Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/lHW21XU9SqJDUW8iil-sEhUaNPk.roa
File: lHW21XU9SqJDUW8iil-sEhUaNPk.roa (raw, json)
Hash identifier: GEjvr2CfWQS+0tVb2ZYxi0xXDfuiyPyGhd+22+KfQYc=
Subject key identifier: 94:75:B6:D5:75:3D:4A:A2:43:51:6F:22:8A:5F:AC:12:15:1A:34:F9
Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial: 0183407AF68F002760B5D8DBEC3C02BA1F5A
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/lHW21XU9SqJDUW8iil-sEhUaNPk.roa
Signing time: Thu 15 Sep 2022 09:29:03 +0000
ROA not before: Thu 15 Sep 2022 09:29:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31510
IP address blocks: 193.228.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:7a:f6:8f:00:27:60:b5:d8:db:ec:3c:02:ba:1f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Validity
Not Before: Sep 15 09:29:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9475b6d5753d4aa243516f228a5fac12151a34f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:72:3e:7d:ac:8d:d0:bf:98:8b:8b:01:f2:
02:b4:64:89:de:79:e9:1d:50:db:b3:7b:7e:fb:7f:
d1:37:06:c6:e9:56:7e:54:6f:83:d0:4c:85:c1:65:
85:54:c5:09:b8:e2:46:ec:43:9c:31:f1:26:90:21:
88:f9:87:75:f2:b3:0d:70:08:90:3e:ab:b9:2b:5f:
a8:1d:35:d2:df:2c:90:f1:0e:ac:5f:97:37:89:42:
26:af:26:9f:f9:fd:77:5c:66:c6:aa:59:7e:12:c3:
b8:7d:2a:a4:9f:bd:0d:8e:a1:d4:0b:81:a7:10:51:
e7:82:c2:7a:74:ba:38:1d:52:3d:e4:e2:16:f5:1e:
0c:f0:bb:77:82:d0:e8:ae:0d:11:98:c6:7a:dd:0c:
11:2a:3f:b4:b6:71:23:f5:a4:3b:0f:82:46:9c:bb:
88:53:fb:91:46:54:e8:45:ff:1e:4c:6f:30:69:87:
ce:b8:53:3a:37:a5:f5:12:a7:1c:3f:78:58:10:08:
82:32:4d:e2:be:2f:71:2a:5c:ad:15:4c:44:75:05:
c9:ec:4b:7c:4a:6a:e3:32:6b:8e:22:3a:c3:3d:63:
78:e7:cf:0f:e3:fe:ad:48:da:6b:8e:68:10:f6:93:
9f:5b:23:42:2b:91:29:c5:4b:06:dc:1f:2a:0b:2c:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:75:B6:D5:75:3D:4A:A2:43:51:6F:22:8A:5F:AC:12:15:1A:34:F9
X509v3 Authority Key Identifier:
keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/lHW21XU9SqJDUW8iil-sEhUaNPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.93.0/24
Signature Algorithm: sha256WithRSAEncryption
92:10:cb:98:eb:f4:61:4e:9e:57:eb:08:49:d7:37:51:24:ec:
da:5c:f2:b2:ec:c1:6f:ac:e6:7b:be:3d:ac:10:fb:5c:ce:43:
0c:74:73:db:7e:1e:2b:27:de:ce:06:40:c5:76:69:e2:28:bb:
53:f5:93:7e:7f:54:4f:98:d4:7a:cc:2d:ea:eb:72:70:1d:30:
b9:d0:c5:2d:33:c5:81:f3:ae:c6:94:73:c8:98:48:85:2e:38:
04:e9:7a:71:c0:09:00:db:85:aa:26:c6:95:a4:a2:e2:80:0b:
9e:a9:bc:8b:13:76:c3:ef:1a:ca:42:4e:85:61:7a:40:f0:34:
96:30:ea:0d:d9:66:64:84:ae:48:2d:76:ea:80:fe:03:a8:31:
22:2f:09:5a:f7:b8:65:82:b0:60:e5:6f:fc:3c:fe:88:1f:b1:
e1:67:60:db:ee:b3:c9:5a:bb:0e:f8:b7:1e:e3:19:4a:b9:c4:
46:0c:0a:86:78:f4:86:4a:a9:ba:31:d1:0a:b9:32:28:7c:70:
bc:18:7f:4d:42:45:c4:4b:63:5a:15:97:b5:16:fb:40:97:b1:
6a:29:84:7a:26:2a:58:6e:43:0b:e6:b5:a6:c7:ea:f8:3d:49:
6e:ea:99:c4:c6:c7:c9:ec:dd:ea:f1:d0:bf:98:b0:a8:80:26:
6f:04:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:01 2024 by rpki-client on console-fra.rpki-client.org