Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dyPob8vlk_u527D0ANw5xy2v7P4.roa
File: dyPob8vlk_u527D0ANw5xy2v7P4.roa (raw, json)
Hash identifier: d5CkiQJOTa+nniFZmLnjye0KSbioiHaLgMZWsy4eh5M=
Subject key identifier: 77:23:E8:6F:CB:E5:93:FB:B9:DB:B0:F4:00:DC:39:C7:2D:AF:EC:FE
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 07D4615F
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dyPob8vlk_u527D0ANw5xy2v7P4.roa
Signing time: Fri 11 Mar 2022 04:19:18 +0000
ROA not before: Fri 11 Mar 2022 04:19:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207590
IP address blocks: 193.25.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131359071 (0x7d4615f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Mar 11 04:19:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7723e86fcbe593fbb9dbb0f400dc39c72dafecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:82:79:9d:e2:07:93:cc:68:0d:f9:e7:f2:
6d:d6:09:04:1b:66:8e:62:eb:c8:d3:b5:ec:42:5b:
29:bd:37:bc:bc:22:02:69:f4:1f:9b:7a:f7:da:cd:
f4:7f:22:a8:13:ff:47:5e:db:14:81:da:85:4c:de:
72:09:e4:3f:5e:4f:09:d2:51:b9:07:c7:e2:55:9a:
01:31:18:4d:cb:08:4b:dd:7f:6f:3d:e4:ae:49:3b:
e5:8b:d4:a6:6c:bf:38:17:c0:55:d5:c1:3e:86:cd:
61:8d:62:26:48:58:d1:f4:ef:54:9e:bb:9c:41:48:
c9:a6:52:e8:c3:bd:6e:e7:94:f7:28:df:20:ec:9a:
96:10:34:6b:f5:7b:c8:db:aa:f0:b3:df:f7:44:14:
c2:bf:65:f2:b5:dc:e0:3c:f2:b8:7c:b1:30:ca:2f:
14:56:86:ec:9a:90:ac:93:03:5f:13:bd:72:4d:66:
63:04:79:df:0c:f8:cf:47:6b:7a:ac:12:ef:26:94:
b5:02:73:97:fa:6d:dc:66:d9:fc:7c:f5:23:48:c9:
69:a3:02:19:17:5f:ef:cf:a5:54:b1:58:ab:61:f5:
c9:74:25:df:d5:4c:73:eb:c9:f5:64:6a:a9:65:70:
95:c2:be:cf:57:5b:a9:43:f5:a1:4d:11:f1:d6:6a:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:23:E8:6F:CB:E5:93:FB:B9:DB:B0:F4:00:DC:39:C7:2D:AF:EC:FE
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/dyPob8vlk_u527D0ANw5xy2v7P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.252.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fc:a8:2b:1c:3c:67:56:2f:6d:f8:76:ab:93:44:b5:e0:f2:
8f:67:7c:11:f6:08:d0:f9:7b:0d:f2:d8:e8:4d:79:7b:71:75:
6a:04:0e:d1:19:5a:9b:51:4a:d5:a5:78:bb:38:e8:ac:2d:36:
fb:38:fa:f7:f2:38:a0:cf:06:48:c2:ed:7a:fd:38:18:c2:41:
de:da:72:66:91:e9:60:e4:ec:b9:d1:53:2e:5d:04:fe:32:a7:
d6:38:99:1d:83:53:06:14:23:90:94:99:41:1d:7d:8c:be:68:
d2:66:4c:15:91:d2:26:68:89:bb:5e:78:ea:9d:cf:5e:a6:3b:
f4:83:eb:6e:04:92:05:fc:70:87:71:29:80:bf:22:49:ac:03:
4c:38:91:6e:23:94:05:56:ac:b8:2a:1e:ca:b8:5b:5d:dc:b9:
4d:ce:52:a5:35:c5:2c:12:80:28:cb:01:c1:88:21:dc:cc:f5:
17:7d:f0:1c:f3:28:f8:69:f2:f8:38:43:51:98:8c:03:a1:b7:
44:6d:43:b0:c0:ab:d2:e1:9d:f0:73:d7:31:9b:70:8c:4f:da:
2f:63:2c:47:d0:6b:22:84:fa:c3:13:fa:1a:2c:73:40:f3:30:
7f:a0:2f:21:d2:45:99:0a:da:f2:ed:9d:40:09:81:5e:a4:ba:
47:9b:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:30 2023 by rpki-client on console-fra.rpki-client.org