Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/R1rOCMJpTMiNwUth0L2WSJqgwBA.roa
File: R1rOCMJpTMiNwUth0L2WSJqgwBA.roa (raw, json)
Hash identifier: a+kIMbHdKrwgfCrmAo6pTjX+wNtPZN5Zo84ALst+DSU=
Subject key identifier: 47:5A:CE:08:C2:69:4C:C8:8D:C1:4B:61:D0:BD:96:48:9A:A0:C0:10
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 02A9A523
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/R1rOCMJpTMiNwUth0L2WSJqgwBA.roa
Signing time: Fri 13 May 2022 11:14:40 +0000
ROA not before: Fri 13 May 2022 11:14:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56411
IP address blocks: 193.46.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44672291 (0x2a9a523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: May 13 11:14:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=475ace08c2694cc88dc14b61d0bd96489aa0c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:19:fc:6b:c5:09:76:f0:b5:37:3f:88:64:
38:64:1f:87:c1:61:32:53:3d:14:c9:b3:b1:4a:e7:
6d:c8:f7:9f:10:89:72:b2:a9:cc:40:1f:84:11:73:
5f:84:ce:59:61:22:e4:d2:63:b1:6f:e1:57:e4:d7:
3b:bd:9d:1a:48:c1:b1:5c:a7:be:d9:ff:7b:36:50:
6a:19:7c:bb:d8:88:dd:72:64:ce:0f:8a:12:f3:43:
c2:c5:f3:ec:f1:8e:db:d2:1e:dd:11:f3:b7:ad:2d:
08:b8:1e:4a:32:bc:1b:3f:d1:07:8b:9d:f3:9e:ef:
e1:3a:55:a6:21:07:b9:e9:6a:31:f6:de:b6:cb:b4:
34:e9:d7:ed:20:21:45:24:2e:eb:4d:e4:83:82:cc:
d2:de:ec:01:69:f8:02:b4:50:18:41:97:90:f5:76:
6d:93:f3:d9:4f:a3:0b:31:29:0e:94:b0:4d:f8:fc:
8d:cb:b9:7b:d7:58:c9:01:b5:45:b8:bc:8d:1c:64:
4a:c4:08:e8:d2:88:65:ca:e4:7d:7c:9e:66:57:4a:
47:b1:80:40:f0:a1:b1:b6:68:7e:b2:64:a3:e5:26:
a8:a4:36:f2:cd:b9:3f:6f:2c:bb:7d:96:8e:14:a2:
a8:d6:c1:1d:b7:18:79:3b:80:24:62:7d:ea:21:be:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:CE:08:C2:69:4C:C8:8D:C1:4B:61:D0:BD:96:48:9A:A0:C0:10
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/R1rOCMJpTMiNwUth0L2WSJqgwBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:84:20:a2:5a:6c:f7:d1:37:98:10:c8:f8:51:6e:64:92:86:
97:5a:ef:08:17:b0:64:da:48:f7:84:b2:48:48:e8:93:bf:97:
fa:a1:48:1c:f4:18:22:9e:59:d1:e2:c1:ed:e6:1b:01:cd:47:
fc:17:fa:63:d5:3b:94:a1:9a:9a:d0:0d:c0:9b:a4:b1:60:18:
23:50:1a:f7:d3:be:68:4f:44:83:22:87:b4:bd:a6:f7:67:22:
c6:26:56:69:f1:cc:07:30:7f:f4:57:45:98:05:25:96:b0:46:
96:d8:55:e4:6f:41:1e:4d:6b:0a:ce:2b:9b:19:53:25:98:74:
bd:56:9c:f2:8c:11:46:4c:44:61:33:1a:8c:d8:4c:3b:7f:a5:
20:3a:dc:2d:82:2f:5a:41:d2:f0:7f:a5:fa:4e:52:a3:c2:53:
32:f0:7a:af:36:dc:49:33:a8:a7:f4:2f:f5:a3:4c:3e:cf:d7:
c0:15:24:4c:3d:6d:97:1b:e5:29:09:1e:7d:92:32:0b:71:61:
81:c6:1b:80:ef:25:41:e3:cf:53:33:90:8d:43:b9:c4:b2:51:
62:5b:34:cd:9a:c2:81:af:5b:6d:61:87:3a:53:56:98:0f:ba:
38:52:d5:14:e4:71:c5:f2:0e:09:6b:ae:6b:19:f5:22:5e:b1:
72:75:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:50 2023 by rpki-client on console-fra.rpki-client.org