Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/ab3qWKC06MBiiCYOMjDTMfQ5IS4.roa
File: ab3qWKC06MBiiCYOMjDTMfQ5IS4.roa (raw, json)
Hash identifier: gBPyk0du5SI//0/bns97SDu9nV6eo2XidVkN7dl2aFI=
Subject key identifier: 69:BD:EA:58:A0:B4:E8:C0:62:88:26:0E:32:30:D3:31:F4:39:21:2E
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0184D2703A8F316BA557542C517C79B8D274
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/ab3qWKC06MBiiCYOMjDTMfQ5IS4.roa
Signing time: Fri 02 Dec 2022 10:44:41 +0000
ROA not before: Fri 02 Dec 2022 10:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:70:3a:8f:31:6b:a5:57:54:2c:51:7c:79:b8:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Dec 2 10:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69bdea58a0b4e8c06288260e3230d331f439212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:ae:1d:05:c2:34:d6:2b:db:4e:62:d4:34:
04:11:56:a7:8a:73:8f:68:c2:45:22:bf:f6:f7:35:
2e:87:83:fa:71:61:79:f9:44:79:b2:56:a8:65:00:
3c:0e:84:42:6f:5b:1e:05:31:c9:fc:91:1d:4c:d4:
08:cf:ff:b0:36:b3:9b:6e:32:1b:f2:f6:58:a3:ef:
4b:86:fd:7a:b3:a1:7f:40:4f:c3:75:b5:65:47:0d:
05:b0:6d:d5:0e:60:c5:ef:64:55:6f:da:83:71:1a:
94:e0:58:97:85:d0:ff:13:38:23:ea:3a:8c:dd:dd:
22:d6:64:2c:c2:77:fb:0d:89:f8:19:46:c6:b7:34:
64:56:c4:4f:a6:7e:c3:bf:d5:88:04:f7:6b:b4:f0:
b4:39:f9:f8:8e:70:b2:6e:1e:70:a3:3b:42:62:12:
a6:a4:8f:d2:a4:8a:ad:f8:d1:e7:a3:f4:c7:e6:d3:
44:5c:ff:a0:5f:fe:b8:47:3e:c9:84:50:56:b1:03:
2f:a9:51:bc:28:d4:69:5f:fd:7b:9b:c0:c4:5f:c8:
2b:6a:17:1b:86:b1:15:26:45:e9:da:39:4b:90:71:
05:7b:94:17:99:8f:c1:11:16:e8:b2:8b:d8:4a:11:
1c:85:23:7a:eb:72:ec:bf:96:61:86:87:b6:d3:ed:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BD:EA:58:A0:B4:E8:C0:62:88:26:0E:32:30:D3:31:F4:39:21:2E
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/ab3qWKC06MBiiCYOMjDTMfQ5IS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8c:dc:d3:83:4b:6c:41:bd:8b:2b:e7:1e:7d:91:02:a0:70:
80:75:b1:7d:a2:8d:12:eb:01:99:2b:96:92:8a:fb:9e:52:c6:
ba:8d:bf:67:01:e1:6a:40:79:af:77:09:45:60:01:7a:05:9c:
f6:1c:ba:12:8d:31:e5:4a:a9:79:7e:a2:72:70:00:55:8f:88:
cf:dd:f7:2f:1c:b3:f7:ef:39:32:2c:52:c4:76:6a:a9:f6:66:
e5:b5:87:cb:9b:b6:6b:7d:85:13:00:fd:7f:8e:70:7b:65:60:
76:50:26:4d:1f:64:f7:d5:1e:af:e6:84:42:ef:7b:12:8b:13:
e0:6e:e9:e9:2e:4b:9c:c0:09:aa:e7:17:20:8d:5e:6c:41:a6:
20:9d:35:7d:bb:32:c1:0e:1f:05:c1:d9:1d:e3:f5:f5:6d:4d:
e2:34:6c:43:fa:95:e1:d4:d4:54:55:08:97:9d:ad:f3:a8:85:
e7:ae:30:5a:49:cb:f5:62:e0:c0:07:ad:dd:20:b9:6b:ef:48:
7f:46:d7:79:61:fa:15:6a:b9:c1:81:ee:96:f3:76:f6:99:1b:
b6:22:e2:1a:57:7e:1e:9a:24:af:e3:7c:16:fd:9e:9e:89:bf:
23:79:7a:4b:a9:17:7c:91:59:a8:74:98:6d:ce:24:ef:4a:69:
42:08:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org