Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/I1Ow3Wye4tOqApuqrNxBDRohxJ4.roa
File: I1Ow3Wye4tOqApuqrNxBDRohxJ4.roa (raw, json)
Hash identifier: Vi68UVkV7fidsnsZARNHiauBCpBFFS2jnJH2eFcXBi8=
Subject key identifier: 23:53:B0:DD:6C:9E:E2:D3:AA:02:9B:AA:AC:DC:41:0D:1A:21:C4:9E
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 01820CE4616D57BA332A318A232FBA7C6EE4
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/I1Ow3Wye4tOqApuqrNxBDRohxJ4.roa
Signing time: Sun 17 Jul 2022 16:01:09 +0000
ROA not before: Sun 17 Jul 2022 16:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 193.57.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0c:e4:61:6d:57:ba:33:2a:31:8a:23:2f:ba:7c:6e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jul 17 16:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2353b0dd6c9ee2d3aa029baaacdc410d1a21c49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3e:d5:93:1a:5f:a6:ac:73:3c:17:8b:6f:e9:
74:d5:a0:ef:7a:de:c3:f4:71:5a:f0:4e:fb:58:9e:
8b:1e:17:82:0f:1c:b1:56:3c:a2:2b:fe:60:7f:ff:
33:d6:af:1a:0a:b7:d1:bb:08:bf:6f:5d:31:dc:44:
32:31:a0:22:6c:84:57:01:d7:1a:d0:92:f9:cb:6f:
9b:06:34:3e:35:7a:e7:da:ed:57:68:8b:c6:87:7b:
1c:21:6f:85:90:ff:0d:02:2b:ce:52:67:59:1a:1e:
09:ae:aa:cb:db:91:1c:bb:b7:13:18:28:c4:3f:4b:
19:82:40:ec:aa:2e:0b:eb:89:34:2d:63:74:25:f8:
fb:29:d8:3f:b6:db:05:c7:00:13:27:1c:bb:7b:6a:
df:24:92:23:1a:37:0b:a7:34:58:53:62:f0:20:02:
35:9e:1a:d1:53:b3:c6:a6:e8:84:b2:9c:4a:8f:6e:
0c:75:70:78:66:a6:97:d4:84:cd:4d:84:42:ab:78:
5c:bf:eb:56:ea:f0:3d:92:6a:44:6d:17:26:43:cb:
44:e7:5c:03:0c:70:e0:f8:2f:48:b1:4f:e9:38:9f:
6c:9c:9e:76:48:a3:05:8a:33:ac:8d:cb:75:93:ff:
ea:33:a4:e2:04:0c:8e:9f:d4:4f:91:02:37:99:73:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:B0:DD:6C:9E:E2:D3:AA:02:9B:AA:AC:DC:41:0D:1A:21:C4:9E
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/I1Ow3Wye4tOqApuqrNxBDRohxJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.165.0/24
Signature Algorithm: sha256WithRSAEncryption
63:61:7e:6f:f7:02:cc:6a:03:4d:b3:dd:0e:2f:37:35:38:71:
ef:95:10:77:ce:dd:1a:a1:08:77:15:8f:f2:00:b3:91:82:04:
82:a6:68:49:ca:3e:e7:54:a3:ca:8a:33:0c:f0:f9:09:23:ea:
7f:63:68:9a:ee:ce:f7:cd:09:1e:82:3f:d5:5d:07:b7:ba:42:
c1:54:67:d6:ec:b0:23:8a:67:90:fe:88:2a:7a:a5:a1:2c:c8:
b6:1b:0d:37:52:32:91:4c:0d:1f:04:d9:b2:7f:ce:a5:9a:a6:
86:f4:63:81:51:70:fe:7e:35:5f:bb:29:f0:85:b8:01:02:f8:
98:66:8b:52:4e:4a:53:50:27:67:1c:32:52:1e:47:2d:cb:d4:
5a:da:e4:15:a0:a6:bf:cf:28:80:bd:2a:55:4d:af:6f:5f:3e:
6c:8c:9b:b1:df:36:f2:e0:28:26:47:90:1a:f3:a1:8a:56:20:
cb:e2:30:d3:17:72:60:95:01:4a:ae:e2:cc:26:c8:88:0f:f9:
b6:dd:81:db:12:f2:7f:70:1c:85:df:2f:61:23:97:10:0b:0f:
e6:02:c5:ca:92:ce:bf:78:69:1f:4b:6b:20:80:81:f8:cb:4a:
13:b9:ad:2d:5c:d5:7f:82:39:de:ef:fa:45:35:9e:e5:39:b2:
58:c1:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org