Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/929ud19VNHwWAZHWz-YM6_zxAzs.roa
File: 929ud19VNHwWAZHWz-YM6_zxAzs.roa (raw, json)
Hash identifier: afnA4+wCMG560Q3Nc2zxisAYwicM2N8078qcYcLrLl4=
Subject key identifier: F7:6F:6E:77:5F:55:34:7C:16:01:91:D6:CF:E6:0C:EB:FC:F1:03:3B
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 01574DB9
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/929ud19VNHwWAZHWz-YM6_zxAzs.roa
Signing time: Sat 01 Jan 2022 13:07:06 +0000
ROA not before: Sat 01 Jan 2022 13:07:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25149
IP address blocks: 193.178.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22498745 (0x1574db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Jan 1 13:07:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f76f6e775f55347c160191d6cfe60cebfcf1033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:7d:de:6c:21:f9:54:39:40:8b:0c:0b:7c:
cb:7c:d0:3a:d4:c3:e3:ff:cc:f9:6b:95:a8:27:5d:
5d:23:8b:3b:87:ec:6b:85:b5:ad:89:ef:8d:95:4f:
a4:3c:ba:b8:36:a7:69:30:22:69:c2:75:60:19:03:
ed:f0:45:a1:b0:ac:e4:a3:dd:c2:45:da:6a:76:f6:
75:86:6b:31:6e:ce:7f:24:9b:f4:41:ed:cb:e4:31:
88:ef:80:12:26:06:4b:3b:0e:0d:b5:e8:08:e3:64:
0d:1f:4b:0f:ab:5a:ca:fe:ef:6e:74:2f:86:23:e5:
c4:b6:13:3e:ef:d3:b4:9f:3e:32:18:f0:c8:f9:38:
77:f5:48:3b:45:fb:96:33:71:3d:aa:d6:5a:6e:23:
39:23:c0:56:5c:60:c5:bf:7f:79:74:9d:ca:ca:37:
8d:8d:8d:9d:aa:00:ba:48:a5:de:ca:30:bf:64:93:
74:3b:11:a3:ac:71:50:63:69:a1:72:1f:27:b9:46:
c8:fe:48:d6:f7:3c:a9:28:aa:a5:4e:1c:ed:b7:82:
8b:30:18:d6:fd:ab:88:6a:63:7e:6b:f4:85:b9:9e:
e7:2e:b2:4f:0e:b2:12:26:b6:40:06:c4:28:03:91:
10:74:6e:25:a5:11:03:b6:da:26:2a:dc:81:b3:92:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:6E:77:5F:55:34:7C:16:01:91:D6:CF:E6:0C:EB:FC:F1:03:3B
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/929ud19VNHwWAZHWz-YM6_zxAzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.188.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c6:8e:58:6d:3a:be:21:60:78:ae:f3:1a:b0:5d:41:46:90:
1f:20:9e:eb:3e:f6:84:c8:7d:38:bc:d1:9a:8c:af:6f:c4:27:
ac:17:22:60:2b:bf:70:d6:54:21:63:cb:3e:43:29:9d:14:7e:
67:8f:c0:a5:bd:19:f1:dd:d6:61:ad:35:5c:83:ab:12:10:47:
54:bc:9b:b4:98:0b:70:2c:f8:1a:02:6f:ed:7e:b9:6f:17:7d:
ef:a4:1d:5d:9d:93:e6:04:76:a9:53:51:23:e7:14:2a:b5:f8:
d6:a8:88:7f:3a:96:6a:6c:3f:47:7b:3f:b2:0d:2e:e0:5a:32:
ff:b8:b3:b2:68:61:c3:0a:18:bb:ab:34:6a:2b:be:07:4e:c6:
14:88:9b:be:9d:f3:20:2f:fd:f3:e2:74:65:45:f6:22:81:f6:
62:4e:98:ba:e5:19:0b:27:1f:5c:53:da:ee:6e:df:c5:47:83:
ec:0e:9f:25:2c:80:69:61:fd:28:0f:22:5d:20:e7:51:af:05:
ce:0f:13:cd:ea:38:73:a4:24:96:14:4c:cd:62:41:90:77:55:
10:11:07:d3:a6:4c:24:2e:6e:0f:79:0b:8c:d4:be:55:8e:07:
13:2d:51:5c:16:1e:c3:d7:61:14:96:5b:35:c2:c8:93:d5:a7:
c1:6c:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:51 2023 by rpki-client on console-ams.rpki-client.org