Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1463db-c0fa-4449-aa1f-808d2a02edca/1/H9mE7v5MkZd8ATxoII9gv6DjFV4.roa
File: H9mE7v5MkZd8ATxoII9gv6DjFV4.roa (raw, json)
Hash identifier: kCgdg5sUKUFfInkqgweb2U3CaVWqNqnwahSTU7LhP1c=
Subject key identifier: 1F:D9:84:EE:FE:4C:91:97:7C:01:3C:68:20:8F:60:BF:A0:E3:15:5E
Certificate issuer: /CN=1aff4b20efa5be183d6835f3a7a89d51547e6df6
Certificate serial: 0181D4777994FE93E96BAE1F62AB2B693023
Authority key identifier: 1A:FF:4B:20:EF:A5:BE:18:3D:68:35:F3:A7:A8:9D:51:54:7E:6D:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gv9LIO-lvhg9aDXzp6idUVR-bfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1463db-c0fa-4449-aa1f-808d2a02edca/1/H9mE7v5MkZd8ATxoII9gv6DjFV4.roa
Signing time: Wed 06 Jul 2022 17:03:28 +0000
ROA not before: Wed 06 Jul 2022 17:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3326
IP address blocks: 193.151.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:77:79:94:fe:93:e9:6b:ae:1f:62:ab:2b:69:30:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aff4b20efa5be183d6835f3a7a89d51547e6df6
Validity
Not Before: Jul 6 17:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fd984eefe4c91977c013c68208f60bfa0e3155e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:cb:5b:15:df:78:19:d0:d9:28:cd:d2:a7:
17:3a:31:6c:17:cf:7f:8e:5b:3c:eb:87:50:e8:83:
76:80:9b:c8:33:c6:2c:03:5f:49:53:90:72:c7:16:
27:b5:81:5d:4e:21:fb:f2:8f:a4:2f:db:4a:1c:6b:
ca:9e:8b:32:82:17:09:63:65:09:84:9b:9b:a6:7c:
96:e6:ed:40:ab:af:e0:7e:9f:31:b4:44:91:58:75:
dc:5a:f2:e2:c9:a0:f3:a1:fc:1c:8c:01:51:8a:09:
9d:1b:7b:17:10:f3:4b:60:e6:eb:19:1a:f5:0a:9f:
58:c2:d9:f9:64:bf:14:1e:38:67:85:e4:88:b7:61:
9b:11:2e:a8:e1:41:81:c6:86:61:0e:69:80:0a:49:
5a:df:5b:19:8f:b0:2d:54:c7:8a:0c:19:c3:ce:b9:
a3:77:77:c9:01:f0:2d:1a:c1:70:5d:ac:26:13:db:
94:83:85:7d:81:af:c8:15:ea:e6:18:39:9b:f4:49:
df:4a:73:ea:90:90:f8:1b:a1:00:0a:16:43:a2:01:
91:c3:20:89:d7:48:da:56:bc:78:de:fa:61:68:13:
5f:cc:98:6d:81:7a:cf:02:db:5f:75:cf:44:9e:0c:
e3:1b:47:f0:f0:e9:b6:2b:b2:a3:38:af:c1:5d:c5:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D9:84:EE:FE:4C:91:97:7C:01:3C:68:20:8F:60:BF:A0:E3:15:5E
X509v3 Authority Key Identifier:
keyid:1A:FF:4B:20:EF:A5:BE:18:3D:68:35:F3:A7:A8:9D:51:54:7E:6D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gv9LIO-lvhg9aDXzp6idUVR-bfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1463db-c0fa-4449-aa1f-808d2a02edca/1/H9mE7v5MkZd8ATxoII9gv6DjFV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1463db-c0fa-4449-aa1f-808d2a02edca/1/Gv9LIO-lvhg9aDXzp6idUVR-bfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.244.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c2:29:77:45:30:69:de:97:a9:81:bb:69:20:4a:6e:77:67:
b9:7e:86:dd:42:94:0f:3a:7a:79:19:5f:18:51:33:de:8a:4a:
54:d1:ad:4a:5c:4c:a4:f0:81:f4:dd:5e:15:7d:42:de:f9:4b:
1e:9c:3d:6c:03:ce:a1:bf:00:c5:24:a6:30:a8:71:3e:94:36:
40:4c:7d:55:d6:41:f7:bc:dc:72:ef:ae:31:c7:80:06:ca:82:
8f:a0:52:3f:08:73:b6:c7:e3:ab:f7:af:23:c5:9e:56:4a:8e:
02:71:45:5f:d0:d0:d7:7f:e9:b7:1c:fb:9c:6d:a9:cf:63:b8:
7f:38:b5:9d:4a:9f:88:63:f1:39:1d:f7:c7:c0:d0:17:34:d0:
b4:34:b8:9f:d0:97:43:a0:65:73:73:f4:66:ed:5b:f2:a5:81:
8e:0e:99:42:e4:15:7c:7b:bf:df:b0:19:ec:e9:de:04:2e:3e:
9a:43:85:b4:57:a5:d5:01:1a:64:57:3c:54:09:eb:ed:f5:eb:
81:33:3f:6f:d8:97:60:62:d5:70:ae:a7:ab:f4:29:a1:36:f4:
70:b1:e2:c3:aa:38:e8:9d:f5:2f:fb:81:6f:5e:d0:d5:e3:e9:
15:73:3b:3a:ca:20:e6:10:b6:f9:4a:aa:74:c8:5b:29:b5:e8:
f0:4f:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:48 2023 by rpki-client on console-fra.rpki-client.org