Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/iFKpnGxdSrt3qfL6FMEGkrg_z7Y.roa
File: iFKpnGxdSrt3qfL6FMEGkrg_z7Y.roa (raw, json)
Hash identifier: KIjWvSGn4ADYQQDvuD3w05AjPW0JGvKAfv5asiboPUA=
Subject key identifier: 88:52:A9:9C:6C:5D:4A:BB:77:A9:F2:FA:14:C1:06:92:B8:3F:CF:B6
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0740146B
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/iFKpnGxdSrt3qfL6FMEGkrg_z7Y.roa
Signing time: Sat 01 Jan 2022 03:57:57 +0000
ROA not before: Sat 01 Jan 2022 03:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48430
IP address blocks: 193.200.12.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121640043 (0x740146b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 03:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8852a99c6c5d4abb77a9f2fa14c10692b83fcfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4b:23:41:23:52:aa:6f:f9:74:de:4c:ea:ad:
49:28:4c:ea:31:41:5a:b8:da:c3:e4:f4:2a:32:69:
96:59:c7:fb:f5:82:bc:d0:b0:8a:85:86:8d:99:61:
4a:ec:29:3e:f0:e5:64:70:87:fb:a4:ac:b5:c3:31:
a8:04:48:86:36:cf:2c:13:cf:d6:30:f2:16:3e:44:
fd:7a:1f:94:ac:d2:7c:90:cc:4a:09:48:ed:1a:06:
c8:5e:cd:8d:3a:18:25:05:58:6d:7b:f0:ea:37:62:
4b:08:10:6e:53:c9:95:c1:6c:36:90:89:f5:dd:cd:
32:12:3e:df:74:7d:8e:dc:83:00:b6:6c:c3:27:8c:
39:e7:74:e3:3c:bc:e1:5b:a2:f5:f3:a6:76:3e:13:
97:00:47:ad:7e:c3:73:98:27:9b:0e:99:84:b9:84:
68:3a:55:84:57:ab:32:c3:00:66:e8:8c:36:24:46:
5f:6a:cb:16:cf:ed:11:a8:74:9b:8f:f7:15:f0:e2:
24:b4:73:0d:93:14:3e:b1:2e:69:ef:f0:f5:75:41:
00:9f:f1:a9:a5:86:33:b5:a6:9c:05:73:1d:ae:46:
ce:26:bc:ec:26:11:85:e5:ef:07:56:77:6c:1e:39:
1e:83:0b:7d:3f:71:32:41:ec:97:1b:29:f2:60:93:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:A9:9C:6C:5D:4A:BB:77:A9:F2:FA:14:C1:06:92:B8:3F:CF:B6
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/iFKpnGxdSrt3qfL6FMEGkrg_z7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.12.0/23
Signature Algorithm: sha256WithRSAEncryption
78:b6:2c:9a:aa:90:43:46:82:67:4a:cc:4e:d0:98:f2:3d:5a:
4d:0e:62:61:e3:17:a3:27:53:61:6b:77:be:c9:34:73:98:8b:
d2:07:be:df:38:6a:eb:f1:4c:99:1d:2a:90:5b:b9:26:6e:bd:
fe:e6:35:14:2b:f9:30:34:4f:45:b8:b2:01:99:77:32:96:92:
71:ac:0c:d1:d9:17:7e:7c:d7:28:5d:bd:af:b0:ff:64:ec:cc:
55:94:09:b8:3e:df:75:1f:d5:f3:27:68:df:29:38:fc:e7:0c:
64:33:52:ea:5f:66:f0:7f:34:3c:9a:87:90:5a:6b:ce:98:bf:
56:4f:65:02:c1:64:e2:8a:61:38:65:14:a6:5e:43:9b:25:67:
3d:13:56:a9:04:dc:1c:5c:7f:c2:04:cf:5c:72:e7:a4:1b:7d:
35:91:45:5b:7f:85:d6:01:b2:b5:03:33:90:40:16:8b:5c:2a:
de:54:a4:a6:45:c4:a1:e8:9c:eb:28:9b:a8:02:f4:c5:45:ce:
c7:75:a5:67:0d:d3:9b:30:c0:69:f0:8d:59:ee:de:20:80:fb:
5c:d5:ec:16:53:0a:08:03:df:38:28:8f:7a:a0:de:10:dc:ca:
35:2a:b0:0d:43:88:b3:98:e9:2d:a4:41:3b:7c:c9:b1:bb:11:
2e:b3:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org