Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/0exZzG9kpyFHTye002P2FPlWh_s.roa
File: 0exZzG9kpyFHTye002P2FPlWh_s.roa (raw, json)
Hash identifier: zO3vGDrllIrBmkOLyYgyK1/lVddi93hhpp5uu1z5wWE=
Subject key identifier: D1:EC:59:CC:6F:64:A7:21:47:4F:27:B4:D3:63:F6:14:F9:56:87:FB
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 018342689EFE92571BE6813CAC78F57EDFEB
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/0exZzG9kpyFHTye002P2FPlWh_s.roa
Signing time: Thu 15 Sep 2022 18:28:15 +0000
ROA not before: Thu 15 Sep 2022 18:28:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 193.108.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:68:9e:fe:92:57:1b:e6:81:3c:ac:78:f5:7e:df:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Sep 15 18:28:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1ec59cc6f64a721474f27b4d363f614f95687fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:78:8d:c6:8f:06:fa:ae:1a:49:4c:89:5b:
0c:db:ce:c9:8f:1b:5c:dc:2f:a2:f3:d2:05:72:3e:
be:08:61:f0:59:ab:9a:7a:30:e9:71:51:02:57:4a:
b2:75:15:71:8f:44:8c:fc:08:f8:1a:63:79:90:b0:
b5:a6:42:dc:45:00:29:4a:d9:e5:bd:42:7d:35:bc:
2c:54:ff:a4:59:ae:ad:2f:15:38:ab:e1:3e:31:fb:
4d:35:43:e2:e3:7b:73:44:c3:c8:a5:df:de:e1:ff:
15:fe:ae:23:c2:3d:b7:8d:b2:fb:38:94:1b:7d:f9:
7d:c2:0e:24:0e:06:d8:44:01:64:28:2e:14:93:3d:
f1:21:36:db:e2:2f:ec:ad:37:1c:65:9f:cb:9c:79:
97:d5:3e:50:e5:aa:e6:36:e2:2b:f8:5f:f8:3a:c3:
90:03:20:3a:b3:8b:40:8a:94:4d:2d:e7:a7:52:03:
e6:22:06:a7:85:86:88:f4:09:00:f7:06:3a:cb:30:
78:a4:60:bc:ef:ec:11:ba:4c:93:0e:98:ea:02:4d:
0a:52:04:c0:20:37:6d:8d:ad:79:28:c4:a9:87:74:
36:a3:56:64:15:a4:f9:bb:87:b9:c9:9e:8d:65:9c:
3a:e6:77:15:d6:f0:bc:7d:a6:f9:46:a1:b6:08:8f:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:59:CC:6F:64:A7:21:47:4F:27:B4:D3:63:F6:14:F9:56:87:FB
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/0exZzG9kpyFHTye002P2FPlWh_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:4e:3d:ee:67:d6:30:5b:26:fb:5a:46:b7:f8:db:f8:79:a0:
1c:cd:7f:f8:4f:8c:18:f2:f0:eb:2f:92:f9:85:9f:12:54:6c:
1e:34:8e:24:e5:45:d1:6f:d7:dd:f6:5c:0f:27:0b:86:a2:dd:
a9:dd:27:5c:45:96:56:c0:10:df:9e:9c:f6:ac:03:2b:28:b6:
d1:93:a7:fb:9d:59:8a:8a:ca:6c:74:eb:9f:70:53:c3:03:e3:
25:b5:80:36:39:87:17:f9:51:7a:a8:84:f1:83:7a:cc:33:5c:
23:32:57:e0:df:3c:1b:14:66:0a:91:36:90:69:98:cc:e3:83:
b8:be:e4:25:59:65:39:d3:90:f5:9b:cc:41:42:f4:2a:20:2a:
5f:a4:22:3f:ae:4b:51:b3:c6:7c:7a:ef:fb:6f:ec:87:b4:6d:
b1:f9:08:08:fa:33:c4:34:3f:f6:9b:42:63:14:7d:d7:cd:b1:
2a:07:64:34:b8:09:26:12:e5:86:5e:e9:b7:89:5a:b1:7f:7c:
d8:29:90:31:09:73:51:8e:5f:d7:a7:d6:cf:81:54:68:18:54:
e5:d9:49:c5:8e:9d:85:1c:39:fd:24:8a:6d:4a:12:a9:4e:e7:
83:24:90:8b:39:c4:87:5c:7e:59:0c:8e:77:4f:06:56:a1:8e:
07:16:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org