Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/pOmaFDlQW-JtYP7eUEFoUnTNkfE.roa
File: pOmaFDlQW-JtYP7eUEFoUnTNkfE.roa (raw, json)
Hash identifier: hUKXH3LqbMCu4lhNWqmx2v1NpiAw1/hHUogSP4M4Nek=
Subject key identifier: A4:E9:9A:14:39:50:5B:E2:6D:60:FE:DE:50:41:68:52:74:CD:91:F1
Certificate issuer: /CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Certificate serial: 018220765A81E3402D7559AF33E102C47E41
Authority key identifier: E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/pOmaFDlQW-JtYP7eUEFoUnTNkfE.roa
Signing time: Thu 21 Jul 2022 11:13:23 +0000
ROA not before: Thu 21 Jul 2022 11:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 193.162.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:76:5a:81:e3:40:2d:75:59:af:33:e1:02:c4:7e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Validity
Not Before: Jul 21 11:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4e99a1439505be26d60fede5041685274cd91f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:86:5a:de:a8:85:23:f0:f5:fc:fd:e5:e7:
bb:61:cb:f7:73:44:0c:96:81:74:1c:f9:69:4c:c0:
79:8e:2d:15:d5:e3:55:99:db:25:e5:0a:f5:b0:50:
f5:e9:24:53:74:c5:43:d2:0c:09:e2:6f:1e:8f:25:
31:9b:75:2f:6f:7d:ba:31:9d:d9:3c:01:86:e5:1f:
c6:a7:1a:a4:6c:29:31:22:dd:2b:3f:9e:43:54:c2:
86:47:12:62:e0:b9:52:5b:9c:59:af:19:96:61:24:
78:c6:09:4e:7c:3b:c0:4f:c9:47:b6:5b:85:ac:9b:
fa:ca:64:61:a9:a9:04:22:c1:00:51:c5:6f:44:05:
d5:0d:46:0e:27:35:cc:03:2b:6c:b9:18:96:4a:d7:
fb:90:91:4f:c5:83:b6:a3:bb:9f:9b:75:45:5f:e2:
01:39:e4:32:74:ca:05:ae:c3:e0:85:23:42:54:24:
4f:07:e6:3e:32:d9:58:03:c4:4e:f7:13:98:a3:af:
6b:08:f5:3d:d0:65:6d:9a:2d:3b:4a:bc:14:84:e4:
5f:c3:92:17:f9:54:29:95:18:df:1e:fd:0a:08:02:
f3:de:eb:e1:46:07:0f:49:89:19:83:2c:c8:9d:01:
5e:f8:e1:69:2e:24:32:41:cf:1b:87:a4:5f:47:39:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:9A:14:39:50:5B:E2:6D:60:FE:DE:50:41:68:52:74:CD:91:F1
X509v3 Authority Key Identifier:
keyid:E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/pOmaFDlQW-JtYP7eUEFoUnTNkfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.132.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ce:2c:5e:97:35:70:14:05:4d:a4:6c:d8:17:95:fd:f1:89:
0f:0b:40:b4:af:66:db:9b:aa:6c:4e:26:c4:ee:e2:fc:c3:70:
a8:ed:75:87:69:df:e8:11:79:3c:21:72:d5:5b:af:03:f6:f2:
87:d5:a0:58:44:55:55:31:ca:35:5f:b0:3e:22:fc:1e:3a:18:
bb:13:a2:b1:17:3a:94:01:06:fd:ef:be:f9:96:85:d3:44:c5:
68:95:30:24:bf:cf:15:fc:2e:4e:68:f2:49:0a:15:42:25:8b:
60:cd:a5:6f:24:e3:6b:c0:47:87:4f:00:7f:90:1b:cc:40:78:
43:7c:61:5b:7d:d1:46:40:8f:9e:3e:4c:cd:d7:8b:ac:1f:42:
6a:ed:e6:ce:3a:9b:0b:02:40:be:b2:af:69:d5:8f:7b:be:1b:
97:fa:f3:8e:ec:79:67:d6:8c:ce:6c:22:70:90:ed:e0:8d:32:
2e:90:0b:44:b1:29:f7:7b:bf:f2:38:7a:19:37:3b:cc:72:4e:
17:2b:15:bc:43:61:78:cc:f9:26:a8:39:30:d8:33:bd:58:38:
17:60:c8:0f:98:58:de:4c:25:e2:e6:9f:85:04:63:d1:81:4e:
94:7a:05:da:88:77:a4:c7:95:be:e5:38:0c:cd:62:c8:bc:02:
0a:6d:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:08 2023 by rpki-client on console-ams.rpki-client.org