Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/t58_N4wOKirICinwH3k_VQro6rg.roa
File: t58_N4wOKirICinwH3k_VQro6rg.roa (raw, json)
Hash identifier: mZrs8gBxuFDmz5urdQVKehcNl73CyFI193mcZs3S6tc=
Subject key identifier: B7:9F:3F:37:8C:0E:2A:2A:C8:0A:29:F0:1F:79:3F:55:0A:E8:EA:B8
Certificate issuer: /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial: 18D1EE2C
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/t58_N4wOKirICinwH3k_VQro6rg.roa
Signing time: Sat 01 Jan 2022 08:02:52 +0000
ROA not before: Sat 01 Jan 2022 08:02:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 194.53.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416411180 (0x18d1ee2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Validity
Not Before: Jan 1 08:02:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b79f3f378c0e2a2ac80a29f01f793f550ae8eab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:13:34:f9:24:58:49:9c:1a:6c:2d:31:71:
c6:98:28:15:d8:4b:67:85:f5:e3:31:25:58:9d:45:
40:bd:89:ab:6c:83:6c:1e:81:5e:36:09:dc:6c:05:
20:52:45:c4:43:65:2c:5e:96:5c:f1:ea:06:21:19:
61:15:3f:d4:ca:e3:21:b8:fd:6e:b5:d5:6c:6b:bb:
31:2b:7e:a7:4e:9d:a5:34:7c:1a:41:c4:76:bb:72:
77:bf:54:5e:d8:c0:87:1f:3d:56:13:5f:ca:1a:c7:
2a:07:da:3c:54:37:c3:d4:6f:4e:4b:a8:3e:8c:01:
25:52:ba:d6:2e:45:1e:a7:2b:ee:51:67:90:2f:26:
25:d4:bb:af:3b:b3:0c:65:2a:39:d2:1f:a1:7f:9d:
65:74:b1:4d:36:c9:d7:04:89:73:5d:50:a0:4a:40:
28:66:40:2d:38:b9:98:99:92:51:b2:98:8b:3b:0c:
e8:34:35:de:66:1e:6f:ca:6d:bb:6d:70:23:dc:96:
ec:01:a4:56:5f:d2:30:0d:d5:69:aa:a3:18:1d:d4:
bb:b6:b5:bc:9b:fb:c1:ec:92:00:df:50:be:74:00:
13:03:f3:fc:47:42:93:1d:87:7a:c0:88:3c:6b:38:
24:a0:e7:94:14:1a:ab:53:f2:fb:f0:17:58:08:fc:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:3F:37:8C:0E:2A:2A:C8:0A:29:F0:1F:79:3F:55:0A:E8:EA:B8
X509v3 Authority Key Identifier:
keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/t58_N4wOKirICinwH3k_VQro6rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.0.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7a:32:23:a8:d1:e6:34:14:9a:b3:4b:d6:7d:47:0d:f6:57:
5d:89:fc:d4:20:26:df:f2:c0:3f:d9:79:ed:7a:03:d5:c8:ef:
ed:97:e1:88:7b:46:4c:dd:aa:72:f4:a0:a0:83:81:09:14:c7:
5f:19:f0:26:8d:d3:6c:b9:e8:16:31:34:63:95:a5:00:cb:77:
cc:61:c7:b9:41:61:11:23:c4:21:7c:9a:71:65:2f:3c:c3:db:
51:6b:42:bf:bd:0e:2a:c3:d8:3a:e6:ab:65:65:b0:4a:c7:79:
59:66:92:0d:30:fe:28:68:14:35:62:60:65:98:92:3b:78:91:
93:a7:59:df:dd:aa:eb:1d:b0:dc:41:0b:cb:14:b8:c1:94:14:
7b:64:bd:e3:6a:df:2a:ee:7b:9a:88:32:df:e6:18:db:83:11:
2d:0b:d5:35:58:b2:95:a3:99:a3:b2:81:68:5c:66:61:d8:21:
05:f1:cb:0f:50:d6:b8:f9:9b:1f:c7:4c:13:a5:62:4a:de:f3:
16:ef:cb:94:5d:87:4a:ed:bf:a4:2c:0f:e6:d0:65:ed:c2:0f:
8c:0a:9b:ef:3d:b6:34:1c:c8:9a:9a:36:fd:83:35:8c:c7:da:
c6:fc:12:d9:7d:f2:ad:b2:c7:58:b1:58:42:44:e1:8b:f9:91:
bb:15:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:19 2023 by rpki-client on console-fra.rpki-client.org