Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/Frlb3Z_SSCiwArS_1A3a7x_uIFg.roa
File: Frlb3Z_SSCiwArS_1A3a7x_uIFg.roa (raw, json)
Hash identifier: 8COvlPyB+NxOLnFbsQsrD2Irgq8sNkCZsXa7DCvEadE=
Subject key identifier: 16:B9:5B:DD:9F:D2:48:28:B0:02:B4:BF:D4:0D:DA:EF:1F:EE:20:58
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 40559DB5
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/Frlb3Z_SSCiwArS_1A3a7x_uIFg.roa
Signing time: Sat 01 Jan 2022 03:56:05 +0000
ROA not before: Sat 01 Jan 2022 03:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207969
IP address blocks: 193.236.96.0/24 maxlen: 24
2001:694::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079352757 (0x40559db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 03:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16b95bdd9fd24828b002b4bfd40ddaef1fee2058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:23:53:e4:79:1e:4f:7f:96:e4:2b:71:26:
44:83:4d:19:15:04:fa:53:fb:b4:41:10:f9:e3:63:
60:7c:bb:80:2c:24:d3:05:b0:c5:b5:aa:12:64:27:
7d:5c:51:1d:88:94:bf:45:4d:a8:3f:45:9a:a7:cf:
60:d8:7a:26:f2:eb:a9:1b:6c:0d:3c:ee:a1:95:0b:
f0:e8:48:a4:6d:b0:7b:b7:8f:84:54:15:bc:48:59:
1f:14:1e:f1:99:c6:7e:f9:8a:ba:cf:5c:de:92:73:
ac:cd:60:55:c7:bf:30:d3:ba:5a:2b:66:db:70:5e:
d7:f4:58:03:bf:1c:45:58:b6:e6:c3:d6:c1:1b:af:
2e:8e:be:4d:43:8a:fd:33:a3:c4:88:63:08:9b:61:
1a:a6:30:03:93:6c:1f:ef:13:93:e6:ec:2e:bc:9b:
a0:fe:3a:89:84:17:8a:84:9f:5f:08:f7:10:d9:f1:
fe:7a:70:57:11:f1:18:3d:d6:db:51:b6:ef:dd:01:
05:b6:04:1a:e3:1e:bb:4f:f3:c4:1c:68:c9:de:33:
c0:73:bb:10:ac:55:e8:5a:c2:18:22:db:bf:fc:76:
f9:e8:0b:ab:e6:a3:5b:b3:ad:1d:f7:e9:73:cc:55:
4d:1e:c4:82:bd:12:f0:c0:55:ca:81:74:75:f4:fe:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:5B:DD:9F:D2:48:28:B0:02:B4:BF:D4:0D:DA:EF:1F:EE:20:58
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/Frlb3Z_SSCiwArS_1A3a7x_uIFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.96.0/24
IPv6:
2001:694::/48
Signature Algorithm: sha256WithRSAEncryption
7c:0e:b9:96:2d:8e:f0:ca:6c:8a:ce:8a:31:66:d1:4d:47:e9:
ac:4f:9d:cb:63:26:c8:49:ca:95:2b:55:4f:09:63:c4:5b:ee:
54:21:5b:2d:36:c5:02:dc:3c:b2:8f:11:24:0c:76:0d:4c:dc:
7c:cd:9e:43:46:b3:98:b1:97:bf:c3:39:70:2b:a1:db:c4:cb:
23:75:d1:0f:b7:94:3c:79:9d:d2:d7:a9:bb:49:b4:2b:20:d4:
27:d3:4a:fd:bd:6f:f1:ea:2d:bc:a9:02:5b:e3:c4:88:68:d2:
38:1a:4d:79:98:ed:ce:41:97:ab:b2:1e:2d:2f:e2:6f:5c:46:
6b:ff:b1:f1:0b:97:1a:b3:96:a8:6a:30:da:41:3a:10:b3:d2:
61:c3:2a:77:bc:5e:b5:92:ea:13:c2:25:e3:a9:6f:76:c1:2c:
b6:cb:84:d3:a7:57:5a:32:13:18:c5:b1:eb:7f:0c:88:b8:08:
cd:ba:87:04:73:cb:dc:be:d8:5f:64:cb:9f:cd:89:1d:8d:4e:
4f:ae:21:a1:f2:dc:cb:e7:62:30:a5:b0:1a:b6:17:3e:93:16:
fa:42:c8:ee:31:1a:b7:27:ab:f5:bb:4a:fd:8c:42:f8:03:64:
79:40:e0:8d:d9:a3:de:90:85:e4:bf:b3:6a:57:04:ac:e5:52:
21:1e:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org