Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s5vQ03OxCaUleZBRepQNwXn-suM.roa
File: s5vQ03OxCaUleZBRepQNwXn-suM.roa (raw, json)
Hash identifier: Ie4ngVie/NOWS193Hy8cZJL/GEpFXYCl7WP3nSkRg0Q=
Subject key identifier: B3:9B:D0:D3:73:B1:09:A5:25:79:90:51:7A:94:0D:C1:79:FE:B2:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01855CEC339DBE1275AA31310D36A313EF43
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s5vQ03OxCaUleZBRepQNwXn-suM.roa
Signing time: Thu 29 Dec 2022 08:07:41 +0000
ROA not before: Thu 29 Dec 2022 08:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 188.208.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:ec:33:9d:be:12:75:aa:31:31:0d:36:a3:13:ef:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 29 08:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b39bd0d373b109a5257990517a940dc179feb2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:69:d9:c9:a0:fb:ac:55:5a:ce:13:d8:26:
91:d6:bd:1c:b9:71:71:38:fa:92:cb:5e:f5:d6:f3:
b8:7c:27:62:a6:48:89:63:3f:62:f7:3b:96:13:30:
83:06:cb:10:21:a0:35:29:fe:55:e9:e7:ed:a2:00:
7c:3d:26:29:cc:69:84:60:03:c9:8c:f0:5e:4e:0f:
6a:8f:ea:d0:f1:21:93:88:4c:f0:4f:b7:b9:d0:e3:
e9:f0:f3:96:2a:f6:06:df:a3:ae:e6:2e:9f:53:3f:
f9:45:95:d7:ed:d4:60:bb:e1:3f:31:a6:de:73:f0:
f1:32:d6:c4:c0:5a:c8:d4:ba:aa:6d:03:68:35:57:
cb:56:07:12:0f:37:ac:40:ef:fd:05:8a:85:66:ac:
b0:66:5e:a1:db:5a:ad:9f:b3:17:15:cd:ad:b4:5d:
81:7e:b1:91:b5:35:6c:d3:4c:a6:45:10:37:1b:03:
02:34:10:4a:d6:23:34:b0:50:e3:3c:9a:d5:a3:6e:
6a:b3:63:dd:ed:f9:43:ce:ca:86:57:ea:90:6d:f7:
7e:ce:7c:6d:0d:7a:23:41:ac:9a:7e:b5:cb:11:ad:
ba:ec:fd:13:e0:d9:34:12:18:d5:e3:00:d2:51:40:
5a:ec:45:e1:31:75:62:ae:2d:91:a8:2a:27:ed:72:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9B:D0:D3:73:B1:09:A5:25:79:90:51:7A:94:0D:C1:79:FE:B2:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s5vQ03OxCaUleZBRepQNwXn-suM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f5:eb:55:e0:99:ba:ab:48:80:97:7e:43:63:18:ae:6a:76:
c5:23:ec:4a:66:56:2b:c8:08:9a:45:1b:10:ca:3a:91:f4:7c:
ca:05:69:bf:d8:06:a7:21:69:85:e2:a7:03:dc:34:05:a3:5e:
4b:08:3b:ec:93:c6:7e:42:59:73:4b:75:6d:08:61:bc:65:4e:
19:f3:58:3e:90:2c:a9:6d:7e:3e:fb:f0:89:df:33:ab:9b:4a:
a3:14:5e:9b:23:95:4b:71:43:5d:d6:8e:06:0d:80:27:26:75:
3f:a8:e9:cb:88:8b:66:bd:08:b9:4a:da:9d:41:ae:da:60:7a:
9e:57:57:10:31:6c:8c:c1:3d:30:54:3c:27:ee:cf:d3:5d:3b:
c0:6e:06:56:cf:01:07:d9:a5:80:c3:ae:ee:3e:71:5f:93:cb:
7f:7e:85:b5:13:99:ea:6d:ea:89:bd:d1:1a:1e:10:52:f4:a4:
21:d7:39:5c:b9:94:df:55:e7:05:77:34:75:37:50:98:61:6e:
d0:6d:1a:7a:ae:9d:ae:9f:d3:19:3d:33:74:d1:85:a0:23:fb:
92:f4:0f:83:f9:d1:06:f4:84:29:40:2c:78:1f:b3:e6:2d:0d:
79:a9:db:13:61:b5:c3:df:f4:6c:57:77:46:40:e6:82:68:c7:
a8:e1:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org