Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/iaECc6Y7U1G6MDMQbgc3i866rvw.roa
File: iaECc6Y7U1G6MDMQbgc3i866rvw.roa (raw, json)
Hash identifier: PGV1t5K8aLXiR3qtCsHT4xJeQBFZJMw/0shO6DVWmWk=
Subject key identifier: 89:A1:02:73:A6:3B:53:51:BA:30:33:10:6E:07:37:8B:CE:BA:AE:FC
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 02B88A
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/iaECc6Y7U1G6MDMQbgc3i866rvw.roa
Signing time: Wed 11 May 2022 09:45:03 +0000
ROA not before: Wed 11 May 2022 09:45:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.28.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178314 (0x2b88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: May 11 09:45:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89a10273a63b5351ba3033106e07378bcebaaefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:e1:c4:8b:b3:9b:ae:33:9c:6d:6a:88:ac:
5b:a9:85:54:26:43:fa:7d:a3:f4:72:36:ce:5f:ab:
76:bb:26:80:13:8a:cf:67:d7:dc:3f:01:73:0b:99:
53:e9:ec:a1:a7:90:7d:66:64:e2:5b:9f:9b:cc:0d:
16:02:65:f5:c6:93:a2:b7:d7:4e:dd:1e:d7:38:2f:
be:4a:30:18:2b:ac:0c:07:5b:c7:e2:e5:08:ab:52:
a3:2c:12:32:29:04:70:03:1b:85:95:f3:3f:27:94:
1d:67:83:57:94:f3:4c:e8:6f:5d:19:03:c6:e2:9b:
32:9f:df:37:21:92:55:79:9c:89:c1:24:d5:6f:b2:
bd:f1:41:76:1e:19:1d:05:e1:52:1c:76:5f:10:05:
40:c8:a6:1e:2c:34:3c:76:69:5a:09:5d:08:13:51:
6f:ae:32:83:0e:d1:a0:f6:33:9e:9e:f5:86:a1:be:
80:3b:41:dc:64:77:d9:bb:ac:51:28:28:b3:69:c0:
17:60:5e:5c:88:77:39:6d:73:d4:df:1e:10:b7:8c:
d2:db:ee:af:c5:fc:b9:03:ca:5e:c5:92:f8:77:c9:
3c:95:37:3f:7f:1f:e7:f8:da:9f:66:43:db:b6:99:
c0:e0:c1:ec:a2:4d:21:92:ac:c0:57:6d:0a:76:63:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A1:02:73:A6:3B:53:51:BA:30:33:10:6E:07:37:8B:CE:BA:AE:FC
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/iaECc6Y7U1G6MDMQbgc3i866rvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.71.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c2:32:b3:96:49:10:02:ad:3b:60:60:07:4a:0f:63:f7:7b:
6f:b3:9d:2e:9c:23:5d:ba:1f:d8:4a:5a:35:6e:3a:db:e1:2c:
54:44:55:6c:24:2e:0c:b3:6f:13:78:d3:0c:79:96:75:0b:07:
d7:c6:f3:4a:29:ac:0e:91:c5:bf:43:b3:68:24:34:b2:a6:d4:
9f:f5:61:15:1d:14:8d:ac:58:fd:7d:3e:e3:91:0e:75:ac:97:
7d:60:23:02:67:74:ef:13:24:60:e1:2c:04:63:f1:cc:ab:86:
9b:fe:d2:7c:d0:06:96:96:78:7c:d5:c0:c2:5d:0f:db:ae:25:
30:95:55:6f:d2:05:12:ad:12:72:88:b6:ac:bb:13:6b:72:44:
21:22:44:ae:b2:d9:de:70:19:bb:b8:75:23:0d:b2:ee:c7:93:
54:0b:43:ee:5a:25:8b:87:3b:92:de:06:6f:1f:48:b6:32:a4:
47:fd:2b:82:f5:ef:9e:ad:96:6c:e2:ac:63:95:84:27:a3:af:
17:0c:7b:15:30:17:2b:6c:99:3c:4d:37:c9:9c:b2:a6:7e:22:
15:8e:04:e6:c8:f8:f0:36:86:5b:32:c0:c3:1a:63:44:ce:4e:
90:5f:7a:91:e3:6d:34:2d:00:57:09:09:11:cf:77:84:fd:24:
01:8a:35:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:08 2024 by rpki-client on console-fra.rpki-client.org