Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/L_AtM25Ay42pRoInwTAhhPXI7hg.roa
File: L_AtM25Ay42pRoInwTAhhPXI7hg.roa (raw, json)
Hash identifier: eqbRU1QV8+4uXTbLyER4qZy0as0A6nEZyyARj0MPcYk=
Subject key identifier: 2F:F0:2D:33:6E:40:CB:8D:A9:46:82:27:C1:30:21:84:F5:C8:EE:18
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0185356293B05264EEF844BA4B19BDF826FF
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/L_AtM25Ay42pRoInwTAhhPXI7hg.roa
Signing time: Wed 21 Dec 2022 15:52:10 +0000
ROA not before: Wed 21 Dec 2022 15:52:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 193.178.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:35:62:93:b0:52:64:ee:f8:44:ba:4b:19:bd:f8:26:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Dec 21 15:52:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ff02d336e40cb8da9468227c1302184f5c8ee18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:9a:ff:ab:25:c3:6e:fe:90:2b:b0:9f:6a:
6f:11:e2:21:c6:04:32:76:a3:b3:a6:91:8b:1b:d9:
5e:59:16:27:c8:49:fa:a1:69:46:5a:93:84:fb:d4:
41:83:66:97:39:7b:25:83:b1:1e:57:1c:4c:27:3a:
c4:b7:66:16:81:40:73:2e:86:ab:69:0d:bd:86:3f:
b2:15:ec:67:0a:31:b9:bc:30:6e:6a:9b:b4:a4:c1:
b4:67:77:f8:91:da:e8:85:38:db:a6:59:e3:ce:fd:
c3:7e:34:ad:46:56:6b:4a:c1:73:ed:cf:8c:22:b3:
44:07:d1:6a:d5:16:da:06:8f:cd:e4:0d:1f:00:67:
a8:b1:df:49:64:7c:82:e8:1d:77:4b:66:24:be:f5:
e0:74:54:69:ba:7c:51:bd:65:c5:91:e3:f8:92:b8:
d8:e6:0b:b0:a1:04:6f:ef:7c:7d:9d:3a:87:6c:94:
6a:f8:f4:46:94:5e:40:5f:3e:28:b6:9a:87:1d:45:
5b:bc:ec:59:76:28:20:e8:47:01:45:af:da:75:fb:
d5:15:a0:aa:3a:05:1b:0f:eb:8f:95:40:ea:62:70:
5f:b9:7d:f7:17:4b:65:9a:49:70:59:e7:fa:79:21:
72:b0:d2:1f:e0:6a:56:92:85:20:ce:fc:4c:65:24:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:2D:33:6E:40:CB:8D:A9:46:82:27:C1:30:21:84:F5:C8:EE:18
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/L_AtM25Ay42pRoInwTAhhPXI7hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9d:7e:f2:90:03:21:b2:50:83:df:75:fa:1e:10:b9:47:79:
f6:14:a5:85:48:ef:9f:af:08:a3:e9:d2:0b:59:a7:b9:f2:49:
75:ce:0e:0b:40:ba:e6:36:8c:33:8f:98:99:37:27:b6:6c:2a:
58:e6:ff:01:4c:da:3d:f4:a7:55:eb:f9:46:29:8c:59:e5:fd:
ba:33:df:ec:b2:5d:1a:c7:6a:48:d9:bb:bc:4c:3e:a6:48:36:
c1:4a:9c:83:75:cc:aa:ea:dd:7b:71:e3:f4:45:ad:ff:3c:40:
f6:05:1e:8a:15:9b:29:bc:7e:86:14:7b:4a:6e:00:62:61:6a:
cd:56:1f:2d:86:e6:a1:21:8a:f5:a5:f7:92:c2:e2:1b:44:31:
41:e2:81:0b:f8:a2:dd:1d:47:a8:4f:5e:92:42:05:fc:5e:09:
ed:9a:bb:ce:18:52:b7:25:89:23:ea:7d:f7:4e:7b:d4:6d:62:
03:c4:08:97:57:34:03:bb:be:9b:ef:eb:f6:db:f3:67:3d:0f:
96:a3:3d:73:d2:c2:1a:fa:aa:6f:06:15:4a:1c:9f:42:2c:28:
09:ae:1b:5e:03:e1:19:0d:e0:74:60:64:86:a8:8a:3d:3a:40:
4c:59:6c:9b:23:2c:d0:00:ee:68:ac:92:14:01:58:f5:1a:2a:
d2:c7:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org