Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/3PsPaABAckOnlfcTmhQVD8EHJDk.roa
File: 3PsPaABAckOnlfcTmhQVD8EHJDk.roa (raw, json)
Hash identifier: VMXYDJeyiPQuA/PWPnD8oOJATr+yh8s5+reuuvXuXK4=
Subject key identifier: DC:FB:0F:68:00:40:72:43:A7:95:F7:13:9A:14:15:0F:C1:07:24:39
Certificate issuer: /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial: 887B
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/3PsPaABAckOnlfcTmhQVD8EHJDk.roa
Signing time: Mon 04 Apr 2022 12:06:41 +0000
ROA not before: Mon 04 Apr 2022 12:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25460
IP address blocks: 193.32.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34939 (0x887b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Validity
Not Before: Apr 4 12:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcfb0f6800407243a795f7139a14150fc1072439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:79:2d:8c:4b:82:ff:2f:7e:89:e6:71:38:cf:
fa:d0:4f:a6:c7:e8:c2:38:24:a8:59:d8:1e:a7:d9:
8c:a4:73:1f:5f:16:6e:87:7b:f2:8b:db:05:b8:aa:
d7:cc:c6:77:78:10:a5:51:3d:19:f0:9b:54:9f:f0:
6b:58:26:e4:95:ad:40:56:61:70:fa:22:9d:2d:96:
e7:74:00:f4:c8:58:c9:84:01:d4:9d:cf:42:c5:40:
5a:b0:fe:f4:29:33:33:ea:cb:01:66:7a:3c:cb:41:
4e:d7:2f:c0:65:c9:5a:f5:59:a3:7a:3d:2e:9d:c4:
a8:c6:87:f4:20:9a:af:d5:1e:13:e6:f8:7a:0b:82:
bc:ec:09:85:74:15:aa:54:eb:02:2e:3f:eb:ed:aa:
5a:8d:0f:eb:d5:77:5a:7d:5b:6a:f2:87:f5:2a:05:
d7:1e:21:48:27:23:ca:ed:b9:69:10:92:a6:f6:2e:
19:c7:68:1a:a9:04:3c:e7:0e:c1:55:f2:6d:ef:cc:
d7:89:97:6e:f5:b9:d0:2b:b1:0a:be:97:fd:82:14:
f7:db:0b:4f:4a:47:36:7f:df:91:86:a6:19:18:c0:
a6:ac:c4:f7:46:14:c6:03:f6:72:f7:46:18:5c:f5:
31:47:ad:cc:0e:c9:b7:d4:e1:e0:13:a0:75:e7:a0:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:0F:68:00:40:72:43:A7:95:F7:13:9A:14:15:0F:C1:07:24:39
X509v3 Authority Key Identifier:
keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/3PsPaABAckOnlfcTmhQVD8EHJDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.18.0/24
Signature Algorithm: sha256WithRSAEncryption
59:83:31:2a:36:f6:20:da:46:30:c1:24:7b:88:1d:dd:93:e4:
03:31:f5:1d:70:c9:66:2c:e7:34:af:d4:b9:9f:ea:c7:1a:e6:
fc:61:56:91:03:bf:fc:1e:87:00:ae:0f:b1:6a:16:ac:99:9e:
14:d7:da:83:21:ac:7e:7a:e1:91:0b:fd:6e:84:43:56:51:02:
1c:f4:9e:9d:95:9e:7a:7d:24:7c:e5:81:31:d3:8a:32:0a:53:
47:55:5b:02:81:c5:07:bb:db:de:ea:f9:51:4e:13:58:ad:9a:
b9:a5:3a:52:19:18:e4:98:24:80:3d:32:09:f0:93:1e:ab:ac:
52:44:7d:11:27:2b:88:50:cb:91:76:73:4c:93:51:e3:96:43:
8b:c5:b0:cb:66:49:50:64:45:a1:22:88:5e:a2:5e:b1:39:de:
d2:56:3b:20:b0:bd:d6:bf:13:a7:ea:fa:e7:48:5a:4f:8f:7f:
2e:f1:63:1c:1d:d8:17:5a:c8:80:4d:c3:e9:93:c8:38:5d:44:
3b:cc:61:99:c8:91:65:d3:a6:43:ae:12:78:a9:1a:12:ac:7f:
10:46:84:06:7c:e9:82:d6:4c:a9:6d:5e:9e:ab:16:f7:02:70:
7a:de:91:16:ac:27:c0:7f:d4:21:ca:38:59:8b:3e:9e:0d:1d:
51:35:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:11 2024 by rpki-client on console-fra.rpki-client.org