Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/9a2IR_WBPKKkQIi51bq4hg54idM.roa
File: 9a2IR_WBPKKkQIi51bq4hg54idM.roa (raw, json)
Hash identifier: lgCYFDUiNm8fASd3jU0fT/cmd342//4HIFcO8qyRtVQ=
Subject key identifier: F5:AD:88:47:F5:81:3C:A2:A4:40:88:B9:D5:BA:B8:86:0E:78:89:D3
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 37181493
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/9a2IR_WBPKKkQIi51bq4hg54idM.roa
Signing time: Sat 01 Jan 2022 11:59:55 +0000
ROA not before: Sat 01 Jan 2022 11:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1880
IP address blocks: 193.10.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924325011 (0x37181493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 11:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5ad8847f5813ca2a44088b9d5bab8860e7889d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:bf:9a:88:b4:7e:d3:d0:f1:84:c4:c4:1e:
2c:4b:d1:be:52:c2:89:5f:88:56:ae:dd:f9:c8:22:
3c:dd:80:5d:bf:8d:3a:b1:1d:53:94:cf:af:71:11:
8b:5e:36:50:ab:ec:d5:ee:81:f5:71:8f:40:d0:a1:
37:55:eb:70:89:c1:1f:da:a2:de:be:a6:2f:50:b9:
69:03:5e:a9:5a:47:f6:01:89:9e:18:2b:03:e1:2b:
ed:f6:60:bd:b7:c8:bf:36:8e:00:d6:30:34:24:1a:
b7:06:d2:cd:01:d7:87:17:c3:f7:ea:49:6d:99:13:
84:06:58:6a:f9:b2:f5:2d:1f:95:84:61:41:50:1a:
ad:fb:5a:1e:f6:7d:2c:35:82:83:93:a6:e1:84:83:
8b:6a:8b:63:e6:1a:87:52:11:00:f1:cc:75:c8:46:
18:f1:54:93:d1:02:ea:6d:c7:02:7a:1f:aa:29:c6:
68:88:8e:f1:3d:85:01:a6:0d:5a:f7:7f:0e:fd:19:
bc:c9:79:39:7a:07:a8:18:51:16:76:c8:f7:86:0c:
76:8d:8a:cf:d3:7f:a6:3f:1a:ed:b9:7f:7c:e3:dc:
32:54:ab:d0:3d:2e:b9:c4:90:c6:c3:57:bf:29:af:
f6:81:be:9d:25:24:8f:a3:b0:49:2b:f1:ef:24:76:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AD:88:47:F5:81:3C:A2:A4:40:88:B9:D5:BA:B8:86:0E:78:89:D3
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/9a2IR_WBPKKkQIi51bq4hg54idM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:39:71:43:fd:6e:90:d7:99:88:71:3a:76:66:f6:de:72:57:
37:d4:05:ee:14:34:e2:a9:84:23:c2:1d:00:99:f0:01:fd:ba:
73:e8:8c:73:18:59:9b:b6:aa:9d:de:ad:d9:dc:c4:02:a5:68:
29:37:4f:75:4e:11:c7:0d:23:68:07:ad:89:4a:74:23:5f:df:
c5:a1:ab:52:ca:6b:6b:ca:d7:09:89:40:81:3a:28:c0:3c:ab:
4c:80:80:3e:bd:d9:4d:f6:65:51:2e:56:25:fd:d8:bf:d8:52:
d6:0a:4c:3e:b7:59:43:c2:ed:da:12:c5:9a:db:cc:61:2c:9a:
80:8f:13:fe:19:40:c6:80:15:4b:11:6b:74:64:22:be:8a:1a:
3f:2b:94:51:9d:4e:df:13:0c:b7:8b:96:f9:02:ee:dc:40:09:
b5:01:f2:f4:47:39:8c:23:a9:be:8f:bb:46:7e:3d:05:00:da:
24:7b:94:53:7f:75:7d:55:d2:da:58:ac:0a:64:5b:09:9f:cf:
2c:fb:7c:1a:54:2c:54:95:a3:98:fc:01:53:e6:1d:c8:ed:0c:
06:14:b4:02:4b:0b:70:3f:4b:c5:c6:33:76:16:89:aa:fe:58:
53:dc:5c:be:5f:6e:52:57:97:57:df:31:cd:94:53:9b:79:12:
82:72:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org