Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IC7FqXUieLuIo7ZTUBGrutv74TY.roa
File: IC7FqXUieLuIo7ZTUBGrutv74TY.roa (raw, json)
Hash identifier: MgSswOUy2dApILu+F9cKA9gZ01t7OBIrDeBFE9Xi920=
Subject key identifier: 20:2E:C5:A9:75:22:78:BB:88:A3:B6:53:50:11:AB:BA:DB:FB:E1:36
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AC44BF6
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IC7FqXUieLuIo7ZTUBGrutv74TY.roa
Signing time: Sat 01 Jan 2022 03:02:31 +0000
ROA not before: Sat 01 Jan 2022 03:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61084
IP address blocks: 93.190.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180636662 (0xac44bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=202ec5a9752278bb88a3b6535011abbadbfbe136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:6d:73:88:60:0a:c3:89:75:a6:bb:46:43:
6c:9b:47:63:f6:a3:d9:e2:56:f0:14:b9:93:18:da:
0e:f5:f3:b1:60:c5:3f:c3:76:18:77:2f:c0:47:c6:
aa:6e:43:3c:2d:17:de:66:9b:c6:af:c6:45:22:e5:
bc:07:69:c2:71:89:e4:0a:43:a8:93:a9:ad:c7:60:
bb:d8:46:05:6f:1e:b6:98:9c:73:8e:7a:9e:aa:89:
86:39:9e:9b:42:e3:ff:03:99:95:3b:9a:87:19:70:
26:d9:5c:c8:5c:87:ff:a4:89:88:92:a4:2e:c8:2a:
1c:89:a4:03:21:0a:57:29:62:c6:83:39:0b:8e:bd:
ca:e9:c4:0e:72:59:0b:53:6b:02:3d:a1:3b:24:56:
c4:59:23:f7:6d:83:d7:d6:7f:25:78:ad:03:d6:c2:
8c:9c:f5:55:f0:42:5d:de:25:78:90:1d:74:5f:d8:
9f:c2:d8:9e:03:b0:91:84:2b:0e:9b:25:fa:63:18:
ff:b9:87:61:e7:20:b7:09:54:8d:da:4c:74:a4:fc:
78:6e:16:f4:92:00:5c:38:ce:fa:e8:c5:44:44:41:
1f:53:a8:a7:60:c6:e6:bc:70:87:33:88:17:d6:f4:
57:43:de:08:66:19:08:2c:71:55:cc:01:1c:8d:4a:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:C5:A9:75:22:78:BB:88:A3:B6:53:50:11:AB:BA:DB:FB:E1:36
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IC7FqXUieLuIo7ZTUBGrutv74TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c9:c2:d4:84:95:bc:c4:8a:43:06:7d:ae:d3:ae:a6:41:2e:
e3:e1:76:57:85:0c:c4:01:b1:e3:8a:8b:df:19:77:94:43:79:
b5:92:21:53:a4:d1:da:23:d0:fd:44:17:2a:12:7e:6f:16:c2:
dc:fd:3f:36:67:2a:c1:dd:31:26:47:64:f9:d6:17:7e:f1:14:
4a:e6:22:d0:a9:2a:3f:4f:1a:85:f8:df:da:7e:c3:98:c3:4a:
7a:47:66:8d:1a:6f:43:f0:8f:9e:7e:79:63:a8:7d:39:f8:5b:
cc:dd:88:cd:4e:ae:66:c2:31:da:3b:df:49:f9:b1:f6:a0:3d:
39:2e:06:78:47:5d:30:88:5a:08:0f:43:b3:d9:d1:a9:09:79:
69:d9:84:f0:a5:8c:ed:a6:32:ae:fd:41:bf:9a:47:96:f9:70:
2b:99:ba:a3:75:b1:be:28:15:f2:55:df:46:d6:0c:ec:94:fd:
c9:e3:80:d0:aa:c4:48:c0:ba:bb:04:8d:f4:4c:6d:e8:50:b5:
b8:81:fa:5c:75:d0:bd:36:94:fb:8f:65:03:cb:ad:02:12:0b:
09:a9:69:ef:65:6b:12:2c:45:40:44:b8:c9:4c:8c:39:4e:46:
77:2b:75:84:01:46:5d:b5:32:90:cf:24:d0:0b:cd:1d:4b:6f:
2e:47:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:09 2023 by rpki-client on console-ams.rpki-client.org