Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/c_HH449kHeKSSJs0pP1V79VZmew.roa
File: c_HH449kHeKSSJs0pP1V79VZmew.roa (raw, json)
Hash identifier: 2XVm9fL9f7Gs/iF5b1R86V08Jln0jwyVVFxinzTbwuk=
Subject key identifier: 73:F1:C7:E3:8F:64:1D:E2:92:48:9B:34:A4:FD:55:EF:D5:59:99:EC
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 03AD441B
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/c_HH449kHeKSSJs0pP1V79VZmew.roa
Signing time: Sat 01 Jan 2022 16:06:50 +0000
ROA not before: Sat 01 Jan 2022 16:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12353
IP address blocks: 193.109.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61686811 (0x3ad441b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Jan 1 16:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73f1c7e38f641de292489b34a4fd55efd55999ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:1c:33:c0:50:c7:88:b9:e6:d2:d2:fc:b8:
73:31:44:dd:91:99:ac:a6:a8:0e:aa:ff:ea:e5:f0:
e3:67:d3:6e:37:c8:02:b5:9b:a3:48:06:34:bd:77:
93:aa:05:ca:6e:b4:93:ca:8f:34:74:1d:ee:f3:d0:
d9:55:b1:0a:e6:51:55:c4:f4:fb:08:7f:75:f6:9c:
d4:36:43:7b:b9:98:40:c5:a3:fe:cb:dc:c2:d4:e7:
79:31:b4:65:bd:a1:72:0e:db:d2:a3:b8:eb:31:2f:
02:c8:cf:5a:6f:9e:49:3b:3b:20:29:9d:68:01:a1:
a6:77:a4:c9:f6:90:83:f6:76:ee:49:84:06:84:0a:
6e:a1:5d:5d:c9:49:9f:d2:71:2d:e0:56:26:40:db:
47:30:eb:5e:f3:e4:b3:6e:8f:b8:c2:85:55:0b:11:
4b:2a:88:49:5b:b8:6e:6f:5d:2b:81:03:29:0c:22:
07:1a:ab:e3:9f:ea:fc:43:ba:e0:40:2e:70:08:61:
1b:5a:cd:32:83:10:3c:0a:f4:eb:30:c9:ba:2a:e6:
17:97:31:67:c6:94:7b:1d:c2:80:a7:db:28:ad:d6:
7e:0f:e8:ec:6f:64:ad:89:7f:ee:8f:8e:65:54:b4:
f9:2c:79:58:2e:59:84:4c:4f:a0:1b:fe:6f:eb:a2:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:C7:E3:8F:64:1D:E2:92:48:9B:34:A4:FD:55:EF:D5:59:99:EC
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/c_HH449kHeKSSJs0pP1V79VZmew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.93.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6c:f3:00:6e:c3:ed:9c:6c:a9:4b:5c:25:62:06:37:6c:ff:
58:5d:b1:31:08:ad:0c:cf:69:01:a3:b0:ea:a9:ea:5f:4f:16:
ca:b7:52:d0:b7:3f:18:04:81:1a:e5:c4:ce:46:79:fc:56:e5:
16:99:a1:ad:86:38:49:21:8b:be:21:c5:80:70:b5:23:26:bc:
2c:dd:f8:9b:ae:5a:e6:8c:6c:57:ae:d9:6f:06:a2:27:df:11:
9a:37:49:bc:41:77:bb:ef:d9:9f:4a:bd:be:9d:83:cc:cc:68:
c3:34:45:72:ab:33:28:23:2c:c7:8c:48:4b:be:ab:ba:a8:42:
c0:fc:60:24:ef:8d:0c:ee:f7:7c:50:b3:75:f7:f2:04:4b:64:
f7:12:43:8c:96:3f:79:40:ef:3f:90:71:66:39:ef:40:ff:0f:
bf:d1:15:c4:43:52:8b:b2:b1:d5:5a:99:81:ef:3a:48:3c:cc:
cb:c1:59:3f:4f:79:a1:b2:19:51:fb:d6:c4:fc:ed:07:fc:6a:
71:da:00:52:e1:58:3a:f8:d4:75:87:c2:b4:7d:18:28:0c:c8:
7b:6e:06:ef:f4:0c:67:8f:7e:99:78:ad:13:f6:ed:66:b0:48:
af:4f:a3:4f:53:07:8c:8a:30:db:75:e7:7f:53:83:89:4f:f8:
cd:16:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:41 2024 by rpki-client on console-ams.rpki-client.org