Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/hmio6SwMPfJ6MK58kyJ6sk6pjQY.roa
File: hmio6SwMPfJ6MK58kyJ6sk6pjQY.roa (raw, json)
Hash identifier: 6mW0rpn2RTqaZOzEJfCMSn/3qHZp6IFV84/h2Ne3kMY=
Subject key identifier: 86:68:A8:E9:2C:0C:3D:F2:7A:30:AE:7C:93:22:7A:B2:4E:A9:8D:06
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0182C9F2ED554EAF030BAB5F344840318D7B
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/hmio6SwMPfJ6MK58kyJ6sk6pjQY.roa
Signing time: Tue 23 Aug 2022 09:05:17 +0000
ROA not before: Tue 23 Aug 2022 09:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 193.108.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:f2:ed:55:4e:af:03:0b:ab:5f:34:48:40:31:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Aug 23 09:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8668a8e92c0c3df27a30ae7c93227ab24ea98d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:26:94:e5:7c:38:a9:72:64:c0:c1:7c:dd:
cf:a4:12:42:41:ad:81:79:7b:0d:20:2b:e6:6a:80:
fa:8a:11:89:15:bd:88:30:19:68:3b:c6:e8:f3:c6:
49:85:cc:ad:75:80:41:1d:90:0f:5b:45:dc:ea:7b:
e0:f9:64:dd:e8:ea:48:eb:e5:69:7c:55:0a:6a:91:
24:b4:a2:ca:91:bd:5f:a0:cd:50:c7:0e:c6:35:3f:
bc:a8:a3:b4:7d:03:36:a4:f5:c7:56:65:61:e8:95:
e4:44:29:60:a1:bf:0e:76:ad:2f:66:86:e4:8d:21:
6e:2b:8c:30:2e:24:a9:23:47:b4:5f:cb:8c:4b:94:
75:d3:4e:3e:ce:82:c5:d6:ae:d0:bf:61:de:71:59:
b0:d4:9e:a9:96:f4:00:a3:c7:87:6f:5d:b1:1b:8b:
72:a7:df:49:bd:32:3c:5e:3e:3f:b8:e5:33:ae:1b:
ef:27:27:22:87:c4:4c:15:cc:47:38:af:a9:2b:48:
fb:bd:9f:68:17:a9:0b:21:5d:1b:a4:56:11:c4:6a:
1d:68:5f:b3:d7:0a:89:97:e8:46:21:6d:98:0e:e1:
e1:22:7f:50:d0:19:68:f5:fe:f0:98:0b:cb:e2:41:
53:c4:2c:4c:a0:05:19:f6:b0:78:39:44:59:fc:11:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:A8:E9:2C:0C:3D:F2:7A:30:AE:7C:93:22:7A:B2:4E:A9:8D:06
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/hmio6SwMPfJ6MK58kyJ6sk6pjQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.102.0/24
Signature Algorithm: sha256WithRSAEncryption
89:11:24:8a:b9:dd:30:88:a7:92:45:d6:d9:72:58:16:86:aa:
17:39:c9:77:53:0b:d7:8c:54:5d:96:af:0a:35:a6:64:87:45:
7a:86:5e:c8:c1:c7:96:68:dc:db:3a:b0:6b:b3:05:c9:8c:fb:
bc:6f:fa:39:d8:8e:b1:5b:b6:45:7d:9e:be:25:4a:34:3b:fc:
67:cb:a0:eb:fc:57:2c:86:d8:61:dc:83:69:80:85:ae:eb:cd:
bf:de:5e:2c:32:66:d0:57:e3:77:e4:24:12:60:78:cd:07:5b:
5a:20:7f:28:e3:cf:15:a4:48:2c:db:d6:f1:b2:24:3f:ca:8f:
75:ff:70:21:10:33:72:62:e4:d8:3f:8d:c7:a9:ed:4f:56:ca:
09:94:f0:8e:b3:80:0c:51:3b:2a:7e:ff:ec:0a:fd:52:61:aa:
92:24:6f:86:34:74:a8:e5:e4:b5:de:5f:89:ff:38:2f:94:a8:
93:c7:7a:70:c7:29:c2:55:8c:f0:8c:6f:94:d8:3c:d6:36:20:
81:70:de:f2:80:39:a7:05:40:4e:84:78:bf:8a:c6:a0:45:94:
c0:9d:d1:0d:34:75:2b:aa:f1:7d:c0:ad:3a:7a:64:cc:89:3e:
4e:58:d9:fa:c0:bc:1a:e9:2f:a4:a3:9c:13:24:21:73:de:23:
ab:94:3b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org