Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/OBIW6c4k4Gp8KlfuBIDGg0M_6Zg.roa
File: OBIW6c4k4Gp8KlfuBIDGg0M_6Zg.roa (raw, json)
Hash identifier: 1DJRNHTTQOGPE63Hn1Is0SR+VWko4T2u4weFTXK1lZU=
Subject key identifier: 38:12:16:E9:CE:24:E0:6A:7C:2A:57:EE:04:80:C6:83:43:3F:E9:98
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 0BADD433
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/OBIW6c4k4Gp8KlfuBIDGg0M_6Zg.roa
Signing time: Sat 01 Jan 2022 14:02:34 +0000
ROA not before: Sat 01 Jan 2022 14:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137443
IP address blocks: 193.110.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195941427 (0xbadd433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jan 1 14:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=381216e9ce24e06a7c2a57ee0480c683433fe998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:1a:b9:b9:fa:f6:be:34:12:cc:6d:7a:02:
fb:bb:98:c7:e8:20:eb:9a:1d:0d:69:4d:3b:0e:75:
9d:61:39:b2:2b:73:6a:99:41:4b:a4:7a:d7:c0:d3:
4a:36:34:85:2d:b2:19:06:f5:29:89:52:c2:6c:7e:
2b:b4:cb:4b:53:6f:fe:66:dc:cd:3f:7f:6d:85:32:
f5:b8:eb:8d:f3:ff:59:69:73:17:1f:92:78:5f:75:
29:25:8a:4d:50:d7:dc:30:84:66:ab:79:25:df:ef:
ae:25:81:47:bc:42:6d:a8:68:2a:d1:11:de:32:89:
b4:ff:3a:6d:c6:c4:39:41:e2:d3:67:e0:37:6f:ee:
be:be:53:60:2b:5e:2d:40:6b:be:71:45:bb:b8:f0:
c3:9f:3d:85:9d:c6:b7:a3:26:3b:7b:ff:25:7c:7d:
72:bb:56:18:c7:93:df:9d:5a:a0:4f:52:d7:92:91:
08:2c:a9:33:63:5b:97:44:c3:45:95:24:be:6c:f6:
7a:18:85:80:8f:0d:74:05:ee:82:4e:93:04:a7:84:
14:57:00:4c:83:08:94:af:09:12:28:6d:44:2c:c1:
6d:1c:89:14:36:cd:7c:4b:c9:57:91:ec:51:94:eb:
ce:08:ff:df:0a:68:e2:c5:b9:0e:a7:e8:32:0b:4a:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:16:E9:CE:24:E0:6A:7C:2A:57:EE:04:80:C6:83:43:3F:E9:98
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/OBIW6c4k4Gp8KlfuBIDGg0M_6Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
80:52:a7:43:ae:18:f3:ff:d1:f2:3c:01:19:79:92:f8:89:c7:
6f:f4:f5:7d:10:e4:80:73:f4:dd:60:7c:ce:15:ef:3a:30:22:
78:69:e2:65:1e:e0:7d:06:91:73:7a:e5:c3:1b:ca:e4:0d:bb:
4c:3c:02:c2:b0:c3:23:19:26:f4:c6:aa:eb:4b:35:a4:60:c5:
c5:2a:38:b0:1b:2e:19:56:b9:26:89:14:59:eb:25:50:3b:98:
d1:da:b6:4c:36:bb:da:81:11:de:0c:f5:29:18:b9:85:b2:11:
71:3c:18:2b:e6:0b:be:43:03:b7:88:97:58:63:da:83:3f:c2:
7b:e2:db:8c:2b:e7:be:15:34:9f:a0:b7:4a:1f:f9:59:6d:11:
5b:13:54:2d:52:01:dc:6a:82:7f:21:24:fa:a5:c3:e9:c3:d4:
66:e3:07:0a:31:d9:62:cc:dd:c4:ff:35:8b:4a:bc:f6:0b:68:
a5:e3:ec:5f:f7:82:18:0e:45:9a:fa:dc:d9:c1:12:ab:04:25:
8f:7a:10:79:53:63:67:0f:e9:0d:7d:fb:88:ef:a9:eb:93:08:
61:70:09:d0:ba:16:51:b6:2e:dc:8b:a8:c2:5d:ef:a3:27:e3:
4e:ee:d9:5a:c9:c8:d6:ea:18:6d:5a:77:b8:57:f5:70:3c:e9:
a1:37:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:33 2024 by rpki-client on console-ams.rpki-client.org