Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/RKjcw_awQstcqHZclWBGSRPSyZ0.roa
File: RKjcw_awQstcqHZclWBGSRPSyZ0.roa (raw, json)
Hash identifier: 22helKlkjkVYTytB0c1xGkMHZlt4OMaLg9zuMkWv850=
Subject key identifier: 44:A8:DC:C3:F6:B0:42:CB:5C:A8:76:5C:95:60:46:49:13:D2:C9:9D
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 07ADB8D9
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/RKjcw_awQstcqHZclWBGSRPSyZ0.roa
Signing time: Sat 01 Jan 2022 14:04:37 +0000
ROA not before: Sat 01 Jan 2022 14:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 193.164.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128825561 (0x7adb8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Jan 1 14:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44a8dcc3f6b042cb5ca8765c9560464913d2c99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:b7:ee:2d:f8:61:c1:b2:0b:c4:5d:ca:ae:
e6:83:08:37:c9:0e:de:e9:5f:00:9a:2e:13:39:dc:
bc:67:e1:33:ee:76:a7:37:5c:ca:4e:d4:b7:54:f3:
c2:53:e5:62:0b:c0:33:f6:86:03:47:08:09:d0:34:
5a:06:4d:f4:69:cc:a7:4c:17:ca:3e:4b:08:b3:7e:
2b:14:19:6a:76:7e:8e:04:79:48:20:68:17:8c:73:
dd:b5:44:35:d0:32:ed:f8:af:81:4e:64:34:e7:61:
8d:d0:1c:ce:7b:bb:d9:f4:51:fd:48:7e:3a:52:8f:
8a:b0:fc:fe:75:21:93:e7:1b:59:bb:3f:87:b4:fc:
ba:ca:fe:b9:a9:c0:51:3f:25:cf:de:1e:20:53:96:
ba:1e:52:3e:11:08:a3:36:d6:91:eb:22:02:10:ce:
5b:ec:2c:d5:f4:7d:f0:41:c0:04:3c:b4:0c:87:ac:
60:74:62:7d:a5:02:e5:87:17:72:54:83:f6:64:78:
a1:09:ae:b8:53:c3:c3:60:c5:25:4c:13:59:b1:98:
fb:ac:4c:4e:30:b0:8d:5d:d5:c9:b6:35:b7:6d:33:
73:d9:da:c4:00:dc:79:79:66:1b:50:dc:9e:d0:90:
e3:59:51:dc:93:48:a1:98:3d:20:25:82:c3:b9:aa:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:DC:C3:F6:B0:42:CB:5C:A8:76:5C:95:60:46:49:13:D2:C9:9D
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/RKjcw_awQstcqHZclWBGSRPSyZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.89.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:38:22:a1:51:65:e3:51:80:53:6a:d9:e6:ae:34:aa:ca:57:
a8:e0:d4:25:7b:fb:75:e7:67:9e:81:dc:20:26:c0:5f:8c:03:
dd:e6:1b:bc:bc:43:d9:8e:d0:41:18:97:ea:86:af:a2:ea:49:
4c:af:3b:e0:1b:63:bb:de:48:81:22:0c:aa:de:df:87:13:ad:
f2:5b:c7:b1:f8:0f:27:a6:f7:c6:8f:80:cb:e1:4e:31:14:97:
3f:b6:b3:af:44:be:cc:14:07:9b:67:8f:de:6a:33:44:59:b4:
18:dc:7d:b2:24:99:e9:5d:08:8a:c3:ab:87:66:82:a4:56:8e:
df:c6:af:07:28:5c:20:3d:19:a9:df:e9:00:ac:47:e2:dc:21:
27:46:3f:d6:af:a2:fa:bc:9c:9b:d2:78:79:0a:30:bf:59:73:
c0:f4:2f:3b:eb:9e:bc:70:26:42:13:76:f4:91:11:60:49:89:
8c:2a:22:6a:94:3a:a7:c5:22:36:55:aa:1c:5e:56:91:00:ff:
6f:1c:87:9c:af:e9:1d:56:ec:63:9c:a7:17:c8:16:64:d4:62:
11:bf:60:78:fd:17:5b:00:6d:e1:49:93:e6:95:2a:0c:6d:4e:
82:57:ce:3a:7b:c9:7c:04:60:79:8f:33:e7:db:a3:0d:23:b6:
8b:49:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:24 2023 by rpki-client on console-fra.rpki-client.org