Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/3yyUhWFlHhMQThx8caScqO2svJU.roa
File: 3yyUhWFlHhMQThx8caScqO2svJU.roa (raw, json)
Hash identifier: 4unLMT/0sZqT53xGaFJGtL3sDv16U9jBwni6fmefgUw=
Subject key identifier: DF:2C:94:85:61:65:1E:13:10:4E:1C:7C:71:A4:9C:A8:ED:AC:BC:95
Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial: 0FCD
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/3yyUhWFlHhMQThx8caScqO2svJU.roa
Signing time: Mon 02 May 2022 13:36:14 +0000
ROA not before: Mon 02 May 2022 13:36:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8976
IP address blocks: 193.105.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4045 (0xfcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Validity
Not Before: May 2 13:36:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df2c948561651e13104e1c7c71a49ca8edacbc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:b2:e0:43:9d:7d:2b:34:c6:2e:1a:f4:b8:
13:f3:c0:0b:4a:53:46:83:40:7c:03:09:22:60:68:
c7:b2:4e:e5:21:9a:d8:73:89:6a:05:d5:6f:c5:cd:
37:28:6c:21:a0:39:ca:2b:59:67:7f:57:7a:ad:2c:
fc:67:60:40:33:56:c5:71:f8:70:06:be:34:cb:c7:
38:05:5b:62:fc:08:0c:12:0a:52:75:7d:a4:ba:1c:
ea:3b:55:83:97:fe:c0:43:07:48:43:e9:42:4e:4e:
c5:35:bf:06:e5:fa:42:1b:98:43:e6:12:e8:df:9a:
89:f9:a4:85:45:10:c0:0d:29:af:0b:e7:98:4c:ff:
67:b7:19:31:8a:60:ec:0b:66:7d:4f:19:7d:59:95:
4e:fe:30:1f:ef:44:24:f3:f0:f4:e2:ff:a7:e4:29:
bf:68:9b:de:38:1f:7e:87:6c:0e:d8:84:c4:ce:7e:
59:61:ac:f6:99:8e:36:f6:2b:28:1e:5f:a7:fb:99:
d3:9a:16:4a:28:06:00:64:3f:5e:2d:e6:43:1d:30:
4c:cc:a2:71:e4:72:3a:32:d3:a7:6b:9a:60:6f:a7:
b3:9e:06:90:d3:0c:db:5e:28:e8:8d:4a:3f:28:4a:
0b:91:89:f1:22:3d:9c:4e:33:ec:e3:63:9e:cd:47:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2C:94:85:61:65:1E:13:10:4E:1C:7C:71:A4:9C:A8:ED:AC:BC:95
X509v3 Authority Key Identifier:
keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/3yyUhWFlHhMQThx8caScqO2svJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:80:4a:d1:1b:fb:cd:4a:ff:95:28:84:9d:bb:f3:fc:85:59:
2c:a3:18:1a:f8:1f:a2:dd:85:9b:46:e3:b4:f5:9d:e7:d6:c8:
d8:8a:68:e4:36:96:21:f7:11:15:3f:d9:82:29:2f:a2:47:05:
87:ed:6a:3d:f7:9b:a3:8b:3c:82:81:97:60:38:a2:e5:ca:66:
0e:e6:9b:d7:2c:59:35:61:13:d4:70:55:73:1a:8d:3a:94:45:
e6:7a:9e:d9:4a:f3:48:60:65:92:fb:a7:73:5e:a7:a0:fe:aa:
58:65:e0:ee:c4:eb:0a:37:09:a0:ac:b9:24:09:1f:24:7a:cb:
26:12:d0:e8:ee:1a:bb:4b:2e:ec:d2:03:f9:d4:a6:ed:c1:c9:
f7:58:fb:59:fd:73:27:50:10:1d:81:26:a7:dc:1f:a7:bd:8a:
49:6e:c9:18:96:a5:5b:10:d2:2d:f6:c8:34:37:cf:3f:b3:f4:
ad:a4:10:30:4b:80:77:8c:34:a8:60:58:d1:45:33:ae:2c:e4:
a2:6c:7d:4e:40:ed:16:7d:7e:3c:c7:d6:e1:51:ee:b3:c6:4d:
cc:cd:95:27:ca:49:7f:5d:0e:41:5b:05:e9:ee:81:63:09:97:
15:fa:f4:b9:19:2f:6d:b9:79:60:d2:b3:43:47:f0:cb:d8:a1:
41:5c:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org