Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/F_bIU71baQB3TYAu-yZz0evJzpc.roa
File: F_bIU71baQB3TYAu-yZz0evJzpc.roa (raw, json)
Hash identifier: ziBlAJsCG6P8OjAqNkGnXs9FZh7LlCbvxBjOVv7u5/4=
Subject key identifier: 17:F6:C8:53:BD:5B:69:00:77:4D:80:2E:FB:26:73:D1:EB:C9:CE:97
Certificate issuer: /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial: 0741BA32
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/F_bIU71baQB3TYAu-yZz0evJzpc.roa
Signing time: Sat 01 Jan 2022 09:01:56 +0000
ROA not before: Sat 01 Jan 2022 09:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199819
IP address blocks: 193.8.197.0/24 maxlen: 24
2001:678:75c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121748018 (0x741ba32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Validity
Not Before: Jan 1 09:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17f6c853bd5b6900774d802efb2673d1ebc9ce97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:34:74:67:40:c1:8a:3e:70:3c:1f:37:b9:
3b:8e:d1:2f:5e:57:ae:bd:1e:38:41:77:48:d3:55:
aa:b1:3f:ca:d2:54:52:1c:41:30:e6:b5:62:e1:84:
dc:7e:bf:15:fb:9f:fe:59:c5:84:5a:08:ef:af:24:
78:75:2c:40:db:b0:0f:32:4e:04:0c:de:f2:5b:ab:
58:3f:3d:66:02:81:f5:c3:6b:dd:83:3c:e8:aa:26:
50:4a:11:0a:c9:c4:0a:8b:34:b6:3b:18:74:4d:29:
22:bd:92:b6:89:15:e7:e1:c9:c4:8e:b2:c5:46:d1:
67:f3:61:03:62:cb:01:63:81:f3:cf:c7:be:90:d8:
1f:f2:a4:9e:22:a5:53:df:4c:dd:a7:e0:fa:05:a0:
0e:a0:2d:82:07:6b:f0:8d:d1:28:6f:9c:21:84:ff:
a7:fc:4b:c7:e1:4a:1e:13:4a:6f:31:4e:4b:81:ab:
73:d3:70:80:44:f1:1d:b1:6d:8d:23:4c:c6:58:43:
30:bd:e4:03:4c:07:44:fe:73:89:1d:a5:a4:78:6e:
da:23:9d:ce:04:e4:eb:21:5f:09:8d:95:75:81:50:
10:6d:fe:25:98:e8:80:b2:57:78:98:ea:2c:19:c4:
a9:9f:62:24:bf:8a:a5:cd:54:05:10:3e:02:3e:59:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:C8:53:BD:5B:69:00:77:4D:80:2E:FB:26:73:D1:EB:C9:CE:97
X509v3 Authority Key Identifier:
keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/F_bIU71baQB3TYAu-yZz0evJzpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.197.0/24
IPv6:
2001:678:75c::/48
Signature Algorithm: sha256WithRSAEncryption
4f:a4:76:64:56:7a:63:22:03:9c:ae:cb:99:18:7d:70:9e:c4:
59:84:bd:ae:2f:6f:d7:b7:8f:c7:05:e7:dd:05:f2:45:cf:50:
8e:b0:10:90:23:2f:d0:b1:4d:52:91:38:59:d3:32:9f:62:4a:
8f:76:2d:60:25:82:60:0d:7f:cf:01:29:b7:b2:e8:5e:a4:12:
62:ef:90:f5:bb:6d:5a:11:52:2a:d0:ce:57:f3:6f:16:4e:24:
49:2d:da:b6:1f:b3:58:4c:d4:c0:f5:db:b1:4c:14:6e:fd:7b:
42:3e:87:5b:09:42:69:91:52:a5:3b:e1:df:a3:91:ba:8c:3f:
a4:f0:cf:47:96:8a:a0:d5:e5:5c:fe:fa:4f:70:f2:c7:5a:00:
f0:84:ed:1f:10:85:8f:34:31:7a:e6:ee:84:85:d7:6c:be:55:
24:0c:ef:48:b6:3f:8c:b4:de:93:a5:ef:e9:68:e7:28:a9:96:
62:45:b3:0a:8b:2c:87:04:b1:0f:8c:87:5b:77:39:5f:73:ae:
2c:4d:f4:2f:47:23:9b:e0:c6:6f:8e:7a:c3:e9:4c:10:e1:4a:
e6:e6:c8:3b:90:ff:1d:b5:9f:e5:78:19:9f:ec:08:9d:1c:c7:
c3:24:e0:0c:5d:b2:f9:4c:8f:7a:3d:5b:fe:0b:1f:87:22:98:
a1:ae:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:22 2024 by rpki-client on console-fra.rpki-client.org