Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/_AX8tJMyQD0pW48t5H9d7Rsu7Xc.roa
File: _AX8tJMyQD0pW48t5H9d7Rsu7Xc.roa (raw, json)
Hash identifier: BGTRhKvctR8LsPcaTPNAhsMla0G/mf3YQNDWZKvUVTw=
Subject key identifier: FC:05:FC:B4:93:32:40:3D:29:5B:8F:2D:E4:7F:5D:ED:1B:2E:ED:77
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 023FB4
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/_AX8tJMyQD0pW48t5H9d7Rsu7Xc.roa
Signing time: Sat 05 Feb 2022 10:04:07 +0000
ROA not before: Sat 05 Feb 2022 10:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58169
IP address blocks: 193.0.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147380 (0x23fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Feb 5 10:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc05fcb49332403d295b8f2de47f5ded1b2eed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:23:a7:a6:1b:04:4b:5a:a5:b3:ff:8a:25:53:
5f:dd:a7:20:ce:43:c4:66:33:4f:83:d7:af:6b:bc:
c2:7d:57:58:be:2c:d8:54:73:56:3c:59:a3:22:6c:
66:d7:4e:32:18:ff:53:67:f6:5e:33:ed:34:70:f8:
8b:cc:37:f9:2e:66:58:7e:97:9b:14:13:f3:69:5f:
78:7b:f3:b7:e9:16:09:78:c8:a9:bc:28:8a:a7:2d:
f4:4c:cd:a0:ec:14:0a:0f:03:08:93:d3:3a:ca:56:
30:df:f5:73:81:da:06:08:9a:e2:0f:8b:60:66:6d:
86:b3:90:7a:9c:13:f2:67:d1:a6:6c:47:a0:56:70:
70:01:d8:88:db:36:61:1e:37:85:a6:76:d1:4a:6b:
ec:ab:47:d2:76:97:c0:2d:4e:10:31:d2:a5:c7:9c:
6d:f7:93:f5:03:73:04:ab:d8:0a:a2:30:3a:3f:83:
63:8d:1a:6e:02:bf:0d:6e:28:83:50:74:4f:67:af:
3b:19:bf:4a:55:c3:82:3d:12:59:81:d2:21:c3:10:
e5:b6:24:de:3b:62:7c:fe:d7:e5:0f:5f:18:7e:b9:
ff:e4:7a:21:77:91:e4:69:44:68:53:b1:bb:19:f0:
35:80:ce:83:fe:07:d2:c4:f2:43:c9:e3:fc:50:59:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:FC:B4:93:32:40:3D:29:5B:8F:2D:E4:7F:5D:ED:1B:2E:ED:77
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/_AX8tJMyQD0pW48t5H9d7Rsu7Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.156.0/24
Signature Algorithm: sha256WithRSAEncryption
25:73:74:45:90:59:60:52:c5:5e:97:eb:53:b5:e6:52:f1:65:
57:6f:6d:ea:46:f2:e2:77:d4:0d:f6:44:1c:88:42:88:9c:c6:
64:3f:5d:79:2d:34:d3:57:bb:39:a5:e4:17:96:65:de:0d:ae:
fd:a6:f0:55:d2:35:bd:93:54:1c:ad:b2:1e:1e:c5:16:c1:eb:
f3:18:62:80:96:fc:2d:6b:1c:61:43:ed:2a:97:9d:35:f1:5a:
71:17:6d:b8:26:fd:52:6a:4a:e5:c5:36:28:ee:02:7f:74:87:
ac:7a:d3:15:db:c7:b8:0c:dc:5f:18:f2:b7:39:03:11:8b:f8:
e7:3b:6b:8f:ba:f4:cc:51:19:56:af:a9:11:4c:2f:62:9b:90:
36:d4:12:e7:40:e3:3f:1e:a2:6c:26:48:de:51:c2:e7:7b:6d:
6c:72:49:6d:ac:44:32:e3:a0:03:1a:78:16:1f:55:16:64:9c:
ec:4d:3f:9f:e9:57:02:a0:92:dc:f7:1f:87:e1:32:e2:92:4d:
e4:de:d3:98:51:b8:e4:4b:67:bc:f6:98:e5:c9:45:2a:c2:cb:
c4:c9:3e:43:19:b0:4a:22:72:cc:41:97:4c:b9:5b:1d:e5:c6:
8f:aa:ca:75:5f:2b:f9:ae:bd:0d:21:98:af:79:54:4a:91:59:
53:96:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:56 2024 by rpki-client on console-fra.rpki-client.org