Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/qWjVkMUkv6sYFY0iCdHWRd1XfuU.roa
File: qWjVkMUkv6sYFY0iCdHWRd1XfuU.roa (raw, json)
Hash identifier: X3F1JC80NrNz/V/GIJ2C85/TLwT4PgIpmRAZRGvjfYs=
Subject key identifier: A9:68:D5:90:C5:24:BF:AB:18:15:8D:22:09:D1:D6:45:DD:57:7E:E5
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 0976AED4
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/qWjVkMUkv6sYFY0iCdHWRd1XfuU.roa
Signing time: Sat 01 Jan 2022 10:56:57 +0000
ROA not before: Sat 01 Jan 2022 10:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24802
IP address blocks: 193.111.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158772948 (0x976aed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jan 1 10:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a968d590c524bfab18158d2209d1d645dd577ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:b2:a8:a6:12:fd:dd:b3:a2:c4:be:74:ac:
8f:f9:09:61:e4:e1:61:57:91:35:df:1c:c3:88:32:
a3:f8:ca:53:f0:2f:f5:16:1e:90:db:b7:b9:55:43:
70:be:4e:0f:28:6a:10:97:93:b5:b3:a4:1f:e5:c3:
ee:2a:2b:33:23:11:15:fd:de:ec:c0:34:b2:84:2c:
2b:ab:54:ce:dc:f8:72:cf:78:c5:e1:dc:c0:48:79:
f3:7b:47:8d:9c:f5:74:d1:eb:eb:c4:9d:1e:4b:03:
a6:3b:cd:68:2a:27:4b:3b:e0:27:8d:87:c6:bb:4c:
3b:e0:48:99:cf:38:9f:e8:10:36:e8:9c:bd:52:0b:
a3:52:24:93:ba:c3:16:0d:ef:0b:fc:33:3a:50:96:
28:a5:da:f9:77:74:49:10:2f:23:da:fd:2b:4c:e1:
70:ec:8a:8d:71:1c:43:f5:1b:ed:74:f2:28:d9:81:
fd:4b:ab:26:75:51:3d:a2:74:a6:f8:52:8c:34:d0:
fd:b5:62:ea:56:76:97:a5:3e:4d:01:3b:c1:b2:d1:
b3:01:a0:f0:01:50:5a:d4:b8:c7:ea:42:71:2f:95:
70:88:45:17:71:6d:d1:00:d7:04:12:38:b7:d2:64:
d3:f5:93:92:93:54:2f:8d:de:bf:8b:20:cd:bf:7e:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:68:D5:90:C5:24:BF:AB:18:15:8D:22:09:D1:D6:45:DD:57:7E:E5
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/qWjVkMUkv6sYFY0iCdHWRd1XfuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fe:bc:db:bb:5c:7a:ce:d3:d8:30:ac:d5:e3:08:e0:07:11:
f8:65:a3:16:0b:77:f8:b2:fb:6f:47:7e:88:86:ea:40:0a:59:
f5:a9:56:a1:49:d4:07:4f:e9:20:4b:c2:62:bc:f4:fc:19:ca:
55:62:31:74:cf:64:fc:17:b2:89:ab:97:df:64:f3:05:fc:e0:
95:d4:0f:ba:be:a7:7e:76:05:1e:cf:e2:37:d7:c7:b7:a0:0c:
b0:ca:49:8d:2f:50:1d:f7:0c:0b:1f:2a:9e:36:28:bf:1e:41:
de:03:11:e2:e9:be:48:39:ce:43:2e:1a:2e:7d:80:1a:1b:e8:
a9:54:4e:c6:0d:66:07:a6:76:d2:b5:0d:c3:9c:f2:07:1b:2e:
b3:60:6e:57:e0:5a:0b:82:94:1c:f2:6f:57:c3:6b:ce:f6:ea:
d8:7d:bf:23:d4:f8:68:2e:0b:1d:93:2d:3c:6e:93:ee:c5:bd:
e8:1d:eb:90:0b:c5:c3:14:ff:60:ce:b1:08:78:39:fc:57:f6:
4f:a1:18:e2:c8:a8:54:5b:fc:db:78:92:cc:df:61:a5:be:a5:
f6:38:33:bc:7d:0e:c8:f0:61:5e:50:1d:09:e7:b1:f0:26:e6:
8c:6f:a1:87:3b:e2:d3:16:01:e4:14:0c:a3:47:2f:84:54:f3:
00:e0:d0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:12 2023 by rpki-client on console-ams.rpki-client.org