Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/IAYzMWAwapZWj97-pjSjQBVN5lA.roa
File: IAYzMWAwapZWj97-pjSjQBVN5lA.roa (raw, json)
Hash identifier: Fuatp5PKU/PDLYSddcUElx2otai4lAYNaDylrjH+WqM=
Subject key identifier: 20:06:33:31:60:30:6A:96:56:8F:DE:FE:A6:34:A3:40:15:4D:E6:50
Certificate issuer: /CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Certificate serial: 034C48A6
Authority key identifier: 40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/IAYzMWAwapZWj97-pjSjQBVN5lA.roa
Signing time: Sat 01 Jan 2022 15:00:44 +0000
ROA not before: Sat 01 Jan 2022 15:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207697
IP address blocks: 193.22.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55330982 (0x34c48a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Validity
Not Before: Jan 1 15:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2006333160306a96568fdefea634a340154de650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:37:fc:a6:67:87:86:c3:9d:14:19:24:d8:
77:63:a4:98:af:6d:ce:56:33:82:48:44:e9:7e:f2:
82:e6:b5:a7:d4:3d:82:fc:e4:cc:39:4c:7f:f2:dd:
8a:52:59:21:9b:38:5d:d0:d0:33:19:c9:2f:e9:bb:
6e:55:b3:19:e4:66:f7:0d:2f:20:46:f9:2b:27:2a:
1c:d0:d7:8b:1b:c1:e4:93:b6:12:c3:74:ac:97:72:
f8:ab:c0:a1:5d:83:4c:c9:15:a7:2f:cb:f0:75:b9:
06:0d:b4:c8:36:24:09:38:e7:b3:08:2a:99:e3:19:
a4:7c:e6:4b:2e:0e:74:0a:0d:a6:ee:be:9e:9a:8e:
c9:5d:bf:92:89:5f:07:b6:17:08:36:cc:80:39:5d:
72:3e:8a:33:33:c5:a1:a9:4c:5b:ed:6a:53:ed:e7:
4e:74:d4:3d:30:59:b0:61:df:aa:2d:7c:08:63:cd:
9a:8d:6b:5a:52:a5:c1:02:4f:9f:d2:11:89:a1:6f:
f4:5c:18:00:ad:53:63:95:e6:2b:78:e9:4e:7b:0d:
b6:4b:77:a6:b2:99:1e:58:c1:90:e0:7b:80:d9:1e:
85:3a:f7:aa:18:d2:32:a3:c7:ac:28:eb:59:b1:c7:
12:d0:28:2c:84:ec:ed:ec:59:f3:3a:09:29:8e:03:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:33:31:60:30:6A:96:56:8F:DE:FE:A6:34:A3:40:15:4D:E6:50
X509v3 Authority Key Identifier:
keyid:40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/IAYzMWAwapZWj97-pjSjQBVN5lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
64:79:9c:5b:3c:44:1f:44:39:75:91:19:ac:36:55:d0:39:78:
c9:19:c2:5f:14:a7:1c:12:86:be:d6:49:b0:7c:c2:a9:2d:cd:
f9:24:53:db:7b:6f:3d:92:54:fd:51:4a:69:de:41:76:d4:55:
93:db:9f:3e:ff:78:9c:1e:c1:c1:a5:5b:c3:d3:3e:5f:e0:b8:
e9:08:c4:0d:ae:79:a4:81:78:4e:73:e4:a2:af:bc:22:88:3c:
9d:8d:c3:74:8a:cb:e9:cc:a2:22:20:8b:44:e3:b8:20:97:06:
0b:09:c8:12:cf:a2:74:c9:a0:74:12:63:e8:01:39:17:5b:97:
85:68:4d:b3:1f:21:9d:43:72:61:e7:fc:ec:a6:4d:9e:c0:3d:
6a:31:6a:39:4e:df:01:d3:d7:c7:a1:ab:2e:2d:c7:14:fe:00:
c0:b1:90:24:93:a7:7e:89:69:10:19:a3:08:62:85:55:50:9b:
38:c1:43:c0:67:0b:d0:c3:94:cd:78:35:05:6f:79:02:3e:f0:
82:b6:95:25:f5:52:a8:a0:d7:c1:f6:21:55:ae:5f:56:7c:32:
06:7f:87:41:61:7e:a6:07:ee:bf:a7:0c:41:fa:6e:9a:85:c3:
18:f5:a9:b7:1a:84:1c:ab:81:a5:f9:72:f4:af:92:30:a0:7b:
5f:6f:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:14 2024 by rpki-client on console-ams.rpki-client.org