Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/8ptLYrZrrcOVTorXyKVeLU7TWAU.roa
File: 8ptLYrZrrcOVTorXyKVeLU7TWAU.roa (raw, json)
Hash identifier: 51pk51NiukLZimVlFIhxbWFZdqNm0Wg/tIb9fly9f0E=
Subject key identifier: F2:9B:4B:62:B6:6B:AD:C3:95:4E:8A:D7:C8:A5:5E:2D:4E:D3:58:05
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 394295B2
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/8ptLYrZrrcOVTorXyKVeLU7TWAU.roa
Signing time: Sat 01 Jan 2022 08:05:32 +0000
ROA not before: Sat 01 Jan 2022 08:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39200
IP address blocks: 193.189.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960665010 (0x394295b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 1 08:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f29b4b62b66badc3954e8ad7c8a55e2d4ed35805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:84:e5:71:d6:2c:39:78:b1:93:18:ff:a5:
c1:e4:07:5d:6c:aa:10:f9:bc:a0:6a:e3:b8:ea:07:
ff:47:6f:e9:ba:51:77:ec:34:13:60:c5:71:c8:ec:
50:23:15:2e:81:34:c3:a2:5a:62:54:56:a7:b8:b0:
1a:8b:5c:55:2a:38:b0:e8:86:1f:96:74:71:24:b5:
3d:9f:4d:0d:22:e4:3e:0c:ad:22:96:a5:2d:bb:3e:
96:fc:87:12:9d:e8:f7:8f:33:3d:4c:23:33:30:10:
11:dc:43:31:89:af:47:01:25:74:21:6b:58:91:0e:
24:dc:2f:24:9c:a9:83:2a:76:21:ad:85:8d:0b:89:
64:f1:e5:29:2b:70:b8:89:f3:03:63:7f:b8:35:3b:
47:6c:2b:54:80:d2:fc:6e:46:a4:b6:63:87:2f:af:
b7:1c:ff:eb:7d:12:c7:2c:fd:d9:21:b4:0a:78:04:
b8:81:66:06:fc:9f:04:76:6e:48:87:7b:0b:97:a4:
ea:10:9e:96:8e:33:2f:72:9f:b3:94:27:c6:c5:02:
87:1b:8f:fb:e5:db:24:17:94:63:1c:aa:0b:a6:05:
1c:09:a7:f6:41:04:69:c3:c1:e4:85:77:09:20:c9:
de:a9:47:b2:c9:ac:e6:31:10:f5:14:9d:b4:a2:cd:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:4B:62:B6:6B:AD:C3:95:4E:8A:D7:C8:A5:5E:2D:4E:D3:58:05
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/8ptLYrZrrcOVTorXyKVeLU7TWAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.123.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8d:fc:79:b6:10:d8:84:0c:38:36:13:63:7e:d1:50:03:1c:
4a:a5:37:cb:9d:1d:bc:b3:ea:b0:e9:98:39:18:21:7b:93:db:
04:58:7e:1f:b0:d5:9a:17:ff:0b:a4:ef:45:b9:02:66:64:15:
b9:3b:fe:07:03:75:f8:e4:da:60:8d:ac:7c:19:18:d2:d1:f7:
2a:08:84:fe:fd:1f:19:5b:3c:f9:35:89:bf:d6:f3:e9:f2:42:
f0:9a:ad:b6:09:8c:1a:4d:24:7b:f3:aa:b0:72:bf:9c:d4:cc:
7c:36:49:f0:80:e1:0c:9f:bd:e0:06:70:2a:b1:68:53:d6:00:
eb:be:1a:86:b2:3d:e3:48:73:26:27:5f:a6:08:c7:08:4b:c9:
e6:6f:f7:a2:ea:13:09:cb:39:27:3b:65:be:b5:12:2e:53:c1:
73:6d:a5:4f:97:38:25:b3:1b:49:f6:d8:59:c7:c2:1b:30:bd:
8b:7b:ba:1e:f0:9d:a8:d3:4f:e3:bf:f0:26:14:6f:ba:6d:07:
20:58:39:8e:e5:f5:17:1b:9e:56:8d:ff:0b:b1:f8:02:9f:90:
3d:67:32:22:5d:b0:6e:4b:6a:71:84:b5:af:70:d6:40:9b:f8:
99:06:eb:31:b4:10:c7:5b:ec:d3:c2:89:bd:3a:07:4d:69:ab:
a6:28:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:22 2024 by rpki-client on console-fra.rpki-client.org