Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ZoGfts7Ttg4FvBzNMAyg_ww18W0.roa
File: ZoGfts7Ttg4FvBzNMAyg_ww18W0.roa (raw, json)
Hash identifier: ADcDVpED6BFLGGr3MIXfKkG9fcAKQAqvFXBmQC8OlFk=
Subject key identifier: 66:81:9F:B6:CE:D3:B6:0E:05:BC:1C:CD:30:0C:A0:FF:0C:35:F1:6D
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0182CBF743A62423E88468A7043D70F5BEE9
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ZoGfts7Ttg4FvBzNMAyg_ww18W0.roa
Signing time: Tue 23 Aug 2022 18:29:15 +0000
ROA not before: Tue 23 Aug 2022 18:29:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 193.108.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:f7:43:a6:24:23:e8:84:68:a7:04:3d:70:f5:be:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Aug 23 18:29:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66819fb6ced3b60e05bc1ccd300ca0ff0c35f16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:50:39:41:5d:91:95:0d:1a:df:cd:8a:30:
b9:e1:05:b2:77:6f:a6:76:66:14:ad:98:ef:58:20:
af:e2:8d:3d:a0:d9:e8:74:6f:d2:ea:83:6f:ac:ab:
aa:9d:6d:f2:09:80:50:85:50:c0:50:86:15:4e:5a:
a3:1f:19:cb:ef:0b:b8:62:a5:3f:6e:d4:83:9a:fb:
a5:9c:ba:16:b4:41:b9:5f:7b:2e:d3:63:d1:8c:92:
11:2b:70:4d:5f:17:1c:58:9d:7c:e3:81:75:d2:f6:
81:88:a1:6c:fc:4d:d0:29:6b:72:97:1d:86:c6:02:
51:d0:8c:b4:7d:c0:d2:d6:5d:e7:d3:c8:a0:42:af:
89:23:d8:10:5a:91:33:62:6a:1b:90:8e:1f:01:b1:
15:a4:08:71:85:70:d1:a9:4f:1a:1d:80:f0:73:a8:
75:2d:44:0f:2c:df:18:3a:31:00:b0:0f:b3:cc:20:
89:1c:3e:60:4a:af:8d:cd:29:db:f3:2c:97:c0:a5:
13:2d:83:cc:4a:57:ac:c2:47:37:49:86:ae:dc:49:
23:f5:3b:1d:0c:03:5a:ea:7d:e7:11:3f:ad:cf:d0:
aa:ee:9d:bd:f5:32:c8:28:0f:f2:dc:90:92:e8:05:
e9:4a:85:05:5f:0d:b0:dd:60:90:1c:c4:1a:90:04:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:9F:B6:CE:D3:B6:0E:05:BC:1C:CD:30:0C:A0:FF:0C:35:F1:6D
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ZoGfts7Ttg4FvBzNMAyg_ww18W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.103.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c4:f1:fd:7b:7a:5f:0c:b3:80:86:33:fb:1e:f1:b5:60:14:
8e:62:24:5b:42:8f:71:0e:4b:5e:72:b1:a6:cf:fc:8f:99:67:
5f:cd:bd:bf:f5:fb:09:e0:9c:35:26:72:15:d4:c5:e1:2c:2a:
0a:ca:5e:ad:26:63:81:c0:a2:94:90:56:d3:82:40:2c:df:6b:
e6:6d:6b:3b:0f:e0:3c:dc:2c:f1:ab:53:5c:2e:ef:1a:9b:73:
fc:89:50:6a:0a:31:01:23:c6:a4:c0:06:54:ad:2d:a4:73:d6:
2d:c3:39:bc:55:aa:60:1a:d6:aa:ee:f1:4f:da:18:88:37:2f:
b1:33:ff:fb:3b:8a:49:93:16:f5:19:f6:6c:96:4b:5b:cd:cf:
f5:c8:8d:1b:68:f5:cb:3a:37:79:6a:1b:df:b8:e0:f7:7c:76:
9d:59:bb:3b:bc:68:0e:0b:ad:df:c2:6e:b4:fe:b5:d9:42:eb:
46:e0:95:d9:ff:21:c3:b4:3f:08:20:12:50:4e:03:67:e4:f4:
b8:bc:0d:f5:dc:ea:96:f5:d7:46:a8:11:f0:a7:ce:ba:74:c6:
8d:1d:13:58:12:de:d2:c1:08:cb:99:a5:50:30:81:b3:2f:4f:
0a:8a:89:fe:0b:33:08:3c:55:d4:e9:2b:95:06:d6:39:7e:30:
f4:34:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org