Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tRlhlCAqt1ehUKu4-n1Jhknq6uo.roa
File: tRlhlCAqt1ehUKu4-n1Jhknq6uo.roa (raw, json)
Hash identifier: 8WIXUo9RWP+5OIPKz2Sz11UbGQL7gZ6acFQ+fnMjp94=
Subject key identifier: B5:19:61:94:20:2A:B7:57:A1:50:AB:B8:FA:7D:49:86:49:EA:EA:EA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 365B3EE2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tRlhlCAqt1ehUKu4-n1Jhknq6uo.roa
Signing time: Sat 01 Jan 2022 13:57:18 +0000
ROA not before: Sat 01 Jan 2022 13:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30890
IP address blocks: 193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911949538 (0x365b3ee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5196194202ab757a150abb8fa7d498649eaeaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:bb:68:37:0e:51:5d:e9:f3:c4:f0:cc:84:
75:f8:23:22:87:04:72:3d:26:63:c3:51:07:67:86:
a4:d0:4a:49:72:5a:d1:e7:c8:b3:00:24:5f:f6:a1:
a7:5a:6f:4a:a6:95:eb:8c:06:71:37:c3:81:2a:9a:
e6:25:21:c4:a2:20:0f:9b:b8:22:c0:0b:1e:a6:37:
bd:fa:44:28:ff:16:27:6b:c7:f1:5c:0e:9e:76:c9:
5a:b4:a0:df:19:24:67:ce:48:a5:fa:95:47:a7:81:
36:2c:c6:7c:e8:45:91:d4:89:47:15:3e:cd:36:50:
7f:45:0a:45:4e:cf:78:2a:6e:00:76:3d:a9:30:7d:
5b:00:80:ba:4e:2f:4a:ca:94:ca:34:88:59:93:32:
34:a5:07:11:99:9c:2b:15:bd:fb:12:84:d8:df:f1:
ab:41:11:6e:a6:71:c5:36:f8:8b:be:20:db:39:b2:
f3:71:4f:a0:e0:9a:98:64:09:65:d3:70:47:de:29:
83:fb:63:06:4f:c2:31:bf:66:fc:db:d0:c0:05:d1:
b0:52:a3:1e:32:ff:59:ea:36:29:a8:6f:80:bd:b8:
73:02:1a:23:98:61:17:93:12:cf:9c:26:50:91:50:
a7:78:7a:db:5b:7d:14:0b:49:dc:61:39:90:9e:98:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:61:94:20:2A:B7:57:A1:50:AB:B8:FA:7D:49:86:49:EA:EA:EA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tRlhlCAqt1ehUKu4-n1Jhknq6uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.192.0/22
Signature Algorithm: sha256WithRSAEncryption
50:de:fc:b2:46:b8:a0:d5:91:a6:68:cb:be:4a:f4:9d:4a:2d:
1d:f7:56:fe:25:c2:72:61:89:d8:e4:93:9b:cf:4e:4d:ee:65:
9f:56:38:c4:51:e5:9b:14:21:8c:a8:a3:55:b5:4c:21:97:67:
38:ce:26:7a:ba:ac:a9:99:f8:d7:2b:3b:f2:be:8c:1d:d9:54:
d7:fd:54:c2:d0:79:29:48:02:54:2a:39:dd:1f:4c:2a:19:11:
9e:1d:84:c6:cc:d1:ff:5e:e0:7b:57:6c:0c:76:fa:a1:a9:c4:
1d:77:1d:fb:1c:e1:9c:d3:2f:a3:f2:19:40:41:cd:ea:a2:40:
69:35:95:70:1c:ef:e8:d6:15:d7:07:2c:b0:50:9c:32:af:e9:
fc:f0:20:b3:6e:d9:91:ab:82:b3:fa:00:83:8f:e0:80:8a:ba:
fa:d9:63:47:a3:fe:16:81:5d:7d:91:71:b1:3a:4c:e2:68:14:
3a:36:8e:5c:39:24:52:3e:a7:4e:4c:85:f6:b1:e6:47:25:13:
ec:d4:0c:bb:c3:7e:37:d0:c5:11:8a:96:03:f4:a5:10:9e:4a:
79:90:f7:0f:e4:c1:8c:b2:61:04:2d:21:ec:6d:95:ff:51:4a:
fc:bb:2f:26:bd:d9:8b:bb:1c:07:4d:4e:48:62:0e:e4:17:90:
8e:e6:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org