Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/cbVTF13UhbgmvpO-x2vUVxRpQew.roa
File: cbVTF13UhbgmvpO-x2vUVxRpQew.roa (raw, json)
Hash identifier: tHBP7Yy7thXmfhV4xyOIvmrDUkI7YMLRixM6QBLigHM=
Subject key identifier: 71:B5:53:17:5D:D4:85:B8:26:BE:93:BE:C7:6B:D4:57:14:69:41:EC
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 1768468B
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/cbVTF13UhbgmvpO-x2vUVxRpQew.roa
Signing time: Mon 03 Jan 2022 14:49:20 +0000
ROA not before: Mon 03 Jan 2022 14:49:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212830
IP address blocks: 193.57.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392709771 (0x1768468b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 3 14:49:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71b553175dd485b826be93bec76bd457146941ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:59:e9:b0:50:d1:42:d5:d5:b6:88:ed:d6:
fc:9c:ff:0a:70:49:07:67:17:98:82:a0:95:30:43:
83:1b:ac:cd:8e:1a:43:c0:51:1c:8b:c3:c6:75:ce:
36:52:51:80:6b:2c:a2:44:6a:fe:e5:e2:2a:db:fb:
b7:bc:1e:7d:81:dd:51:68:68:fd:a1:f5:37:af:f2:
95:f0:19:18:f7:e7:0f:a1:2e:e3:83:13:66:47:4e:
b5:3c:12:d7:6c:0b:b9:1b:66:c4:c3:8e:c0:3c:97:
e9:e4:c0:43:16:11:85:c9:61:31:2d:46:d8:23:5b:
87:46:65:16:c9:d2:75:84:0d:c8:a1:de:60:9f:c5:
84:40:87:b8:ba:e5:59:bf:cc:ef:12:f5:a8:b1:27:
01:aa:66:83:58:c5:99:52:24:d9:2c:1e:bd:aa:63:
fc:0a:27:2a:d4:8d:7a:c8:77:4d:be:48:6d:9b:03:
53:21:2a:9f:9a:dc:3f:ae:10:24:89:5a:03:bc:70:
21:2b:6a:b8:74:1d:53:a1:d1:ec:ae:86:a0:44:58:
09:d1:d4:94:e7:82:8c:de:11:b6:5f:b1:f4:6c:f0:
df:c3:71:f8:d0:b0:5c:27:73:16:b9:ca:70:16:b2:
2a:bc:35:66:fc:5b:3f:d0:89:69:31:12:fd:42:ee:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B5:53:17:5D:D4:85:B8:26:BE:93:BE:C7:6B:D4:57:14:69:41:EC
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/cbVTF13UhbgmvpO-x2vUVxRpQew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.146.0/23
Signature Algorithm: sha256WithRSAEncryption
77:b9:06:44:d4:35:d4:27:a5:42:a8:ea:7e:8c:9d:78:5c:ff:
9b:4d:cb:3c:00:0d:cb:e2:76:96:d4:71:ac:be:e4:19:5b:b1:
f3:54:b3:bf:99:60:4e:42:16:f2:9c:62:31:65:ed:08:e1:04:
2c:e1:75:f2:25:0b:b0:ad:60:9a:98:c1:4e:85:ea:ca:38:c3:
fd:03:40:a1:1b:80:75:e9:c0:7a:e9:a6:2c:cc:ac:36:1c:85:
a9:11:33:19:cd:da:c1:5d:d8:89:aa:d6:b2:0a:e9:36:2a:f7:
57:87:8f:cf:1f:9d:14:ec:4d:9a:ae:da:f1:9b:25:80:be:83:
4b:68:e0:2c:5c:9a:3e:50:3a:68:e5:ee:89:b2:bc:2c:d0:ac:
52:80:d0:20:12:7d:f4:cd:5c:55:8e:92:54:fc:ec:0a:c0:c5:
e2:1a:9e:ee:53:91:a1:23:dc:0b:9d:0a:75:7d:98:94:95:4f:
a2:8e:65:62:74:e5:ac:f5:c5:10:9f:ac:b7:54:c1:a3:90:0b:
03:4e:63:62:3a:a2:b7:4c:53:a6:47:d3:f0:ba:fa:91:b1:3d:
3f:cf:cb:13:76:bd:34:34:b8:b4:8d:3e:71:11:e9:91:1d:56:
2a:c8:c9:fe:3f:9e:ee:d5:95:40:3a:2d:19:e1:c8:a2:67:f3:
c0:d1:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org