Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/_a4-mUtkAvbGqGQFHeU_DnvWqLY.roa
File: _a4-mUtkAvbGqGQFHeU_DnvWqLY.roa (raw, json)
Hash identifier: ed+sOyMp+vZssTOcXxVKoYWxFxUG7tKJz4IMzsMxLBc=
Subject key identifier: FD:AE:3E:99:4B:64:02:F6:C6:A8:64:05:1D:E5:3F:0E:7B:D6:A8:B6
Certificate issuer: /CN=cd3c110dfd77f57757391c0faedeebe36086571d
Certificate serial: FE399B
Authority key identifier: CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/_a4-mUtkAvbGqGQFHeU_DnvWqLY.roa
Signing time: Wed 11 May 2022 08:10:39 +0000
ROA not before: Wed 11 May 2022 08:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43598
IP address blocks: 193.187.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16660891 (0xfe399b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3c110dfd77f57757391c0faedeebe36086571d
Validity
Not Before: May 11 08:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdae3e994b6402f6c6a864051de53f0e7bd6a8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:f6:9a:05:b8:5e:61:f6:d1:39:e4:c9:11:
74:db:85:2c:6e:34:f8:1f:53:e6:9b:07:ae:8f:f3:
54:1e:e8:22:a4:81:28:5a:2d:26:d3:79:85:a9:08:
48:3a:0e:95:71:52:be:33:11:1e:cb:4a:b9:c7:cc:
9c:ee:ac:3a:45:41:f0:58:a8:ba:f7:36:ab:03:70:
3f:dc:73:22:3c:bd:83:70:1e:1d:5f:22:ba:1d:ad:
03:aa:16:5e:a0:6f:ed:b6:e0:a6:d0:47:ed:ff:40:
b9:39:b5:06:58:24:90:f5:ed:4e:5a:39:f6:0a:b9:
41:44:32:a0:43:2a:c0:6c:ea:1a:f1:a7:50:41:d8:
8e:09:f3:39:66:84:54:d2:e8:32:24:5d:1a:35:32:
d7:c6:b6:79:d6:cf:d0:84:f8:43:3b:33:1c:f2:37:
fa:3e:fa:0a:e3:58:e1:2f:9c:a1:c8:d1:7d:6e:f5:
5a:7a:66:63:58:b3:51:e4:bd:ca:15:04:41:1b:50:
39:eb:6d:c7:3a:3f:95:bb:d7:fe:cd:b6:ed:49:c5:
9b:81:4c:b9:b3:bc:03:88:d2:d4:22:8f:86:71:8f:
5e:47:6f:a9:fe:36:68:48:db:f3:66:7c:94:3f:84:
61:34:23:bf:ac:13:0f:a9:12:c4:05:53:2b:55:c8:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AE:3E:99:4B:64:02:F6:C6:A8:64:05:1D:E5:3F:0E:7B:D6:A8:B6
X509v3 Authority Key Identifier:
keyid:CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/_a4-mUtkAvbGqGQFHeU_DnvWqLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:98:08:51:00:4c:08:3e:c6:d8:43:65:2c:90:81:9a:eb:2c:
6b:8a:6d:a8:41:ae:a0:aa:0a:41:93:5d:10:50:da:4d:57:f3:
d2:a9:47:c1:bf:c1:86:c4:5f:ec:8b:67:00:4b:d8:fa:91:17:
83:ce:fc:03:42:4b:9b:8a:6e:76:fe:c1:b8:9a:76:ff:77:f3:
fe:81:2f:ec:aa:fa:18:c3:2f:0b:55:63:40:64:30:21:74:01:
a9:e0:a5:b3:7a:8d:96:77:6a:67:6a:f6:a9:66:39:17:83:aa:
22:69:4a:6d:1d:39:22:45:c3:6c:a0:a6:2d:1f:c8:2b:dd:85:
0e:a1:56:3a:bd:a5:fd:a6:00:6d:d8:91:dd:c2:ee:ab:29:96:
be:d9:19:b6:06:7c:73:7b:37:d5:ef:50:98:ff:14:88:9e:4c:
00:7b:17:6d:24:09:cf:67:23:21:8b:20:48:e0:67:dd:0c:20:
ba:52:a1:4d:05:52:38:00:fa:59:67:ff:9a:fb:dd:e4:fc:c5:
20:a2:a7:c1:9c:a2:f6:4d:cd:eb:ca:1f:ef:04:86:39:71:6e:
bf:a0:db:fe:5d:89:2a:83:88:87:5a:8f:96:1e:a0:13:8f:2d:
69:b8:67:b5:04:af:d0:a7:6b:f2:95:f7:d1:cb:23:85:8c:70:
81:9e:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:17 2024 by rpki-client on console-ams.rpki-client.org