Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/Kth5jtMUq0k6aoHp6_k24O68zbk.roa
File: Kth5jtMUq0k6aoHp6_k24O68zbk.roa (raw, json)
Hash identifier: ki/8uV4J4XGCn7kueHWdjg0ypfwtWAN+OHVk2yfdvMw=
Subject key identifier: 2A:D8:79:8E:D3:14:AB:49:3A:6A:81:E9:EB:F9:36:E0:EE:BC:CD:B9
Certificate issuer: /CN=dc84756dc772c06483249a987a3b1bc6e605e835
Certificate serial: 0A27101B
Authority key identifier: DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/Kth5jtMUq0k6aoHp6_k24O68zbk.roa
Signing time: Sat 01 Jan 2022 12:54:09 +0000
ROA not before: Sat 01 Jan 2022 12:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210011
IP address blocks: 193.160.82.0/24 maxlen: 24
193.160.80.0/24 maxlen: 24
193.160.83.0/24 maxlen: 24
193.160.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170332187 (0xa27101b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc84756dc772c06483249a987a3b1bc6e605e835
Validity
Not Before: Jan 1 12:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ad8798ed314ab493a6a81e9ebf936e0eebccdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:ec:2f:33:22:af:cf:48:78:bb:d0:d2:a1:
aa:4f:15:ca:c5:90:ea:eb:b5:98:52:43:ac:df:2f:
20:43:ca:a2:36:a8:48:ce:aa:11:16:45:00:72:e3:
03:34:a0:89:ac:b1:1a:f7:3e:2e:e2:6a:35:8f:77:
17:d2:84:1e:25:eb:7c:dc:72:14:22:46:fd:3c:d0:
83:8c:2b:40:ad:75:e3:c3:40:70:95:59:cf:55:7f:
b1:32:69:fc:a4:9e:86:6a:e1:78:69:c8:88:1b:bb:
58:3e:05:3c:be:61:23:4f:39:48:44:a3:47:b7:54:
f2:5a:b1:eb:73:3b:8e:22:3a:a7:65:0a:1f:d2:67:
5a:ee:93:dd:11:4e:72:be:08:ed:f0:a1:ca:b7:5c:
65:f5:20:46:7a:8c:89:1e:84:e1:e7:75:04:4e:13:
d0:87:4c:b9:ff:fc:1e:65:60:2c:8e:5d:a8:45:64:
a1:a9:2a:14:ea:a0:14:9e:06:81:b2:40:9e:23:33:
36:77:70:85:b8:19:45:ec:ce:a6:61:3d:a5:25:7d:
91:f4:a7:bc:37:6f:c5:fb:86:63:15:7b:87:f9:71:
13:c8:7f:ac:8c:cf:df:1a:ff:08:3b:87:67:01:22:
2a:54:1d:4a:60:af:51:0f:13:11:74:b8:66:a0:dd:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:79:8E:D3:14:AB:49:3A:6A:81:E9:EB:F9:36:E0:EE:BC:CD:B9
X509v3 Authority Key Identifier:
keyid:DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/Kth5jtMUq0k6aoHp6_k24O68zbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ba:7c:2f:80:28:7f:32:7e:66:6e:68:9b:cf:d5:d2:b5:1b:
b1:c7:77:cd:f4:7b:5f:13:c2:fc:8a:77:fd:8a:39:ec:0c:4b:
07:59:66:71:f7:33:94:96:f6:16:40:e5:a3:19:b1:b7:09:cb:
42:ca:33:65:44:7e:d6:9f:9d:03:5c:c2:b5:9b:21:ca:70:9e:
aa:0a:57:1f:e4:40:60:0e:c8:67:62:39:95:b5:0a:d8:7e:7d:
cd:9a:20:03:7c:23:03:35:e6:48:ec:53:61:46:8b:a1:7f:6d:
a3:8f:ee:e5:de:fc:ff:43:43:32:b2:39:5d:83:01:4b:4c:72:
3f:47:3f:83:db:6e:4b:38:34:8c:f1:ba:a0:87:bd:f0:85:52:
c1:2a:31:3c:1f:f1:5e:c5:e1:e3:a8:25:53:fc:5d:55:ea:c3:
05:02:5e:67:54:ef:2a:34:04:07:e4:5c:1a:bb:0c:2d:41:a9:
60:94:d9:b0:6d:12:95:1d:39:f2:74:9b:21:c0:e8:e8:f6:0c:
a9:6c:73:98:72:92:b2:4d:1d:5f:c8:b6:2d:0e:bf:03:8e:14:
48:88:6f:ff:d1:b2:a5:b3:b6:76:ef:af:c4:b3:f4:d3:61:15:
47:04:4d:3a:dd:5f:19:39:8e:7b:49:26:bc:e7:ae:ef:11:80:
28:0c:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:47 2023 by rpki-client on console-ams.rpki-client.org