Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/6WYmukxqBoTNX0gYCqKkAfoLZ9c.roa
File: 6WYmukxqBoTNX0gYCqKkAfoLZ9c.roa (raw, json)
Hash identifier: 2nOH9NubF8FBmXssJ1hIlLt8FL5AMGbosyfwS9Vm8ug=
Subject key identifier: E9:66:26:BA:4C:6A:06:84:CD:5F:48:18:0A:A2:A4:01:FA:0B:67:D7
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 05032D
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/6WYmukxqBoTNX0gYCqKkAfoLZ9c.roa
Signing time: Fri 29 Apr 2022 07:03:08 +0000
ROA not before: Fri 29 Apr 2022 07:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.227.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328493 (0x5032d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Apr 29 07:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e96626ba4c6a0684cd5f48180aa2a401fa0b67d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:58:03:ce:ff:48:17:5b:9a:d0:d8:bf:41:
43:a5:42:ea:2f:26:c8:68:64:2f:92:eb:10:57:5d:
4c:5f:f5:40:70:3d:30:e3:bc:3a:f6:49:80:12:19:
e4:e8:43:21:af:53:cb:39:96:f5:41:3c:79:e2:e2:
f8:dd:b7:71:3b:04:c2:ed:12:1e:68:49:d8:56:80:
30:c1:ed:77:74:72:3e:02:e1:7c:8a:dd:12:f2:df:
c9:d1:8d:31:91:4c:f9:c5:8a:48:7c:be:0a:03:ce:
9e:35:ae:36:61:f9:91:6b:b4:27:33:48:21:74:a8:
0c:53:21:c3:10:52:f3:52:98:56:4d:7c:4d:41:de:
34:1e:17:25:d8:d3:12:d8:41:e8:2d:4e:b6:d2:d1:
d1:93:57:e6:47:c7:bb:73:eb:b6:12:1d:bb:bb:74:
8b:f9:61:7c:41:c9:91:bf:5b:f7:69:0a:df:7c:48:
bc:26:ca:22:4f:33:c3:bb:b6:98:60:89:42:b1:bb:
41:45:a3:2d:d6:9a:2e:0f:40:a1:72:28:3b:99:70:
b0:25:7f:13:aa:0b:0c:74:fb:c7:bd:b6:58:c4:1c:
46:ee:69:85:f6:e5:d0:bd:ee:16:a6:9b:1d:f5:9d:
45:74:ce:4b:df:bc:d2:fe:69:56:6a:4e:51:fa:63:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:66:26:BA:4C:6A:06:84:CD:5F:48:18:0A:A2:A4:01:FA:0B:67:D7
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/6WYmukxqBoTNX0gYCqKkAfoLZ9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4b:49:ca:cd:80:1b:06:17:69:fb:3b:1d:b5:53:da:5d:c6:
a6:74:6f:34:74:1a:fa:e0:04:fd:76:d8:ae:f7:e4:9d:65:f7:
83:c2:26:92:52:5c:b2:5c:61:ef:46:91:e6:a3:34:7b:1b:a6:
92:10:89:67:de:a1:07:9b:c0:9f:7d:48:cd:d1:e6:b5:fa:a3:
d0:d6:06:94:bc:45:ff:1c:a9:6d:76:06:32:27:db:ee:fb:b7:
c6:21:13:04:18:f7:02:2c:aa:61:37:4e:6b:50:e2:9b:df:e4:
05:92:bc:20:83:c6:5c:d4:56:4c:1d:2a:0b:e2:ec:7b:33:a7:
19:4e:c1:15:38:98:07:0c:3d:ce:df:c9:83:df:89:cd:62:e9:
a9:e5:8b:f2:37:2c:4e:ad:ee:ab:45:2a:6a:b0:37:af:3d:1c:
6a:55:da:34:a5:46:0a:91:7d:8c:4e:8b:69:a4:66:95:6f:a8:
0b:9f:6a:3c:8c:e8:5f:1c:d3:e5:42:5f:e8:f4:a9:45:a3:f3:
f7:c1:97:7a:32:9f:6f:e8:64:50:ec:57:27:e0:e8:8f:7e:78:
e9:30:13:e4:4e:d7:c3:d9:7f:ae:76:63:7e:f4:6d:61:4b:cd:
5a:39:7a:bc:f9:21:50:81:d1:a2:9a:a6:6b:a1:d9:f7:fe:d9:
14:fb:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:54 2023 by rpki-client on console-fra.rpki-client.org