Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/4q1Axb1r78JD0SYlCQkE9j5B7A4.roa
File: 4q1Axb1r78JD0SYlCQkE9j5B7A4.roa (raw, json)
Hash identifier: oAqGD4bE3aSCp1H9jqQrgH+NvdeUxSbYZKfEN2n+PyY=
Subject key identifier: E2:AD:40:C5:BD:6B:EF:C2:43:D1:26:25:09:09:04:F6:3E:41:EC:0E
Certificate issuer: /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial: 2035EFF1
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/4q1Axb1r78JD0SYlCQkE9j5B7A4.roa
Signing time: Sat 01 Jan 2022 05:03:05 +0000
ROA not before: Sat 01 Jan 2022 05:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24622
IP address blocks: 193.120.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540405745 (0x2035eff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Validity
Not Before: Jan 1 05:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2ad40c5bd6befc243d12625090904f63e41ec0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:33:d2:06:94:56:0a:30:51:bf:be:2c:c2:
23:16:40:8c:d0:46:54:ef:4a:1f:56:67:73:34:11:
14:aa:a3:b6:19:05:df:4b:6a:8d:2b:de:74:12:80:
58:50:0a:42:c1:b2:0d:74:ff:66:00:7f:b6:0d:ab:
b1:d9:0c:82:c0:f3:72:dd:af:64:1b:70:d7:7a:91:
fb:dc:18:cf:42:aa:04:f4:1e:fa:6c:eb:d2:e8:86:
ea:b9:04:5a:65:07:11:43:a9:fc:cd:3c:ef:cc:20:
4c:cc:90:55:11:66:3e:7c:96:27:0a:a2:b1:17:77:
a6:23:21:ef:00:9f:9c:3d:2f:5a:46:63:9b:b3:4c:
63:81:d2:e9:eb:37:d8:c2:cf:2f:c9:fd:56:3a:55:
aa:19:9d:b8:c6:3c:44:0a:d6:bd:06:a0:24:e3:e6:
45:fa:45:15:e1:79:47:a4:3f:3e:5d:8e:a3:aa:55:
23:be:f4:43:91:f1:b1:69:9f:2c:ce:8a:45:3b:0e:
6f:62:72:f0:00:be:f9:dc:b4:ac:93:ab:cd:d0:6f:
1a:88:7f:fc:e3:6d:b5:69:fc:2b:43:e2:4e:d3:5a:
f0:64:b6:43:41:13:e1:a4:17:02:09:17:a1:9d:23:
d0:f0:1f:a5:97:c5:85:1a:6a:a0:c4:c7:a3:80:6a:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AD:40:C5:BD:6B:EF:C2:43:D1:26:25:09:09:04:F6:3E:41:EC:0E
X509v3 Authority Key Identifier:
keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/4q1Axb1r78JD0SYlCQkE9j5B7A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.120.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e4:9c:0f:ba:9e:79:38:e3:e4:a5:c4:fc:f7:bf:30:78:ba:
e3:a0:51:77:af:72:d8:62:73:88:c9:bc:92:63:d1:e1:55:66:
d8:5a:ff:70:6b:72:5a:e2:ff:31:b7:43:c4:66:42:8e:d4:22:
31:02:86:8d:13:1e:8d:b3:1a:f5:29:37:3d:b2:f5:43:4c:63:
92:16:c3:6c:48:6c:55:e1:06:fe:4b:7d:e5:2b:6f:78:f9:bc:
40:cd:c5:a1:24:76:73:29:55:e3:5a:85:32:bc:24:11:55:87:
d2:6a:e1:f6:cf:d6:53:10:8f:95:d1:2a:ff:df:a4:27:25:87:
e0:b8:15:fd:95:8c:77:17:fb:8d:cb:72:78:62:25:74:e5:de:
38:b9:cc:c1:e8:08:15:76:37:e0:00:c7:39:65:65:e0:c6:4b:
5f:1f:06:e6:ce:a6:92:a2:7e:97:0c:ae:e7:61:35:d8:97:de:
20:03:19:5e:6f:3d:ab:fc:af:63:da:88:70:b9:60:5b:1d:70:
ce:5d:97:cb:bc:e1:cd:07:b7:fc:56:01:a3:54:a4:d1:2d:5d:
04:58:eb:77:2a:b3:32:39:a1:31:6a:7f:a8:ca:25:33:d2:8a:
0d:04:6d:ef:33:11:a6:68:68:b7:f6:1c:1e:47:f2:50:6a:ea:
86:47:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:16 2023 by rpki-client on console-fra.rpki-client.org