Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/expXG6EmYCQCjCtdEevtoTNHFd8.roa
File: expXG6EmYCQCjCtdEevtoTNHFd8.roa (raw, json)
Hash identifier: H7uix+59yRBkmvr4rgTM+az83ytIIF/eDTELlG3LcYA=
Subject key identifier: 7B:1A:57:1B:A1:26:60:24:02:8C:2B:5D:11:EB:ED:A1:33:47:15:DF
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 01821B816D970ED274F0FCC66BC6E2599CEB
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/expXG6EmYCQCjCtdEevtoTNHFd8.roa
Signing time: Wed 20 Jul 2022 12:07:23 +0000
ROA not before: Wed 20 Jul 2022 12:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200645
IP address blocks: 193.104.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:81:6d:97:0e:d2:74:f0:fc:c6:6b:c6:e2:59:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Jul 20 12:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b1a571ba1266024028c2b5d11ebeda1334715df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:8c:08:70:5b:28:94:b7:38:ec:11:49:37:
a4:e5:47:99:38:d9:93:77:95:d8:21:1d:bf:fa:c2:
33:13:5f:4f:e6:7d:53:fb:84:e5:2a:e2:fd:a8:4a:
99:28:d7:54:50:1b:bd:8a:d7:6b:3e:1f:fd:7b:a7:
d9:c5:2d:a2:23:a7:8a:6a:8d:af:dd:a8:68:64:89:
98:cd:4d:88:29:e0:a2:12:ac:eb:24:75:89:f9:6b:
af:ef:7a:04:74:9a:7a:e7:1c:81:bb:2e:5f:d0:d1:
34:34:e3:c9:93:1d:2b:3e:90:35:8d:99:81:60:d0:
dd:d3:86:9d:73:71:86:d7:e2:88:66:70:14:ad:b0:
f3:bc:88:45:ad:d3:32:e7:fe:91:e9:54:d2:a1:6b:
b0:88:63:1e:d8:c4:32:15:25:4c:83:42:d9:6c:78:
fc:f0:59:d5:d6:b0:96:20:3d:05:2f:14:c9:46:7f:
69:ae:2c:87:be:22:6f:2e:dd:7a:f9:d8:ff:14:92:
aa:e8:a4:46:fa:db:f3:df:b7:db:ec:a1:3e:19:89:
55:44:2a:56:98:f6:27:9c:89:82:2f:0d:65:9a:59:
ce:f4:2b:96:ae:17:a9:64:95:75:57:ea:b1:1c:05:
96:e8:d5:7f:33:8c:4b:60:c7:f9:5f:ab:a4:bc:09:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:57:1B:A1:26:60:24:02:8C:2B:5D:11:EB:ED:A1:33:47:15:DF
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/expXG6EmYCQCjCtdEevtoTNHFd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.29.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3e:00:a6:1b:23:1d:7a:72:e8:51:f6:76:90:8a:fc:7a:8a:
a2:89:35:e5:10:06:a6:66:b3:2f:ce:44:04:1a:92:fd:c3:59:
72:b0:64:17:0a:52:12:7e:3d:55:d7:21:16:2a:69:38:06:f2:
00:61:19:0c:eb:e2:b0:6b:97:8a:a2:54:c1:2f:38:dd:3a:97:
f5:e1:aa:20:34:26:27:6f:80:2c:d9:04:1a:63:fa:b3:34:33:
87:37:a7:b9:ca:05:be:b8:60:03:09:7e:a2:a3:aa:f9:76:a7:
24:06:7d:c0:03:aa:08:07:e1:f5:ea:2b:50:41:6b:9a:4a:6e:
72:8b:1b:03:b0:e6:43:1b:5c:5f:25:d4:18:3a:3f:30:e2:ee:
29:d7:de:3c:29:0b:96:0d:d2:40:4a:ab:a6:b5:fe:c6:52:d3:
0f:1b:e9:5a:59:26:5d:d0:3b:07:7d:0b:d6:b6:fe:9e:f2:54:
83:16:0b:f7:fa:7b:d4:da:d5:fa:48:34:6e:0f:23:cc:28:4a:
8a:7f:bf:82:ed:b6:1c:18:9c:1d:34:f4:4f:d5:2b:75:1b:f2:
26:fa:39:0e:76:fc:68:7c:c7:50:e8:0f:27:2b:7f:4e:c9:09:
8e:11:0d:b6:b6:30:52:8f:92:2f:fb:66:6d:ce:d6:b4:7e:40:
90:95:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:04 2024 by rpki-client on console-ams.rpki-client.org