Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/XdRy1qI9rWnJPnXdPiivtTbZ4sA.roa
File: XdRy1qI9rWnJPnXdPiivtTbZ4sA.roa (raw, json)
Hash identifier: dCLUVSkyr+tQIxu7fmuN8FhztFy/o1/LHlu9TzNIyMk=
Subject key identifier: 5D:D4:72:D6:A2:3D:AD:69:C9:3E:75:DD:3E:28:AF:B5:36:D9:E2:C0
Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial: 0184BDC9F8E9AAEDE60DD7C98E4CFE1FEF4F
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/XdRy1qI9rWnJPnXdPiivtTbZ4sA.roa
Signing time: Mon 28 Nov 2022 10:30:40 +0000
ROA not before: Mon 28 Nov 2022 10:30:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31522
IP address blocks: 193.138.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:c9:f8:e9:aa:ed:e6:0d:d7:c9:8e:4c:fe:1f:ef:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Validity
Not Before: Nov 28 10:30:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dd472d6a23dad69c93e75dd3e28afb536d9e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:25:44:0a:17:11:b1:c8:71:8a:b7:67:53:
c2:ed:1b:5a:19:6a:54:90:27:18:f3:3e:34:0e:9b:
fd:e8:29:cc:29:7f:77:ec:78:21:b7:93:28:e4:aa:
c8:75:65:83:26:64:53:88:0e:7b:9a:dc:bb:22:db:
db:42:19:99:1f:b3:f4:84:33:cb:27:f7:87:6e:96:
86:e0:2c:7b:27:92:10:df:65:8a:4e:27:89:2e:fb:
b1:33:0c:d4:24:43:3c:92:8c:19:95:1a:50:44:2e:
bf:df:ad:75:52:16:96:4b:6c:b8:f2:d9:db:26:68:
0e:96:69:70:ca:94:44:72:06:0a:43:24:55:ac:8e:
7f:5b:92:9a:32:0b:34:ef:c3:a2:eb:39:df:d4:49:
eb:9c:1c:dd:c9:78:31:d4:be:86:ae:ba:22:d5:ea:
32:46:69:1a:dd:de:f6:7d:fc:78:8c:91:c0:23:2c:
6d:cc:39:49:e8:31:87:e8:f7:44:07:aa:bd:12:3b:
6e:56:61:a9:e1:17:b5:d1:10:55:60:76:0b:10:23:
80:c9:f6:9b:5c:12:96:d6:5e:78:43:33:a3:fd:69:
f7:fc:f8:8d:a8:d1:26:ac:ce:e6:45:0f:25:ea:ba:
71:f5:aa:a3:2a:5c:12:5a:11:b3:2a:c1:1c:41:82:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D4:72:D6:A2:3D:AD:69:C9:3E:75:DD:3E:28:AF:B5:36:D9:E2:C0
X509v3 Authority Key Identifier:
keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/XdRy1qI9rWnJPnXdPiivtTbZ4sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9d:58:23:fe:f2:dc:14:56:94:de:b3:8a:c8:3e:96:42:3c:
bc:01:74:23:9d:6f:93:5c:75:7e:af:e9:9a:18:63:4f:c9:38:
3a:32:97:89:da:f4:84:4c:e1:2d:a4:f8:80:cd:53:1b:46:91:
57:b3:1c:19:9f:8e:d9:b1:ef:0a:1c:91:d8:e0:02:2d:df:0d:
e8:22:75:ce:81:a3:54:da:3f:b8:47:82:79:7f:5b:f2:42:5e:
f7:d0:73:70:46:d2:00:36:1e:c9:80:e2:77:79:a3:dd:40:d1:
a2:95:d9:8b:95:8d:c9:51:0d:8e:be:32:d6:88:d6:65:8f:27:
1a:14:cc:e9:5d:ab:fa:dc:4e:7e:a6:aa:2e:c5:74:68:14:84:
a9:a5:3c:58:47:47:e8:6e:89:e4:6f:fa:df:50:f8:25:94:3b:
45:69:b3:a4:b3:37:a6:c4:21:2a:5f:45:a4:2d:f4:1d:d1:60:
d7:9a:ec:33:f9:84:4d:3a:f2:43:fe:2f:aa:16:1e:2f:7f:9d:
5e:b5:a7:43:1c:0f:21:0b:77:79:76:48:a4:ad:65:aa:49:92:
12:c4:c9:04:28:0f:41:a4:a0:74:57:b3:a9:29:17:d9:95:91:
4d:8c:d4:1e:4b:58:1f:5c:0b:aa:5e:1b:f4:0f:5e:e9:fd:2d:
56:e8:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:00 2024 by rpki-client on console-ams.rpki-client.org