Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c696d0-7ee0-4bd3-8cd0-510102f6282a/1/BIOBlDYn1DstKEWOdm6gRuWmqcQ.roa
File: BIOBlDYn1DstKEWOdm6gRuWmqcQ.roa (raw, json)
Hash identifier: LNc+fcN5AbZm2KCKPFYbbFHC8mKkmVK++sS2E3s3uTk=
Subject key identifier: 04:83:81:94:36:27:D4:3B:2D:28:45:8E:76:6E:A0:46:E5:A6:A9:C4
Certificate issuer: /CN=6aaf98d8f84b0b2f3b1295507e6e763b3b6c31b9
Certificate serial: 674962
Authority key identifier: 6A:AF:98:D8:F8:4B:0B:2F:3B:12:95:50:7E:6E:76:3B:3B:6C:31:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq-Y2PhLCy87EpVQfm52OztsMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c696d0-7ee0-4bd3-8cd0-510102f6282a/1/BIOBlDYn1DstKEWOdm6gRuWmqcQ.roa
Signing time: Sat 01 Jan 2022 00:53:35 +0000
ROA not before: Sat 01 Jan 2022 00:53:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.163.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6768994 (0x674962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aaf98d8f84b0b2f3b1295507e6e763b3b6c31b9
Validity
Not Before: Jan 1 00:53:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=048381943627d43b2d28458e766ea046e5a6a9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:8a:3c:38:07:67:f0:40:61:4e:63:0b:3c:
1a:a5:56:d9:b2:c8:01:b3:7a:31:fe:15:25:ba:0f:
17:90:fc:0d:91:49:d5:22:d6:d7:2b:1a:d8:c3:5d:
a0:38:76:39:0a:2b:83:39:ce:d5:d8:76:4a:85:f3:
0f:33:66:0a:64:e8:e8:aa:5c:ac:56:42:1c:5e:be:
42:23:0f:2d:e2:d4:f0:c1:8e:31:1e:7c:0a:dc:35:
29:73:93:2d:4e:bf:d9:25:f6:aa:63:41:de:01:82:
fb:b9:4b:25:de:b7:a7:b0:77:57:21:f7:a8:73:1e:
cb:b8:8e:58:60:50:d7:48:d4:f0:f3:cf:ef:0f:22:
63:b5:1c:83:75:5b:6d:6f:c7:eb:1f:1d:2d:94:a4:
12:28:90:62:2f:d6:92:47:f2:4b:41:89:01:63:a7:
5d:9c:ca:ab:a0:05:63:77:dc:a5:27:15:27:1b:9d:
cf:4b:a8:65:df:84:1c:a7:2d:50:74:0c:09:ee:e3:
5e:9f:15:e3:1a:85:ba:31:3e:da:b1:0f:27:90:0d:
fa:75:c8:ee:d5:0e:51:00:07:c9:20:ed:4c:1e:47:
57:35:39:81:3d:7e:ed:e1:9a:8c:82:8a:5b:5e:15:
e3:1f:75:34:0d:20:90:0b:23:a0:c5:08:36:be:10:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:83:81:94:36:27:D4:3B:2D:28:45:8E:76:6E:A0:46:E5:A6:A9:C4
X509v3 Authority Key Identifier:
keyid:6A:AF:98:D8:F8:4B:0B:2F:3B:12:95:50:7E:6E:76:3B:3B:6C:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq-Y2PhLCy87EpVQfm52OztsMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c696d0-7ee0-4bd3-8cd0-510102f6282a/1/BIOBlDYn1DstKEWOdm6gRuWmqcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c696d0-7ee0-4bd3-8cd0-510102f6282a/1/aq-Y2PhLCy87EpVQfm52OztsMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.18.0/24
Signature Algorithm: sha256WithRSAEncryption
68:38:a8:a5:55:5c:b4:d6:7d:14:ac:1b:b8:f2:3e:ad:6c:b0:
64:27:a0:9c:8a:36:76:cc:04:35:b0:50:db:aa:c3:8f:86:59:
12:70:ee:65:2c:30:04:76:89:b1:a7:fa:69:9a:c2:05:9e:b6:
96:e3:d5:44:84:5a:00:e8:01:af:11:9e:21:8e:cf:68:29:aa:
aa:da:3c:d1:e9:39:c0:7f:fc:f1:4b:9c:97:84:86:31:09:a8:
b8:a5:c8:4c:6b:85:03:db:94:4d:3f:f3:15:d9:fd:07:7a:3e:
36:2d:6e:f8:dd:04:2b:c1:14:dc:cc:9a:79:a7:85:82:10:90:
a0:5d:86:56:83:eb:fb:75:73:88:61:47:b1:6a:7a:be:2c:b0:
40:e5:d5:37:3f:e2:19:5e:c4:2c:a0:68:31:bf:5f:24:89:e2:
7d:7f:f0:29:4c:6a:a6:13:ea:a3:31:31:d4:c3:97:90:ed:e3:
e1:35:ce:4e:70:82:28:f3:1a:52:90:af:5d:a5:ab:ae:cf:c6:
84:a1:6e:03:47:e1:43:95:8b:bf:25:cc:50:33:8f:df:cc:da:
6e:67:b8:8e:6c:a6:c7:78:26:ca:ac:e2:9f:64:a6:bc:da:f4:
4b:5a:08:dc:84:a5:29:be:4c:57:de:7c:ae:e3:f9:66:31:44:
c1:f9:59:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org