Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/79MVmtpMVzByVJhnOSGMCRZSQDg.roa
File: 79MVmtpMVzByVJhnOSGMCRZSQDg.roa (raw, json)
Hash identifier: 0EHJGKrQhiT/Svu+3s317fYlJBWgv7bnUxeWPDx/Zps=
Subject key identifier: EF:D3:15:9A:DA:4C:57:30:72:54:98:67:39:21:8C:09:16:52:40:38
Certificate issuer: /CN=10b2516e39ff63a9068cd87522cb77256fb1d4f7
Certificate serial: 9FA433
Authority key identifier: 10:B2:51:6E:39:FF:63:A9:06:8C:D8:75:22:CB:77:25:6F:B1:D4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/79MVmtpMVzByVJhnOSGMCRZSQDg.roa
Signing time: Sat 01 Jan 2022 05:04:00 +0000
ROA not before: Sat 01 Jan 2022 05:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10462259 (0x9fa433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b2516e39ff63a9068cd87522cb77256fb1d4f7
Validity
Not Before: Jan 1 05:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efd3159ada4c57307254986739218c0916524038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:67:41:04:01:25:54:91:89:64:f4:4e:e0:
c7:6d:f5:86:1e:4a:5e:25:2c:9e:fa:c6:47:b7:10:
ba:d4:00:06:a3:2c:e2:ca:7d:95:60:00:fc:9a:57:
d3:73:6b:cb:2f:90:22:d6:28:f4:da:37:fe:a0:04:
9a:d8:8d:6a:73:99:f4:f1:ae:2f:c7:06:9c:d7:d0:
3a:83:ae:44:51:67:6c:b4:a1:85:8b:0d:b0:ee:e2:
21:e5:23:84:53:6a:7b:9d:8c:64:03:11:a4:75:ec:
39:47:e4:86:96:6d:6a:05:20:56:e4:88:03:03:be:
45:7a:2d:d3:f1:e8:35:af:56:12:14:ef:6d:0c:52:
1a:b7:3e:fb:31:d9:bf:08:72:8b:eb:52:4b:bd:11:
7e:d1:72:c6:3d:c9:04:56:77:e2:b2:72:b5:90:29:
e5:b6:71:bc:08:95:2b:25:eb:21:2d:c3:b9:50:87:
f3:b2:19:72:ce:7d:a4:64:b0:de:c9:bd:5f:15:5d:
cd:c2:2d:c0:e9:8d:11:43:7f:e9:5a:3e:8a:e4:bf:
41:2a:ec:bd:ec:ac:57:08:63:bb:ea:78:a7:9e:9c:
9c:aa:43:1b:c5:38:b3:70:2c:29:aa:07:8d:50:1a:
ca:f0:41:81:3f:38:22:6e:31:d4:78:b0:78:20:99:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D3:15:9A:DA:4C:57:30:72:54:98:67:39:21:8C:09:16:52:40:38
X509v3 Authority Key Identifier:
keyid:10:B2:51:6E:39:FF:63:A9:06:8C:D8:75:22:CB:77:25:6F:B1:D4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/79MVmtpMVzByVJhnOSGMCRZSQDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:da:3d:09:cd:8d:23:a2:5e:b9:a3:4e:f3:6c:f2:e0:02:ed:
63:f1:d9:b2:b4:c8:b0:25:43:a0:60:ce:b7:ec:a1:18:bc:e9:
2b:89:cc:c3:c8:30:96:51:31:f0:55:9d:56:9a:0b:3f:f3:a7:
d6:ea:d5:a1:92:70:8c:9b:02:24:ac:a4:fc:37:6d:e9:ac:44:
f3:8d:ac:89:4c:0a:d5:8e:ec:59:d7:52:2c:0d:be:55:3c:62:
be:fb:59:34:5b:ea:e0:4f:f8:0f:68:10:fc:73:49:b6:00:61:
df:09:e7:96:ac:e3:27:4c:4d:f5:29:e6:42:33:82:6a:34:ac:
47:cb:97:b0:ba:e8:81:b2:2f:67:4c:fc:0b:ab:58:9b:47:4f:
4e:a9:31:71:4c:40:10:dd:55:38:47:24:a8:7c:c8:aa:bf:1d:
1a:32:ac:65:ca:09:85:b4:24:cc:f3:f5:1f:4f:4f:cd:b0:82:
1b:69:6b:de:43:c3:42:97:1f:de:c3:a0:2b:ed:8a:77:78:69:
28:7f:6c:fd:90:81:93:51:d6:b8:f5:ed:23:a3:74:6b:66:07:
52:45:ca:27:23:17:d3:59:8d:2b:67:dc:49:cd:7c:90:59:39:
f1:2f:80:68:25:36:88:f9:94:fd:b0:9a:22:21:d0:24:67:67:
dd:db:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:45 2023 by rpki-client on console-ams.rpki-client.org