4a:7d:4c:13:3a:c1:e5:b2:25:70:f2:
2e:5a:a0:e2:fb:34:f5:99:10:6f:75:c9:d9:09:98:34:40:cb:
8a:f0:a2:10:37:35:77:47:64:25:b8:86:01:35:15:79:b3:4d:
f7:10:26:a3:dd:ac:d5:da:84:3c:81:eb:98:35:59:0a:6c:e4:
cb:d1:d1:2c:18:a6:d2:46:4f:a1:a5:8c:08:38:e2:48:3f:fa:
9f:a5:d2:57:d6:44:ae:2c:d8:ea:67:21:0c:de:f3:d9:21:bd:
bd:f7:a9:70:96:86:50:b4:07:4d:95:d1:dd:ae:69:fa:a3:4d:
d5:61:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:15 2023 by rpki-client on console-fra.rpki-client.org