Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7wokz27P4JLfwBxXxO6iqg7cNYo.roa
File: 7wokz27P4JLfwBxXxO6iqg7cNYo.roa (raw, json)
Hash identifier: /NUUaDre0e1ElyJ3lN3iebKHFFGP99L1nptrPjv3V5s=
Subject key identifier: EF:0A:24:CF:6E:CF:E0:92:DF:C0:1C:57:C4:EE:A2:AA:0E:DC:35:8A
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 09570174
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7wokz27P4JLfwBxXxO6iqg7cNYo.roa
Signing time: Fri 20 May 2022 08:54:29 +0000
ROA not before: Fri 20 May 2022 08:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 193.164.4.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156696948 (0x9570174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: May 20 08:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef0a24cf6ecfe092dfc01c57c4eea2aa0edc358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:62:a9:ca:c6:8b:b5:b3:2f:6f:47:eb:ee:
eb:09:66:fa:03:45:33:15:51:91:37:4c:66:e2:15:
d1:6a:5f:97:02:3d:4d:ad:59:fe:cc:92:13:6a:39:
87:66:5e:33:e6:b6:cf:ed:dd:12:01:e7:58:44:ca:
dd:38:5a:8e:f3:0f:8a:cf:26:e2:12:8e:9b:82:ac:
c1:99:c3:9e:50:88:87:de:6c:d0:fa:24:b2:66:c3:
30:97:35:e5:0b:de:95:1f:e7:e4:2d:ea:51:f5:38:
ba:8a:b4:9c:2a:c1:ed:a2:44:6c:e3:f6:f3:31:5b:
e2:01:14:28:f9:4a:9e:2c:82:e2:4d:16:aa:d4:eb:
6a:47:9e:ca:29:58:93:56:d2:c9:a2:6d:88:fc:6a:
33:de:96:d6:6e:9d:26:2a:1b:fe:e3:6a:f9:d5:0e:
3c:05:a2:fc:a0:c2:63:50:64:88:4a:39:0e:22:fd:
e2:4f:7e:47:ba:81:46:fa:60:3f:42:8e:cf:f9:8d:
03:d9:5d:0d:42:3a:b9:70:75:3a:3a:40:22:fa:a8:
55:de:33:90:1d:d9:92:31:b0:c7:eb:e7:f5:d3:00:
24:70:f9:45:9d:9f:ce:06:9d:13:98:1c:89:71:1c:
97:14:08:3a:45:19:11:73:2a:8f:a4:a5:eb:02:0e:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0A:24:CF:6E:CF:E0:92:DF:C0:1C:57:C4:EE:A2:AA:0E:DC:35:8A
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7wokz27P4JLfwBxXxO6iqg7cNYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.4.0/24
193.164.7.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0d:19:1b:7c:8e:49:af:b5:2b:ba:2f:ac:91:25:66:69:c1:
dd:ac:2c:a5:88:76:38:18:fd:28:15:0f:cd:ed:d8:6c:9a:aa:
fe:99:5f:03:b0:db:35:65:ec:5e:02:c0:9a:8d:52:92:02:34:
77:b0:4c:30:38:97:22:8a:1b:c0:60:04:a4:1b:28:35:a6:00:
8e:93:bc:e1:99:f6:69:a4:4d:7b:79:5f:75:d6:68:f9:d1:d7:
0d:91:99:d5:6e:dd:4b:69:67:b5:fa:d5:88:63:d0:fb:38:b9:
07:08:88:0d:b0:0c:ac:d9:be:7e:1e:88:26:be:d2:92:4e:dc:
21:9d:e8:95:03:d7:14:24:38:f6:fb:89:0f:46:50:ea:a9:ae:
4f:dc:d1:92:43:58:4f:52:ab:15:60:0d:c4:5c:de:85:5c:78:
6b:47:32:a6:0c:72:08:14:e5:56:8e:cb:e9:0f:e9:90:94:ec:
93:72:9e:d8:9e:48:e4:92:af:e2:55:a9:03:37:6c:b2:24:ed:
c9:75:55:7b:eb:48:52:05:dd:c1:dc:2f:49:c1:e9:6c:89:2d:
56:e9:f1:a5:88:e6:ca:12:2c:a6:86:8e:65:5f:c6:89:e3:b1:
25:d9:af:54:21:8c:4f:8b:a9:8e:1a:5e:0e:59:cf:e8:33:87:
42:db:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org