Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/raVXllD2JCKZ3ZVvu4V9BmzWJNQ.roa
File: raVXllD2JCKZ3ZVvu4V9BmzWJNQ.roa (raw, json)
Hash identifier: ey8WAerYPITz2mMY4fJG5GoGW2DJPubk3/xTUVA8mLk=
Subject key identifier: AD:A5:57:96:50:F6:24:22:99:DD:95:6F:BB:85:7D:06:6C:D6:24:D4
Certificate issuer: /CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
Certificate serial: 011D302D
Authority key identifier: 7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/raVXllD2JCKZ3ZVvu4V9BmzWJNQ.roa
Signing time: Fri 21 Jan 2022 19:57:08 +0000
ROA not before: Fri 21 Jan 2022 19:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 188.93.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18690093 (0x11d302d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
Validity
Not Before: Jan 21 19:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada5579650f6242299dd956fbb857d066cd624d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:89:e4:3e:d7:06:e6:60:6d:65:6f:df:9e:
46:49:19:ef:d5:24:1d:ee:4f:3e:8b:f1:d2:0b:46:
00:11:03:73:02:9b:b2:56:51:11:f9:44:dc:56:10:
59:7d:04:60:2b:56:e5:b2:8e:69:4e:ac:e4:9b:fb:
96:57:14:46:35:4a:0f:0f:8a:8f:5b:ac:2b:0b:16:
72:14:02:71:c9:45:99:f7:ff:47:e6:ca:76:4e:b4:
be:fb:80:c1:da:38:d8:54:4c:f0:9a:b6:e6:40:68:
76:84:3e:06:1d:88:06:4a:82:35:1b:17:af:31:49:
5b:5e:5e:99:fd:c6:24:25:87:33:4f:9d:b1:49:bf:
e0:01:a0:46:08:1a:40:29:e6:cd:5c:84:fc:ba:04:
8a:51:57:23:8b:7e:8a:0f:14:f5:8a:72:da:2f:ba:
78:78:40:f7:d5:e0:98:bc:11:c6:f3:a6:1b:2a:c7:
60:a8:bf:4b:c9:06:23:83:06:19:25:42:b5:43:e8:
9b:23:72:e4:85:72:db:d5:a3:62:92:96:c5:77:e2:
4b:1a:81:ca:a7:e7:13:84:94:3c:cc:c7:f9:0c:4a:
80:6a:f6:5d:7c:95:d1:31:14:4c:37:20:e5:ee:61:
cd:77:62:1a:6b:37:28:10:34:cd:7b:9a:c6:ae:04:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:57:96:50:F6:24:22:99:DD:95:6F:BB:85:7D:06:6C:D6:24:D4
X509v3 Authority Key Identifier:
keyid:7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/raVXllD2JCKZ3ZVvu4V9BmzWJNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fe:42:e9:ef:a0:90:b0:54:b7:a2:dc:f4:cc:a9:a5:57:6d:
85:7d:47:cc:f8:7b:c1:ff:7b:16:86:4a:a7:21:5b:dd:17:e0:
fc:27:58:63:cf:cf:04:3d:85:f2:1e:a4:4b:3c:d7:1a:87:26:
75:02:a8:d5:c6:07:10:94:20:a7:b3:0b:b3:8d:59:2a:b7:ed:
b9:07:41:8c:29:e0:f4:65:5a:93:dc:00:8a:b8:2d:a5:4d:53:
5d:bd:c3:1f:6f:9e:48:36:af:be:0a:b7:dc:a0:3f:53:a3:7b:
44:ab:8e:bb:2a:76:30:1f:f9:81:42:3a:b4:a6:39:ce:60:a9:
28:b9:d3:f9:e4:62:28:b1:75:6a:52:92:e3:93:a3:9c:4e:df:
0d:17:14:27:8d:14:2f:e9:0b:b4:91:d0:c8:74:4f:3e:20:38:
53:b1:3d:cc:c2:f7:ef:ac:f0:23:1a:e1:d9:d8:d4:cf:d0:cb:
b2:56:b0:9a:b6:43:50:97:35:b0:3f:c7:e6:19:f5:03:b9:f1:
96:32:1a:ee:d0:f5:72:f7:82:ae:c2:69:d7:75:10:e5:37:b0:
41:be:21:d0:83:4a:da:d1:a2:ac:ac:b0:3c:4b:2b:4f:35:05:
76:81:31:ad:da:58:4e:5a:97:f1:c4:65:ca:e2:0f:24:a1:c5:
1f:55:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org