Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vDf4lAbm_scGWxLgU-tHUQINjBY.roa
File: vDf4lAbm_scGWxLgU-tHUQINjBY.roa (raw, json)
Hash identifier: Tbto8lYQ/6JqB1fEr0ETY7XWHhT5/PuAI3uwpiEgISQ=
Subject key identifier: BC:37:F8:94:06:E6:FE:C7:06:5B:12:E0:53:EB:47:51:02:0D:8C:16
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B147D60
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vDf4lAbm_scGWxLgU-tHUQINjBY.roa
Signing time: Sat 01 Jan 2022 13:58:09 +0000
ROA not before: Sat 01 Jan 2022 13:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205342
IP address blocks: 193.192.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722763104 (0x2b147d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc37f89406e6fec7065b12e053eb4751020d8c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:b4:a2:7e:b5:62:69:38:dc:f4:22:f3:94:
a2:c7:b2:3d:4a:07:b1:11:b6:54:ec:95:8d:c6:8d:
af:f4:25:3d:9b:db:11:04:8d:ab:e4:97:aa:2c:06:
08:ed:57:6e:0e:27:74:66:f3:96:e0:c9:96:2b:88:
c5:6f:f1:f8:b7:e1:51:94:bc:07:4c:a5:f5:bd:8a:
d8:17:4a:73:c1:6b:90:27:11:64:72:19:47:29:ef:
ab:07:e4:bf:7d:24:da:0c:e2:b2:8e:e8:d6:4b:db:
58:66:87:74:2c:96:4a:4f:60:46:b5:35:40:19:5f:
23:3c:43:67:b7:bf:83:96:ae:70:2f:7e:3c:2b:d2:
07:cb:25:37:b1:a5:99:ab:44:34:c3:f0:23:29:74:
98:85:74:99:0f:ab:4d:40:c5:2b:5e:67:d2:3b:50:
08:ec:cc:5d:b2:d4:72:11:f2:18:54:55:09:e4:79:
f8:b4:3d:06:54:dc:76:be:f4:51:d5:c2:90:29:84:
1d:45:34:2d:51:eb:c8:49:e0:2a:d7:db:e1:a2:98:
c6:9a:3c:d3:b4:50:2a:33:a8:77:80:e9:69:3b:b6:
cd:de:00:e2:5f:9b:b1:f6:2c:30:98:a8:81:95:14:
fd:7d:f2:fc:cd:e1:1e:cd:28:dd:87:75:f2:a7:e4:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:F8:94:06:E6:FE:C7:06:5B:12:E0:53:EB:47:51:02:0D:8C:16
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vDf4lAbm_scGWxLgU-tHUQINjBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:46:72:fb:df:23:79:87:58:83:28:b2:46:a9:fb:53:b3:94:
37:72:0b:2f:65:b1:b7:9a:a8:e4:9b:5e:75:b4:80:34:c5:2e:
09:a8:11:ee:e8:c8:5b:66:79:6b:a1:a8:af:37:67:ab:fd:b9:
8e:62:59:15:97:55:e7:6c:02:49:13:88:e8:52:fd:c6:a4:c9:
49:d7:52:60:59:59:1f:f8:06:97:4b:8d:9b:a0:e3:9a:b2:10:
56:63:75:59:a6:5a:01:92:24:59:d2:e8:2b:92:74:b5:91:d2:
73:7a:82:fc:51:0d:0a:22:90:41:d8:36:c7:e8:b5:f4:8a:02:
b2:a0:ac:e8:02:56:17:82:b2:1f:9c:0d:69:24:65:10:6f:b1:
e3:66:e5:a4:65:d1:3f:53:3d:4c:42:57:5e:76:fb:7e:1c:63:
24:e8:8f:59:f2:4c:61:8f:2b:bd:7d:52:a0:6f:29:c9:3e:68:
25:c5:a6:5e:0e:27:72:9d:06:f5:a6:52:cf:28:cb:69:92:ad:
e0:f9:21:38:5b:8f:51:9d:e2:60:f9:d7:fc:93:a9:f0:e9:76:
e2:fc:bf:e0:3a:2f:37:1f:f2:43:61:01:e3:85:90:45:1d:35:
e5:5a:6e:4a:2a:4c:2e:d9:bb:9f:17:a1:e3:b6:97:d8:76:5e:
06:5e:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org