Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/20Nl9Tn0YTCDpJGd_LoFuLlsu-o.roa
File: 20Nl9Tn0YTCDpJGd_LoFuLlsu-o.roa (raw, json)
Hash identifier: eseH/WENnCdPCXfph+fabG1cm1fWoO1RPD9r/AEpkCU=
Subject key identifier: DB:43:65:F5:39:F4:61:30:83:A4:91:9D:FC:BA:05:B8:B9:6C:BB:EA
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: EC7CB0
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/20Nl9Tn0YTCDpJGd_LoFuLlsu-o.roa
Signing time: Sat 01 Jan 2022 03:51:22 +0000
ROA not before: Sat 01 Jan 2022 03:51:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31457
IP address blocks: 193.16.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15498416 (0xec7cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Jan 1 03:51:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db4365f539f4613083a4919dfcba05b8b96cbbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:6e:2f:d5:3e:ff:d4:5e:96:a3:f8:b4:b1:
12:35:03:38:2d:89:e9:64:79:86:70:98:c7:79:b5:
d2:51:79:86:2a:00:c8:90:2c:f0:d0:e7:b3:41:5f:
66:c9:a7:94:e5:c0:e7:34:1b:f5:f0:0a:25:1a:0f:
98:6f:b0:9e:11:b9:14:69:86:aa:6c:d6:25:6a:4a:
7d:7a:cc:bc:45:ec:dc:a1:79:4f:14:71:1b:c3:e8:
58:38:6b:af:48:b8:95:bb:c2:14:a6:d2:50:9b:b3:
b0:d3:41:ec:f4:cf:d3:d3:cc:38:e0:fd:96:df:29:
61:27:4f:18:93:97:ce:e0:d4:d4:aa:28:d4:17:8c:
b4:aa:27:d3:08:19:fb:aa:d1:60:ba:a7:42:af:74:
93:3d:c2:a1:8a:7b:59:71:73:3c:bf:7b:d1:53:15:
f0:5e:c2:b0:ad:9f:af:f6:98:85:9a:96:81:f6:65:
b2:48:c3:55:37:0e:f6:f1:73:fb:a5:eb:9e:90:70:
b4:ba:d9:9d:ff:c8:3f:ed:18:a9:3c:0d:ed:76:38:
09:e0:4c:a9:d6:06:65:f5:a8:cd:2e:ee:3c:f3:98:
f9:3d:e3:ca:d1:23:e3:af:4c:35:ba:89:1b:0b:51:
62:2c:71:fa:48:9f:a3:b2:bc:7e:fc:d8:1e:0b:82:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:43:65:F5:39:F4:61:30:83:A4:91:9D:FC:BA:05:B8:B9:6C:BB:EA
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/20Nl9Tn0YTCDpJGd_LoFuLlsu-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e3:6d:d5:60:73:11:f6:a4:45:74:6c:54:26:cf:02:12:93:
df:70:92:bb:86:8a:24:8a:df:08:50:b6:ec:6e:bd:1e:70:6b:
38:3b:9a:15:53:63:90:b2:42:fe:23:9b:fc:9f:92:a1:0e:79:
65:9a:6b:62:c4:d7:ae:e7:bc:db:ee:61:e2:4f:4d:5d:1c:2d:
41:9a:c2:47:ed:8a:5b:cf:9a:38:60:43:91:15:15:45:42:b2:
86:e0:16:ef:dc:f6:8a:bd:b8:15:a3:1f:76:96:02:92:dc:1c:
82:bd:68:e3:17:9e:9c:e2:25:8c:5d:80:12:8e:30:d6:de:15:
25:39:ce:eb:6c:4a:4a:5a:e0:af:0c:33:eb:df:11:5e:54:38:
c3:6d:60:46:2f:82:d0:95:cb:f7:ae:74:ea:b5:5e:f4:67:48:
fa:60:3f:07:36:e8:75:92:91:22:db:b6:73:e5:0b:07:e9:c5:
3f:9c:a1:6a:35:5c:35:a4:64:4a:d2:ed:46:55:8e:e3:52:de:
18:ea:a6:cc:d4:ef:6a:12:5b:cb:25:a5:02:ed:f6:66:b6:e5:
5e:14:cf:c9:ec:f8:c1:ce:a4:f5:56:c5:4b:23:c3:6f:fb:82:
0a:f4:dd:47:be:eb:99:3d:d8:42:a7:46:d7:56:9e:73:62:8a:
78:75:c9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org