Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/H0wvom_15tRjsEsOqGM01btDI5Q.roa
File: H0wvom_15tRjsEsOqGM01btDI5Q.roa (raw, json)
Hash identifier: Z14NeRyP+JQXqpGwAnNiGSmISXpPVajFRZcQn1ozeQs=
Subject key identifier: 1F:4C:2F:A2:6F:F5:E6:D4:63:B0:4B:0E:A8:63:34:D5:BB:43:23:94
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01827EA24CA93DA14DF8FCFD8152AF8E9222
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/H0wvom_15tRjsEsOqGM01btDI5Q.roa
Signing time: Mon 08 Aug 2022 18:05:41 +0000
ROA not before: Mon 08 Aug 2022 18:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 193.108.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:a2:4c:a9:3d:a1:4d:f8:fc:fd:81:52:af:8e:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Aug 8 18:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f4c2fa26ff5e6d463b04b0ea86334d5bb432394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8d:96:ba:f5:c6:09:83:a1:dd:1c:9b:32:99:
77:00:d3:04:86:cb:c0:76:77:1c:4a:10:bd:6d:fa:
f0:66:df:ce:84:2b:b8:e6:c1:bd:4e:a8:a7:d4:6b:
76:c0:49:89:5d:aa:4f:ad:90:9a:d8:ab:e7:16:ec:
68:cc:a1:f5:d3:bb:38:aa:ec:4e:ff:5a:73:3a:8d:
02:00:fc:9e:27:80:32:87:cd:0c:73:2f:8b:bc:8c:
16:1f:05:50:0f:d9:7b:f1:1a:f8:77:de:2f:36:c6:
e0:ea:01:b5:4f:d9:80:f9:75:58:94:fb:c5:26:a3:
ff:1f:81:ab:1d:78:cd:2b:ff:94:ae:55:ba:f6:79:
02:e1:ab:cf:26:89:00:ba:6e:85:fb:91:8b:89:1e:
21:f9:f8:e8:7c:be:4c:7a:89:b7:86:9f:0b:ae:03:
dd:82:7c:45:c1:6c:ed:7d:56:5a:96:87:80:bb:b0:
54:d9:14:88:17:01:4f:10:35:6e:43:4f:5b:d4:5f:
fe:45:53:c3:34:c7:dd:95:76:0e:9e:4b:eb:7c:62:
2d:26:d1:d0:d6:e7:4d:f1:4e:6b:a0:7d:03:03:14:
57:8d:d7:ea:2b:27:98:1b:a8:e6:3c:cf:68:26:73:
f1:0c:c7:c8:27:77:81:7b:d0:c3:07:ca:b5:7b:c4:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:2F:A2:6F:F5:E6:D4:63:B0:4B:0E:A8:63:34:D5:BB:43:23:94
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/H0wvom_15tRjsEsOqGM01btDI5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.57.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b8:cd:c6:bd:c4:68:61:d1:bb:fb:d4:58:45:7d:66:cb:3e:
6e:a7:d6:61:06:ba:06:bd:d8:12:14:90:83:ab:f4:00:f2:db:
f3:27:58:7a:31:4c:84:cf:d2:a4:59:24:a6:49:24:1e:c4:10:
ba:09:f1:d5:3d:a8:0d:25:78:b3:dd:ee:06:47:30:83:3c:5c:
f3:b9:ca:4d:72:fd:4e:78:1d:5a:c1:6d:dc:be:8a:d6:21:a0:
63:ae:6c:62:ba:6f:a2:07:9f:59:1d:54:af:16:77:6d:40:25:
95:f1:48:b1:80:86:19:ec:2f:71:81:3f:a9:e9:61:1c:90:9d:
42:e2:a3:14:d0:df:fe:9d:f4:e6:fb:9c:dd:29:8d:8d:6f:42:
a2:a2:ae:bb:08:ca:9e:84:ba:5e:76:21:37:c9:5e:8e:fc:cb:
21:58:06:b6:0c:15:b0:98:9f:b7:67:82:4d:62:f8:d1:08:b9:
13:50:be:01:82:7c:eb:42:ac:e2:ad:d2:c7:19:82:af:e6:62:
e0:f1:e2:46:43:2f:e8:33:93:46:1a:d0:86:5c:86:2e:0a:07:
08:47:38:9f:3d:d9:3f:23:34:87:65:ee:05:95:96:28:fa:ff:
de:93:bb:c5:7f:1b:df:e1:1e:35:f1:36:47:f2:a2:2e:8a:18:
ba:4e:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org