Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/rB403g_9Xm6U78rOtEK-b5E43MM.roa
File: rB403g_9Xm6U78rOtEK-b5E43MM.roa (raw, json)
Hash identifier: vFJwXFazIm372osz9oxZBKeZqMI2HKcN/lk4iCb1c/I=
Subject key identifier: AC:1E:34:DE:0F:FD:5E:6E:94:EF:CA:CE:B4:42:BE:6F:91:38:DC:C3
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 020E4F
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/rB403g_9Xm6U78rOtEK-b5E43MM.roa
Signing time: Thu 28 Apr 2022 08:28:20 +0000
ROA not before: Thu 28 Apr 2022 08:28:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.227.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134735 (0x20e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Apr 28 08:28:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac1e34de0ffd5e6e94efcaceb442be6f9138dcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:7e:bd:06:df:1f:7f:85:e8:c1:ca:79:f0:
9f:cd:ea:fd:22:66:34:f1:33:7f:d1:c0:ec:45:9f:
08:06:37:69:ae:c9:87:0f:be:51:d9:db:f9:c3:b2:
a7:cf:37:0f:3d:9e:f0:bd:c2:6e:34:49:c5:6f:d4:
b0:bd:fe:b6:d1:a9:ba:7f:75:a9:0f:a5:b5:f9:3d:
21:e4:2d:52:c1:ba:83:e1:5f:a1:26:6a:b2:3f:98:
7e:1c:7d:4e:e3:ce:46:52:74:4b:f5:9e:b0:08:9c:
e3:3e:4c:29:3d:b8:40:e0:d7:75:5e:c6:8d:8d:1f:
d2:ab:23:4f:c8:0c:65:a0:0c:f4:7f:9e:c1:d3:8e:
f3:82:a2:c0:6c:c0:75:48:4d:69:38:f9:d2:1c:de:
e9:83:a6:c3:73:60:a1:48:40:38:f1:31:86:6b:fa:
87:d5:90:4b:b4:ce:1a:4f:40:eb:92:53:54:80:99:
61:46:fd:e7:b3:1f:a0:50:b9:3f:f3:b8:1a:4f:2b:
5b:cf:5d:6a:e7:8a:35:80:47:f0:83:92:b5:93:00:
50:20:2c:d3:80:ed:ab:47:22:a2:b5:4f:b2:34:54:
be:f5:c4:f0:5a:2b:a8:c5:a0:29:8c:36:4a:75:33:
25:be:45:9b:6e:37:41:69:bc:6b:b3:d2:4d:2c:59:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1E:34:DE:0F:FD:5E:6E:94:EF:CA:CE:B4:42:BE:6F:91:38:DC:C3
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/rB403g_9Xm6U78rOtEK-b5E43MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.77.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1b:a3:9f:68:4e:71:4a:72:1a:a2:19:1e:74:63:b0:09:e2:
3a:57:e7:a7:47:f8:ba:7c:a3:20:11:df:99:91:ff:4d:ff:e5:
cf:3e:55:d4:82:24:22:0e:b2:21:df:6f:d9:2d:84:1f:b6:3e:
80:ac:33:fd:d5:45:3b:39:88:18:da:bb:f4:f8:06:b6:18:1d:
e7:7f:33:7f:8e:4a:a9:1d:b9:a8:a1:94:de:12:40:53:f7:18:
38:74:c1:a6:06:67:7b:a2:4a:f2:46:ba:15:06:bd:94:20:99:
1f:7b:99:7d:5a:97:e3:ff:1d:ff:84:96:41:ce:2d:0a:b5:a3:
5b:82:5b:c4:00:c6:72:5c:e5:39:3b:4b:dd:07:75:96:de:98:
04:57:a2:49:48:48:e8:20:a2:63:08:6c:4b:77:ef:d4:58:b7:
bd:ec:72:08:65:6e:96:bc:e6:ca:8c:53:17:fc:33:ee:37:70:
69:ff:35:c0:05:21:db:bb:4d:31:4a:62:61:07:86:44:91:20:
6d:50:a4:cc:1a:42:f3:bd:2a:01:61:bc:ca:d0:08:bb:5e:e9:
cd:09:22:90:f0:84:d9:10:ac:f5:59:5e:8b:84:fc:a6:3c:e2:
0b:27:ac:b2:da:66:65:97:ad:0f:7d:f2:a1:4c:da:a1:78:c3:
e3:6b:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org