Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/1RJVCHXFSJX7ae3jc2vdXnegjpA.roa
File: 1RJVCHXFSJX7ae3jc2vdXnegjpA.roa (raw, json)
Hash identifier: iCXUM+DWybSKiDJG+0ijoeI3ORAFWIiREqrcwiCt5tI=
Subject key identifier: D5:12:55:08:75:C5:48:95:FB:69:ED:E3:73:6B:DD:5E:77:A0:8E:90
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 0183CF8224F37397503747CD68AD45461DFD
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/1RJVCHXFSJX7ae3jc2vdXnegjpA.roa
Signing time: Thu 13 Oct 2022 04:02:36 +0000
ROA not before: Thu 13 Oct 2022 04:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9087
IP address blocks: 193.46.200.0/24 maxlen: 24
193.46.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cf:82:24:f3:73:97:50:37:47:cd:68:ad:45:46:1d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Oct 13 04:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d512550875c54895fb69ede3736bdd5e77a08e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:f4:4d:e8:22:39:e4:f8:6b:ea:d7:9b:cc:
6c:be:7b:ee:3e:3b:2b:1d:7f:bd:f6:23:a0:09:3b:
5d:6d:74:19:a6:83:bd:46:38:d7:93:91:7d:6c:12:
b1:e2:ba:54:98:4e:ee:63:3a:a3:5b:13:18:8a:03:
fe:6a:76:35:9e:d3:26:3b:69:0e:61:70:38:d9:61:
61:13:c1:db:05:b1:45:b5:7f:4d:cc:b8:09:49:ad:
63:ce:f9:1f:f7:2e:bd:8c:a0:c6:ca:be:ba:7d:66:
a1:28:e4:c1:7f:b6:45:da:5f:e0:49:57:15:4d:ad:
17:fa:14:bd:7e:cb:4f:61:ad:f0:d2:d3:a6:34:51:
6f:f6:cc:d7:b1:15:5f:05:73:4a:cd:3a:db:db:64:
35:43:d5:65:0c:5f:e6:9d:b8:db:6b:7c:e8:04:13:
a5:e4:ac:4d:8f:1f:4e:97:00:b7:d6:f3:0a:fe:1b:
2d:05:95:ee:d6:2d:1b:91:64:3f:b0:36:be:31:b8:
a8:8a:ea:68:1c:75:51:fe:32:03:61:ce:83:fb:94:
b4:5d:9a:fb:d1:b2:c0:63:8c:60:c7:21:64:7f:81:
a7:98:53:53:8e:1d:51:23:d5:c7:63:69:a6:a0:cd:
4d:40:68:cb:b0:63:e5:2a:a4:48:f6:f6:74:67:df:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:55:08:75:C5:48:95:FB:69:ED:E3:73:6B:DD:5E:77:A0:8E:90
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/1RJVCHXFSJX7ae3jc2vdXnegjpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.0.0/24
193.46.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:99:cc:0c:de:ef:3b:09:c8:3e:be:65:7d:79:4a:d2:6a:be:
6d:5f:5b:12:98:b0:e8:5a:64:71:55:04:0e:23:8e:a0:9d:df:
12:9d:8e:fd:67:30:08:68:24:05:47:be:c2:63:cb:80:05:fb:
38:ec:ce:a1:8e:1f:15:74:b1:33:f3:2f:61:42:d9:08:04:3b:
fe:30:b9:7a:16:53:bf:6a:06:7d:63:14:f4:5c:f1:7b:13:b3:
47:f7:9f:81:30:c2:53:4e:f5:82:3a:d3:17:72:1b:36:44:4a:
4a:29:d4:43:30:4f:6e:5a:46:51:2a:53:f1:2a:41:92:4c:88:
38:36:dc:69:b6:ac:b2:6e:bd:d5:31:2b:ba:3c:b2:2d:4d:f9:
31:6e:df:c8:46:13:bc:46:0d:f2:62:6c:3e:4e:e6:0c:ea:6d:
5d:8a:ed:4c:99:19:83:76:54:58:1e:d6:29:7e:90:11:b9:00:
69:96:fb:ea:b2:d6:91:6b:86:b1:85:7b:69:69:ba:39:0e:7d:
ea:00:9a:c4:28:48:39:a6:a9:27:46:f9:ec:d9:e5:ff:47:0b:
61:d8:53:1c:b6:a9:14:6e:e0:67:11:8a:81:31:14:64:ff:cd:
c4:19:63:c4:b7:36:a1:8b:1a:d7:10:89:8f:4b:a4:92:06:7a:
29:75:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:00 2024 by rpki-client on console-fra.rpki-client.org