Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/f2rIurno6At0o28jEzUbkolvcTY.roa
File: f2rIurno6At0o28jEzUbkolvcTY.roa (raw, json)
Hash identifier: MKmkY+uUY4kOm8WUG2P440lPjZ9p9OyZC2SbkzRo1LA=
Subject key identifier: 7F:6A:C8:BA:B9:E8:E8:0B:74:A3:6F:23:13:35:1B:92:89:6F:71:36
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 05D4141C
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/f2rIurno6At0o28jEzUbkolvcTY.roa
Signing time: Wed 23 Feb 2022 08:00:09 +0000
ROA not before: Wed 23 Feb 2022 08:00:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58010
IP address blocks: 193.56.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97784860 (0x5d4141c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Feb 23 08:00:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f6ac8bab9e8e80b74a36f2313351b92896f7136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e0:56:a4:8c:a7:fb:a6:bb:10:28:5c:96:75:
c7:b6:1a:1e:7a:da:d5:bb:5e:ab:95:2b:f2:c2:da:
64:85:75:db:df:57:9b:36:41:2a:c9:5c:7d:53:68:
41:0d:d5:5c:ac:c8:09:0f:68:a9:cc:b9:75:60:b4:
57:90:fa:28:ba:8f:c1:f1:59:11:de:8b:5c:87:67:
e2:03:41:82:a0:f8:55:22:03:a7:38:bc:3d:7f:57:
c2:78:ae:88:6f:69:7b:f8:52:8c:d6:2a:ed:e2:0b:
82:99:d5:dc:fb:a0:48:2a:64:6b:24:af:f6:c4:8e:
a6:5e:75:21:45:e6:e5:5d:44:de:ba:04:a1:44:e8:
c9:4f:e4:b2:85:15:3b:9d:d9:dd:92:3b:e1:36:89:
82:1a:a7:51:19:5c:61:18:da:d9:b7:ad:96:af:d8:
b2:f7:98:68:82:71:d6:b8:1c:54:7c:38:f6:04:c7:
2e:e1:cc:01:20:47:d5:7e:6d:83:a5:52:08:b5:30:
09:10:81:01:4c:82:9a:85:d2:ba:a8:59:b7:c7:24:
e1:db:22:02:dd:9e:38:fa:4f:5a:53:17:f3:35:84:
51:ee:a6:67:dd:06:42:02:a2:f1:f3:6f:76:43:fd:
b1:00:8e:2c:43:71:d7:c6:33:cc:d3:2f:1c:00:d9:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:C8:BA:B9:E8:E8:0B:74:A3:6F:23:13:35:1B:92:89:6F:71:36
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/f2rIurno6At0o28jEzUbkolvcTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.173.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:ef:d3:63:2c:42:99:75:cb:b9:3a:35:ca:73:c6:11:ff:
cc:8e:16:64:2d:1d:08:1b:d9:19:6f:f8:97:c9:3d:97:f5:c6:
db:38:99:e0:b9:06:d8:a8:cf:d3:bd:5f:40:83:c9:65:fe:55:
4c:e2:51:ac:a4:27:ad:f3:79:b3:85:73:23:41:ac:16:70:55:
34:18:b4:9e:35:8f:d8:80:9c:26:c4:6f:dd:85:db:69:2a:9d:
f2:58:7e:bd:cf:f4:fd:88:65:53:f3:9d:e5:fc:05:c3:6f:f4:
94:bd:58:20:ad:60:d1:fa:f9:fd:64:fc:17:30:80:18:c0:88:
d5:5c:2f:02:9a:f3:2d:85:2c:d6:b0:e5:05:13:72:df:5d:b8:
e8:6a:79:a4:2e:c9:f0:d7:bb:25:de:65:b0:10:3c:d9:aa:1e:
4b:32:cc:8c:90:32:13:15:d3:b2:f0:c3:b7:9d:e5:fd:1f:93:
1c:76:d8:4c:ec:61:d7:3c:b5:25:44:d8:6f:9c:a9:54:fe:ad:
d6:47:01:2d:7d:dd:43:5d:ac:ab:cb:11:53:82:e4:2b:6d:04:
69:8b:7e:72:1b:14:c2:ee:f3:68:d5:3b:12:54:f5:b1:68:6f:
ed:2f:37:49:e8:3e:20:97:c3:a4:64:81:70:bd:b9:ec:af:3f:
fd:ba:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org