Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/OFX8LDb2mM-6AH0m-QJqvTbt5NY.roa
File: OFX8LDb2mM-6AH0m-QJqvTbt5NY.roa (raw, json)
Hash identifier: vdaHQ//51/K4pzn6ddtRlPvRN6LWQbiNzEgeRiigTDs=
Subject key identifier: 38:55:FC:2C:36:F6:98:CF:BA:00:7D:26:F9:02:6A:BD:36:ED:E4:D6
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 020492
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/OFX8LDb2mM-6AH0m-QJqvTbt5NY.roa
Signing time: Wed 18 May 2022 13:20:18 +0000
ROA not before: Wed 18 May 2022 13:20:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207114
IP address blocks: 193.22.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132242 (0x20492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: May 18 13:20:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3855fc2c36f698cfba007d26f9026abd36ede4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cb:1a:74:a7:ee:5f:07:cd:e2:12:ee:d9:00:
4b:d7:74:dd:b8:96:9d:0d:6f:d8:9b:92:1f:b0:ee:
ac:f7:ca:f9:ab:db:9c:fa:7d:fc:6e:22:c1:8e:18:
a8:e8:5b:d3:84:7a:e6:93:57:91:38:85:5c:d6:53:
15:b9:0d:1b:ca:00:e4:fa:e6:ad:f5:8f:37:09:4a:
ad:cb:29:20:ba:ef:e7:88:5e:00:36:70:60:cf:a1:
3f:27:95:e8:d8:de:ef:02:8b:96:ab:8a:c8:ef:3f:
5a:e9:08:16:e3:46:03:12:e6:01:90:a9:18:40:09:
19:59:62:b3:2f:e6:c2:72:73:dc:46:f8:01:b2:04:
0f:f9:10:f7:4e:0d:f1:0c:15:ad:17:91:02:d9:c4:
da:9f:97:d5:1e:08:a8:f7:e0:7f:e5:43:8b:6a:b5:
46:cc:7e:0e:7f:d5:83:f4:7f:2b:2a:71:36:d5:12:
7a:e1:e3:ce:bb:08:71:8f:e7:05:d1:4a:63:ff:53:
24:77:7a:43:bc:c4:0c:36:c9:18:bc:a7:ab:53:1f:
fe:96:88:cb:8f:8a:da:db:2a:47:40:30:67:18:28:
e6:a3:f2:a4:95:6e:29:fa:3e:74:5d:85:33:7e:e9:
48:8f:40:5e:bf:34:3c:ac:1d:a9:12:59:13:dd:9b:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:FC:2C:36:F6:98:CF:BA:00:7D:26:F9:02:6A:BD:36:ED:E4:D6
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/OFX8LDb2mM-6AH0m-QJqvTbt5NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:58:3e:76:9e:31:84:ad:7b:2a:b4:d9:b4:cc:80:03:4c:66:
ee:95:49:b7:6d:72:0a:b0:bb:7d:66:ce:d9:d7:19:82:ba:42:
b3:8b:9b:6d:98:09:96:4d:ab:df:41:63:00:cc:ed:d9:4f:e6:
1f:64:ea:2b:1c:9f:87:9f:e5:5e:ae:e2:65:f1:d4:d4:38:5e:
62:7a:55:7f:12:cc:3c:73:d1:36:60:77:c6:43:ff:0d:1c:8c:
e3:c8:84:0d:dd:72:c3:8c:d8:c5:60:07:11:b4:f7:94:e2:3d:
c0:c9:c5:9d:68:b5:41:3d:01:0d:6f:07:09:a6:7b:04:db:67:
b8:99:03:d6:93:cc:95:63:f8:08:41:5e:42:25:80:bd:50:9f:
6b:8e:a6:e7:96:59:5a:b2:c6:7e:9b:15:4c:fe:3b:82:53:11:
ea:a3:f8:7a:c5:c5:ca:10:a1:76:f9:9d:c1:87:a0:a0:21:70:
42:06:38:70:3e:bd:8a:f2:5a:0d:f8:90:13:d4:f6:be:95:98:
4e:88:8c:b6:b4:26:3e:86:95:3d:61:27:9b:21:74:50:db:e8:
f5:1a:50:47:5c:90:9f:28:94:6d:f5:b9:a2:a5:d8:46:0a:e6:
54:12:9b:11:4a:f4:e8:6e:79:21:93:35:c5:b6:18:33:92:ca:
8f:68:52:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:18 2023 by rpki-client on console-ams.rpki-client.org