Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/DnpfjlyuXXlGsCYMzyKDPlrDdvU.roa
File: DnpfjlyuXXlGsCYMzyKDPlrDdvU.roa (raw, json)
Hash identifier: ++ZSq2ZamyngUE99fvXJ8Ft6kRa0NVx1zKG1a4MwELw=
Subject key identifier: 0E:7A:5F:8E:5C:AE:5D:79:46:B0:26:0C:CF:22:83:3E:5A:C3:76:F5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01831C9CD47C11DB40A42BBE419D2677FDB2
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/DnpfjlyuXXlGsCYMzyKDPlrDdvU.roa
Signing time: Thu 08 Sep 2022 10:19:43 +0000
ROA not before: Thu 08 Sep 2022 10:19:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 193.35.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:9c:d4:7c:11:db:40:a4:2b:be:41:9d:26:77:fd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 8 10:19:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e7a5f8e5cae5d7946b0260ccf22833e5ac376f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:e8:08:42:f5:fb:f2:69:28:27:76:47:dd:
f8:a8:50:9e:73:1b:6a:45:0b:c8:fd:6a:2c:4c:5a:
6c:22:e8:0a:b6:19:eb:5f:a7:6a:ab:dd:5e:2e:66:
d5:2c:b5:23:c8:e9:92:0a:9d:86:6a:6f:a9:85:50:
58:eb:3b:d1:76:83:65:fa:ca:e4:0b:ff:bc:77:91:
12:e0:b3:66:3f:80:26:b6:0e:d5:21:c8:4b:c0:fc:
02:1e:d7:cb:52:9b:c2:cd:ab:22:1f:15:0d:02:e2:
11:7c:5c:e7:54:6c:99:4f:63:eb:2d:aa:29:24:1f:
d7:39:a1:9f:6a:9c:02:15:23:61:5c:59:7c:cc:82:
cc:bd:da:28:fb:ed:ad:c8:d1:ee:2c:93:dd:20:9e:
5f:9d:43:63:a2:a7:25:c0:bb:cb:c9:b1:aa:aa:d0:
0c:7c:36:b3:98:42:3d:9b:55:6d:b2:4b:9b:2e:b7:
92:35:1a:f6:07:c6:be:66:0c:2f:76:bc:40:71:3b:
5c:82:e1:91:0d:35:25:55:67:a4:50:2f:50:6a:98:
1a:d7:8c:cd:6c:8e:05:c2:8f:8c:bc:ae:97:35:50:
59:ea:f8:4d:3a:15:de:f5:2e:13:17:e9:62:df:70:
57:11:a8:d3:0c:2e:e9:4a:7a:4a:51:21:2a:2d:e0:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7A:5F:8E:5C:AE:5D:79:46:B0:26:0C:CF:22:83:3E:5A:C3:76:F5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/DnpfjlyuXXlGsCYMzyKDPlrDdvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a0:af:ab:44:24:26:77:8b:b6:b6:e2:bc:58:38:79:1f:11:
f0:51:36:34:12:a2:13:5a:9d:c7:71:29:b4:f4:ac:22:ea:2d:
93:db:d6:9c:98:fe:7f:75:66:9d:54:d5:22:5f:df:36:4c:24:
9f:8a:bf:b9:86:7a:7c:e4:2b:ba:01:f9:50:48:67:e2:16:d3:
a8:8e:82:f3:fa:a0:cc:75:99:0f:35:d7:23:62:85:20:d8:a6:
ed:01:3c:81:16:5c:8c:d2:36:28:af:46:c0:d1:f1:f2:59:ae:
33:dd:08:6b:4b:43:e9:2c:3a:91:7c:62:fa:7b:e2:94:56:48:
5c:ce:92:44:82:44:4a:f4:87:50:44:82:68:f2:04:59:07:c2:
01:cd:04:58:fb:c6:6f:9a:2c:1a:dc:6f:3a:29:65:50:66:25:
e7:a0:10:c4:ed:71:bc:5d:ab:82:49:90:f2:20:e4:fd:85:9a:
ae:06:95:05:59:74:19:14:71:36:d8:e9:c5:35:5d:aa:cf:0b:
4c:06:c6:8f:93:98:ef:21:bd:f3:17:e5:c3:bf:1d:20:82:ae:
c6:c3:00:90:c2:7c:13:95:01:0b:f1:f6:24:fa:09:81:46:cf:
ab:f7:64:c0:fe:43:c8:c3:35:a9:dd:f9:14:8e:23:fd:7f:c7:
45:93:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org