Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/A6OkFSiprMZ9AMb183OFwH1OVoo.roa
File: A6OkFSiprMZ9AMb183OFwH1OVoo.roa (raw, json)
Hash identifier: dMsQpTUntmN5zCVz/dwGDXf/JqrFtS9mxu0mEdVSSW8=
Subject key identifier: 03:A3:A4:15:28:A9:AC:C6:7D:00:C6:F5:F3:73:85:C0:7D:4E:56:8A
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01833690E923E721AA84415C164DF78A1369
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/A6OkFSiprMZ9AMb183OFwH1OVoo.roa
Signing time: Tue 13 Sep 2022 11:16:49 +0000
ROA not before: Tue 13 Sep 2022 11:16:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44375
IP address blocks: 193.178.200.0/22 maxlen: 22
93.126.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:90:e9:23:e7:21:aa:84:41:5c:16:4d:f7:8a:13:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Sep 13 11:16:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03a3a41528a9acc67d00c6f5f37385c07d4e568a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:86:49:04:e1:0d:56:64:35:9e:55:78:d5:
d4:ac:4c:f5:e3:6d:85:4a:77:d8:c0:6b:65:8a:a9:
3e:04:b8:66:9e:60:48:c9:af:3d:2d:c2:38:2d:31:
91:4e:3e:03:18:2c:7e:07:52:9d:d1:81:a6:8a:35:
a0:6e:5f:45:ee:5d:21:82:e6:41:54:49:d8:24:39:
8a:bf:a5:d8:40:e3:e6:fd:af:2a:9b:61:09:f6:75:
bc:55:ca:02:0b:1b:af:d9:cd:a4:86:6d:f1:23:3a:
39:fe:81:3e:56:56:b1:f0:4d:76:05:f9:ab:22:0d:
9e:8b:16:69:2e:0b:22:8b:a7:03:27:73:9f:82:16:
17:3c:18:4a:41:f9:97:42:ce:5e:dd:85:a9:3b:91:
bc:0d:f3:f0:6c:a5:4d:b1:36:46:f5:f8:e6:a3:37:
1b:3c:1e:e7:fe:8e:9e:d8:3f:cb:aa:1a:5e:25:5c:
e2:4b:47:d0:cb:56:5e:6b:e9:70:63:82:b6:2e:03:
8c:2f:ba:31:5f:9f:22:2f:88:b9:e9:6c:75:b9:9a:
23:e3:8b:61:ea:04:3f:3f:bb:a7:22:d3:ce:eb:06:
47:4a:bc:09:c8:1d:42:56:80:c8:9e:96:84:73:7d:
bc:8c:64:ab:0e:f3:78:43:19:82:12:0f:00:d2:17:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:A4:15:28:A9:AC:C6:7D:00:C6:F5:F3:73:85:C0:7D:4E:56:8A
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/A6OkFSiprMZ9AMb183OFwH1OVoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.0.0/18
193.178.200.0/22
Signature Algorithm: sha256WithRSAEncryption
44:56:00:a4:bf:9c:f9:f8:17:fb:5a:03:08:e0:bd:1b:4c:fa:
ef:11:05:cc:31:c5:9e:a5:f4:9f:56:3e:3e:93:fe:47:b3:c2:
de:82:a9:84:da:40:70:7b:fa:c8:8b:3a:e4:18:11:bd:35:51:
6b:57:4f:52:a6:3f:f8:5b:19:cd:b4:58:3a:cf:6a:58:9b:6c:
6a:89:d5:ad:47:6f:8c:f3:85:0e:ef:8f:13:7a:f7:8b:20:03:
28:0e:6b:64:49:c0:c5:11:a8:31:30:92:38:4b:2a:4d:b4:79:
6f:16:98:cf:2d:79:e4:4d:ed:d4:cc:66:7b:dc:f5:5f:50:2d:
df:1a:19:d9:6c:4a:4f:2a:9b:a6:47:68:01:61:a3:6b:c7:7a:
22:d6:dd:5a:79:c6:31:67:63:db:56:59:75:b9:ce:08:26:a1:
e0:2a:58:66:d5:d3:b6:ae:9e:a8:20:b9:b7:07:8c:95:28:3c:
57:8c:4d:0a:de:07:72:9f:59:fb:a4:6d:4b:0d:d2:54:ad:f2:
cc:53:ac:73:91:19:5a:9e:d6:99:b2:39:ec:07:20:45:f9:a4:
9a:60:82:8b:20:ae:5f:e0:65:e5:83:3a:e8:d7:f5:54:b0:76:
be:cd:44:d7:81:f6:79:7d:b3:71:59:89:4c:4e:9a:34:9b:76:
0d:6a:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-fra.rpki-client.org