Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/F2eXozfr41F7soZdH0rZ86SSLEQ.roa
File: F2eXozfr41F7soZdH0rZ86SSLEQ.roa (raw, json)
Hash identifier: D6jmcaZSHCxN/1lszaqCUVsTYTDKXiMklWFtU+jaEtA=
Subject key identifier: 17:67:97:A3:37:EB:E3:51:7B:B2:86:5D:1F:4A:D9:F3:A4:92:2C:44
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0181D496A051BCBCFF0F891150FF511226CA
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/F2eXozfr41F7soZdH0rZ86SSLEQ.roa
Signing time: Wed 06 Jul 2022 17:37:29 +0000
ROA not before: Wed 06 Jul 2022 17:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136923
IP address blocks: 193.108.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:96:a0:51:bc:bc:ff:0f:89:11:50:ff:51:12:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jul 6 17:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=176797a337ebe3517bb2865d1f4ad9f3a4922c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:a3:06:82:eb:81:d1:04:05:33:22:71:57:
42:27:43:c1:5d:f4:e3:73:72:7f:2d:53:ae:f4:62:
b3:05:c7:35:bd:78:9a:55:c0:4f:b4:9b:82:ab:ab:
ce:98:48:7b:13:45:6e:10:aa:9d:81:42:8e:01:79:
1f:68:5a:4c:b2:55:b7:41:0a:3a:62:b0:e8:40:f9:
5e:8a:8d:80:6f:e7:e8:41:67:69:d6:dc:51:26:06:
d8:12:09:15:66:d3:57:d7:62:93:d2:78:58:0e:ea:
ae:23:ec:07:df:6c:7e:d5:7d:a3:65:ab:4a:2a:68:
cb:08:ea:ad:cf:c6:88:ed:5d:30:85:8b:64:69:0c:
7e:c6:da:e0:99:da:51:64:aa:dd:e0:e6:2d:c4:7b:
bc:5e:e9:28:4a:bf:6d:90:37:9a:73:bd:0d:e3:d0:
34:a2:0c:e3:9b:3f:61:22:2a:48:12:f0:8a:91:08:
c7:91:0d:ab:46:9c:b2:09:cd:99:6e:ca:a4:08:c5:
6e:7e:0f:cf:9a:ac:d4:f6:75:9f:f5:a8:96:46:44:
2e:68:96:ce:f1:78:43:63:56:f9:51:c3:b9:2d:7d:
0c:0f:a3:3d:c4:47:f3:32:45:0a:31:67:0c:e9:5c:
e3:a1:44:5a:a6:82:1f:6c:2d:e2:65:81:a3:9a:39:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:97:A3:37:EB:E3:51:7B:B2:86:5D:1F:4A:D9:F3:A4:92:2C:44
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/F2eXozfr41F7soZdH0rZ86SSLEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:05:7a:6a:e6:74:23:a7:80:8b:4a:af:fc:02:df:5e:57:6a:
6b:4e:92:d1:5d:db:db:5d:b5:33:d2:f3:77:5f:9e:de:83:05:
24:58:28:e5:51:8f:fc:97:69:b8:c9:9b:69:84:ac:9d:3b:57:
01:b7:cd:61:9c:69:72:67:0e:b8:95:aa:97:90:a7:d9:37:93:
35:78:53:70:5c:89:cc:fc:14:5b:1e:b3:81:ce:35:11:14:a0:
e6:d0:b2:f9:16:3a:01:50:61:9e:11:ed:39:2f:41:f9:f7:d9:
a3:3c:eb:00:72:26:28:71:52:9f:71:b3:de:56:2c:c3:33:11:
7b:00:f9:82:80:16:47:38:a4:db:0a:42:dd:3f:0a:81:5b:07:
ce:7d:54:e1:f9:9a:31:7d:56:d3:d5:fb:3a:07:99:5f:44:99:
c7:5d:46:4d:ef:02:ff:87:6d:6b:a6:07:fe:5f:d8:30:d0:1c:
f3:42:80:c3:03:ca:ac:ad:c5:0a:fb:9f:58:cb:d1:03:ef:ab:
90:06:b7:2f:a2:e2:96:16:3a:ea:bf:28:06:ad:44:78:64:60:
46:1f:77:90:84:4b:bb:72:95:f8:67:a9:c2:1c:7a:38:b6:08:
93:3a:4c:63:31:74:6e:ae:1c:98:63:85:53:81:6e:f6:e9:fc:
67:23:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org