Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/wsB8oqy_Q7pdN2mHEDnmEygkyJs.roa
File: wsB8oqy_Q7pdN2mHEDnmEygkyJs.roa (raw, json)
Hash identifier: DT/A1Dj2qNIEEZMpmeiPsU5BMmMh/LxzlI2NlgOF/ng=
Subject key identifier: C2:C0:7C:A2:AC:BF:43:BA:5D:37:69:87:10:39:E6:13:28:24:C8:9B
Certificate issuer: /CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Certificate serial: 8F83
Authority key identifier: DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/wsB8oqy_Q7pdN2mHEDnmEygkyJs.roa
Signing time: Tue 05 Apr 2022 09:32:37 +0000
ROA not before: Tue 05 Apr 2022 09:32:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197901
IP address blocks: 193.150.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36739 (0x8f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Validity
Not Before: Apr 5 09:32:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2c07ca2acbf43ba5d3769871039e6132824c89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:b5:d0:92:2c:33:7c:c8:96:f4:6d:f3:19:
ec:a4:e2:74:40:c1:42:34:39:15:bd:ec:0b:05:13:
c0:94:55:e7:d4:e1:0d:c4:f9:55:da:f0:e1:e8:1c:
f3:f4:b9:8c:d9:0c:85:f8:51:77:b1:e1:a7:7f:43:
ee:2e:c1:a5:39:2f:af:6a:c5:c1:a5:15:1f:db:2f:
64:d8:e8:f7:cf:15:e7:98:21:15:30:0c:65:19:14:
fe:88:50:d9:06:f8:cb:a5:59:fd:1c:64:f9:e5:92:
d6:27:55:50:10:47:09:8f:0a:dd:9b:1e:8c:4f:f2:
8e:e8:be:ff:59:f5:95:fd:64:ea:6c:ab:61:fa:08:
df:69:ef:c8:e3:0a:fb:b3:3d:61:e0:1a:af:df:d4:
a2:47:67:2e:ae:da:26:5b:ce:e4:9e:df:ef:a0:85:
3c:5f:aa:8c:17:95:9b:94:56:69:8f:ae:e4:cf:1d:
1a:4b:44:fe:4a:90:ef:26:4e:d6:28:7c:a1:9b:49:
98:60:18:09:da:23:22:c5:07:13:70:9f:37:75:8c:
b7:a9:a8:9d:ba:c0:39:e2:b4:6e:df:7e:cf:4d:c1:
83:94:82:f5:90:45:57:6f:59:06:48:3e:e4:ac:47:
c3:08:ef:fa:4a:a5:3e:3f:30:0a:22:62:4e:17:ef:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:7C:A2:AC:BF:43:BA:5D:37:69:87:10:39:E6:13:28:24:C8:9B
X509v3 Authority Key Identifier:
keyid:DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/wsB8oqy_Q7pdN2mHEDnmEygkyJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cb:c4:54:d3:7e:55:74:af:6a:3f:4d:7c:57:e8:52:31:fe:
15:cd:f6:01:35:d4:19:e2:a4:17:7d:95:fe:4d:eb:fd:df:c5:
55:a7:7b:48:66:71:fc:78:c5:4c:5f:fb:26:a2:ac:1c:2d:bc:
16:77:d0:0d:14:6e:09:17:42:e6:a3:43:cb:fc:bd:53:0c:35:
ee:f4:e6:40:e4:74:be:2f:38:36:9f:a0:9c:18:b9:22:cd:d8:
66:90:28:b0:3d:cb:b2:24:0e:cf:57:0b:06:43:ff:1c:3e:fb:
ad:e6:4e:9a:0e:13:d0:c8:2c:ba:c7:8e:42:79:fb:20:22:8c:
77:db:3a:9c:6a:4e:d2:0e:6d:d4:5e:92:3b:eb:8e:22:d2:17:
2d:82:4f:fe:21:d1:0a:40:04:19:8d:ff:43:95:c4:97:a9:30:
cf:09:62:86:5e:28:2c:f0:7b:ae:88:b9:2a:3f:56:be:24:86:
ea:76:81:dd:aa:07:50:5b:a6:71:27:da:94:d7:a7:35:82:e3:
db:2e:05:01:8a:ab:f9:1e:4f:e6:49:ff:97:4b:08:11:bb:74:
50:38:25:b2:e4:90:e5:29:03:b6:a0:dd:bb:ab:6b:73:7d:28:
de:d7:58:c4:54:a0:19:30:59:66:8f:0d:12:3a:58:d6:97:73:
31:b4:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:10 2023 by rpki-client on console-fra.rpki-client.org