Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uRu7p6NiucMqM52uxkIWK41qrKc.roa
File: uRu7p6NiucMqM52uxkIWK41qrKc.roa (raw, json)
Hash identifier: jXHZCorLQvi02IqS2niCOjLGl4bQap1AgLoY/U0wBpQ=
Subject key identifier: B9:1B:BB:A7:A3:62:B9:C3:2A:33:9D:AE:C6:42:16:2B:8D:6A:AC:A7
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01852B80997CB6631BC29B9828AA3DD1037D
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uRu7p6NiucMqM52uxkIWK41qrKc.roa
Signing time: Mon 19 Dec 2022 17:48:46 +0000
ROA not before: Mon 19 Dec 2022 17:48:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41952
IP address blocks: 193.32.192.0/24 maxlen: 24
193.32.192.0/22 maxlen: 22
193.32.194.0/24 maxlen: 24
193.32.193.0/24 maxlen: 24
193.32.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:80:99:7c:b6:63:1b:c2:9b:98:28:aa:3d:d1:03:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Dec 19 17:48:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b91bbba7a362b9c32a339daec642162b8d6aaca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:76:f6:43:e6:fe:fa:43:79:57:69:00:9d:
48:b6:3a:9d:31:37:91:7d:43:43:03:13:16:92:f8:
73:56:f3:74:f5:51:5e:ae:fb:2b:38:c8:c6:b1:30:
76:2f:e1:40:2c:d2:7e:a1:23:31:2d:f1:f0:8b:9e:
49:43:7e:d9:9a:f8:90:13:0a:18:70:56:ab:5e:9b:
28:4b:55:19:79:78:b4:d0:44:4e:24:c3:57:98:bb:
7e:52:4b:42:2c:f6:fb:99:e1:54:b1:57:a6:dd:08:
4e:6a:90:42:00:cd:f2:26:f1:16:53:80:cd:c2:cb:
d3:fd:f5:20:dc:cd:02:1c:26:ae:d4:18:e9:51:c5:
46:ad:ca:7f:ec:0e:1f:ef:54:85:f2:ec:81:60:78:
2b:30:3d:81:57:ea:57:b7:00:e8:73:6f:16:ad:49:
ba:4e:10:94:79:29:45:f2:2f:83:19:b6:e3:00:b9:
9d:50:76:40:5a:2c:02:4f:e2:b0:7e:54:54:4c:f6:
aa:bb:44:5e:53:11:64:11:71:b1:52:29:09:22:d0:
ef:82:d4:73:a3:11:c5:ca:4f:39:e1:72:76:c0:dc:
c2:de:2f:5d:07:48:4b:3c:8c:d4:17:3b:84:20:39:
3f:6b:1e:d9:3d:62:d2:d6:ce:b0:2d:11:cf:44:3d:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:BB:A7:A3:62:B9:C3:2A:33:9D:AE:C6:42:16:2B:8D:6A:AC:A7
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uRu7p6NiucMqM52uxkIWK41qrKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.192.0/22
Signature Algorithm: sha256WithRSAEncryption
89:d2:08:c9:e4:60:ad:88:65:60:46:db:da:e2:06:74:d3:7a:
c4:ec:2a:88:6d:e3:53:62:a5:e3:83:bd:a5:3a:28:89:97:bb:
7e:09:5b:cb:19:f4:b1:07:02:90:0c:d9:87:46:d3:f1:6e:d4:
03:bd:ea:1e:26:fe:0a:7c:42:2e:79:11:51:59:d8:48:e3:f1:
30:a7:ae:61:cd:fd:c3:db:3c:3e:72:f3:5c:5b:b7:78:89:49:
24:7e:b0:cd:bf:f2:f3:12:2d:2e:75:fb:a6:01:8f:9b:6a:28:
95:a1:38:c6:3b:f5:49:c5:53:e3:cc:c5:36:2d:e6:1c:2d:af:
37:82:bd:c2:b1:f1:59:18:cc:f1:d1:e0:66:98:b0:ff:9b:59:
b6:3a:3f:26:4c:67:2d:02:23:3f:13:8e:a4:07:28:2f:b3:41:
47:f5:ad:a8:c9:87:db:41:14:58:88:ad:ec:1d:4e:0d:9a:ef:
bd:f4:39:32:0d:41:21:ef:c1:45:cc:17:5e:d3:a0:ff:f6:f3:
2e:8e:4d:38:7f:69:85:90:e1:41:5a:ee:6d:f6:ae:3f:7d:9b:
16:07:86:6e:5e:ce:a4:d4:bc:57:43:5c:a3:45:97:9c:7c:72:
12:a2:8c:c8:bf:cc:4a:88:cf:75:75:8e:2a:0a:c4:58:7e:e2:
06:02:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org