Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/8oYBgBbb8viIVc-PHzbqHI6O2HY.roa
File: 8oYBgBbb8viIVc-PHzbqHI6O2HY.roa (raw, json)
Hash identifier: ul4QG+vXT7a/dmkP7HSyYO2pAgj9MZxKIdJQiU4ZkIg=
Subject key identifier: F2:86:01:80:16:DB:F2:F8:88:55:CF:8F:1F:36:EA:1C:8E:8E:D8:76
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 05F37BAE
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/8oYBgBbb8viIVc-PHzbqHI6O2HY.roa
Signing time: Sat 01 Jan 2022 01:01:57 +0000
ROA not before: Sat 01 Jan 2022 01:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209999
IP address blocks: 193.41.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99842990 (0x5f37bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Jan 1 01:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f286018016dbf2f88855cf8f1f36ea1c8e8ed876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:df:16:03:d0:a6:65:6e:44:0b:88:8d:9e:
34:2b:f2:f3:dd:48:02:86:89:93:58:43:9c:c1:d8:
51:9d:8d:7d:0f:f6:cb:f2:13:fb:0a:f9:e8:6e:73:
25:e6:83:b2:b7:aa:5a:4f:34:92:9b:52:59:32:81:
cb:7f:0e:b4:fb:0a:f4:7e:7f:22:49:9c:9c:d9:c7:
2a:be:79:5c:94:1a:33:2b:59:42:00:b7:ca:56:ea:
8d:69:8c:a1:a6:d5:7f:96:ac:a4:f9:14:bb:78:04:
cd:9c:15:1a:79:ab:bb:71:b9:76:ea:5e:cf:ff:6d:
85:db:a5:b4:a7:86:54:7c:ea:d9:2e:2b:b8:d0:46:
c3:b8:85:c0:73:eb:22:95:05:00:d6:82:43:ba:4a:
35:e7:9b:a5:c8:72:bc:6f:46:90:03:e9:a3:6b:21:
51:41:2e:57:03:c5:61:ca:80:96:88:ae:72:f1:27:
3f:6a:77:ff:1d:6d:f3:d5:97:79:39:e9:0c:38:63:
91:15:0a:14:f2:ed:da:2b:a3:04:96:98:c6:e7:9d:
73:fe:e7:7f:c5:ca:a7:aa:6c:32:69:dc:40:46:79:
0a:61:0d:83:66:d0:17:4c:63:3e:1c:b2:dd:54:33:
5c:7d:9a:d5:43:17:28:be:29:b2:90:53:86:72:8c:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:01:80:16:DB:F2:F8:88:55:CF:8F:1F:36:EA:1C:8E:8E:D8:76
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/8oYBgBbb8viIVc-PHzbqHI6O2HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.56.0/24
Signature Algorithm: sha256WithRSAEncryption
10:34:07:f0:6f:bc:d8:da:fc:15:fe:67:71:14:c8:68:75:81:
9d:4b:ff:53:1e:a0:1e:20:d7:11:8f:e7:fd:58:1c:39:a9:16:
6e:f0:74:a5:f9:dd:1c:22:3b:4d:0b:85:e7:2b:7a:5b:ad:b4:
26:d2:74:85:1a:41:d6:7e:73:31:74:92:e0:65:fd:4c:01:b5:
a7:51:0a:5d:30:50:f7:c4:bd:1f:50:13:1c:dd:d4:03:22:3f:
d4:ee:83:46:ab:0f:7a:d3:ad:1e:e3:41:57:b6:cd:47:55:9d:
f5:13:0e:f7:e7:cd:e4:15:3e:5a:0f:ea:d4:a0:13:4c:53:7d:
7a:58:f3:d1:36:9d:20:7b:ee:1f:91:68:e0:d8:cb:67:e2:2d:
cd:9e:e0:72:d7:99:b6:27:3a:2e:3c:80:5e:d6:a4:54:29:5b:
eb:13:1f:4f:18:90:16:86:0d:62:2c:8d:d8:df:f2:98:94:95:
30:41:99:f5:c5:99:39:4d:38:c9:b4:94:43:26:d8:c5:29:d5:
a0:1a:a9:21:20:f4:33:01:ee:ba:52:cb:fb:de:0c:67:07:35:
6f:c1:45:f9:3d:c4:bf:80:ab:d2:ed:54:cd:1c:57:e0:9d:33:
05:ee:59:5c:59:85:17:f4:a9:c5:40:9e:8e:52:0e:be:89:7d:
84:92:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:50 2024 by rpki-client on console-fra.rpki-client.org