Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/8Fzo-9zLodaq6qfLl6Tplk31pdU.roa
File: 8Fzo-9zLodaq6qfLl6Tplk31pdU.roa (raw, json)
Hash identifier: q1kgC6VCQ8TCu/riNck9UU3l9snAAxKCwYILwKKT5MU=
Subject key identifier: F0:5C:E8:FB:DC:CB:A1:D6:AA:EA:A7:CB:97:A4:E9:96:4D:F5:A5:D5
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 035AB58F
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/8Fzo-9zLodaq6qfLl6Tplk31pdU.roa
Signing time: Sat 01 Jan 2022 00:58:33 +0000
ROA not before: Sat 01 Jan 2022 00:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62270
IP address blocks: 193.162.140.0/24 maxlen: 24
2a10:8080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56276367 (0x35ab58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Jan 1 00:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f05ce8fbdccba1d6aaeaa7cb97a4e9964df5a5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:06:54:d3:07:97:59:6d:2b:50:d9:90:3c:
a8:2d:34:52:00:f4:f4:6b:3d:e3:d6:7e:d3:4b:38:
fa:bd:14:ff:2a:76:67:47:48:e3:1b:59:52:1e:62:
7f:9b:b3:21:86:1d:1f:e2:20:4c:b1:b1:a0:9a:61:
53:7e:c0:19:e2:2d:b2:7b:bc:22:cf:da:8f:65:1d:
86:b7:86:69:13:55:0f:70:66:00:87:09:8d:23:84:
2c:e7:02:02:d8:d5:eb:96:d3:0d:cb:28:3b:ba:72:
4c:66:6f:86:29:92:b7:84:76:f1:84:3e:ad:5c:8e:
7a:44:41:5f:f6:d9:c4:cc:ce:b9:3d:70:5c:88:36:
88:65:b0:4b:ef:eb:9e:c0:36:28:23:e8:3b:2e:35:
d7:10:cd:bb:05:2a:ef:a3:a1:8b:c3:20:45:5d:bb:
65:ab:59:16:9d:ed:df:e9:2b:74:3c:93:10:86:1a:
aa:19:a1:6b:44:1c:78:52:24:35:83:fa:e3:0d:2e:
1a:b8:a6:ad:f1:88:a5:f8:22:44:aa:b9:ac:f2:c9:
61:5e:62:90:a0:31:f3:39:f4:43:73:46:48:40:d4:
87:50:e6:d6:b4:1b:af:d6:b8:8b:87:50:aa:bf:b0:
79:2d:6a:8e:a2:11:63:02:e5:bf:73:9c:51:00:d0:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5C:E8:FB:DC:CB:A1:D6:AA:EA:A7:CB:97:A4:E9:96:4D:F5:A5:D5
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/8Fzo-9zLodaq6qfLl6Tplk31pdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.140.0/24
IPv6:
2a10:8080::/29
Signature Algorithm: sha256WithRSAEncryption
c3:6a:99:53:d0:d5:23:31:d1:83:1c:27:3b:59:cc:50:b3:28:
f9:fd:b9:d4:1a:ab:85:7c:8d:78:39:42:ad:39:2d:c1:a5:d6:
17:76:89:07:0f:e8:10:5f:ac:ab:41:dd:9b:d2:f7:06:d4:a9:
4d:2e:88:2d:d7:31:b1:a6:00:8c:40:f2:ed:c2:93:4e:68:4e:
f4:15:42:db:38:65:5a:16:c5:2e:53:fb:78:d1:7a:f4:9c:e9:
df:af:9e:4f:b8:c0:b9:ee:4a:66:f5:1b:4a:02:6a:44:6b:44:
48:63:86:24:3e:fe:83:b6:cb:ef:41:1c:aa:a8:92:34:17:35:
8c:22:47:c6:7f:67:a6:99:26:6f:30:0c:99:99:a2:73:46:e2:
90:1b:7a:3c:c9:a5:31:80:64:62:25:d0:36:05:73:7b:79:d0:
a0:61:bd:01:39:be:d3:47:52:51:db:42:23:fb:53:bd:4b:a5:
32:b0:29:e2:2a:a1:42:5e:72:68:7f:b4:a7:b6:46:e4:4f:d6:
3c:02:14:3d:08:48:f3:da:a8:3e:14:93:28:fa:7b:45:31:08:
fb:27:3e:ac:f0:c2:f2:aa:74:b7:dd:d0:e6:a7:7d:b0:f2:20:
e2:0a:07:8c:f9:50:0f:1a:37:8e:d7:a4:53:7f:15:de:63:99:
2e:b3:01:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org