Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/7LQIWEfu00tyzV129t4KpLFGH8U.roa
File: 7LQIWEfu00tyzV129t4KpLFGH8U.roa (raw, json)
Hash identifier: 70baona2+0Ph+1wajPxk3XdVcluQ9EE0IDdaZNgD+DU=
Subject key identifier: EC:B4:08:58:47:EE:D3:4B:72:CD:5D:76:F6:DE:0A:A4:B1:46:1F:C5
Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial: 09181633
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/7LQIWEfu00tyzV129t4KpLFGH8U.roa
Signing time: Sat 01 Jan 2022 03:01:39 +0000
ROA not before: Sat 01 Jan 2022 03:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49685
IP address blocks: 193.34.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152573491 (0x9181633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Validity
Not Before: Jan 1 03:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecb4085847eed34b72cd5d76f6de0aa4b1461fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:82:b8:8c:70:10:7d:74:e3:6e:15:ac:49:
41:bf:37:3e:49:b9:46:35:22:8c:ac:d1:cb:ae:41:
24:46:6e:f2:ca:b5:b3:11:17:13:7d:15:cf:ef:79:
78:ad:69:a0:3d:1b:b0:ae:8b:3f:5d:36:85:a1:3a:
45:a3:63:7a:d3:b3:07:5e:5f:07:92:53:30:bf:70:
49:16:e2:52:0b:98:6f:ac:13:19:ef:4d:7e:79:05:
26:67:dc:9e:ba:a3:92:70:db:83:e6:82:90:6f:02:
63:20:f0:ff:81:d9:5e:5d:bc:8b:f6:7e:ce:69:04:
50:ca:57:d8:59:4d:e4:3f:73:51:24:f8:49:51:f3:
cd:69:44:9f:b3:db:58:d5:c6:2d:13:f6:47:49:21:
ca:74:62:28:ef:a9:a0:8b:41:d3:68:b2:17:d1:54:
f6:cb:b9:bd:d7:8c:b4:20:25:e3:0c:ec:86:0c:c1:
5f:f9:52:f1:83:49:aa:32:09:d2:8f:88:47:74:19:
9b:34:16:62:d3:1c:6e:9e:3f:40:2b:77:f2:6a:c7:
44:ff:06:0e:68:ae:1f:bc:73:52:0e:72:0f:a0:d8:
e8:a5:4b:de:f7:8f:26:30:7e:b5:04:85:13:66:30:
b7:06:40:d2:7c:9d:4e:7b:f0:c2:7f:a7:5c:33:89:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B4:08:58:47:EE:D3:4B:72:CD:5D:76:F6:DE:0A:A4:B1:46:1F:C5
X509v3 Authority Key Identifier:
keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/7LQIWEfu00tyzV129t4KpLFGH8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.4.0/22
Signature Algorithm: sha256WithRSAEncryption
62:b6:07:ba:89:e9:90:01:b3:0c:00:74:b6:cc:69:c5:7b:28:
53:15:5d:fc:5f:92:5c:1a:6d:10:36:40:24:b7:7a:6e:e8:40:
e5:5a:bb:27:ff:9d:c2:e4:9e:30:a8:34:70:e2:3e:dc:db:fd:
6a:2d:b6:b3:35:c0:1a:f9:4c:22:b0:30:6e:12:cc:4c:10:e5:
1a:22:2f:7d:2d:99:73:09:9e:aa:f5:bd:1a:f5:f4:65:22:ae:
88:20:4e:3a:07:b6:93:49:e5:b2:2e:e7:27:8b:1c:4c:53:66:
39:5a:6f:c0:d1:e8:e5:bf:a3:26:ba:a9:c9:e8:f2:1d:72:e2:
7a:86:c3:9a:5b:97:e9:20:6c:34:32:1c:d9:4c:00:90:b3:58:
de:fa:c3:75:65:01:6d:8b:96:f7:d9:45:6b:fe:db:9e:1a:3b:
13:ea:d1:52:19:e6:c9:9f:b9:a3:c4:fc:e9:09:80:9d:a4:df:
3f:74:31:07:63:dd:a0:66:38:b7:ab:b9:2d:43:75:43:b5:a4:
92:b3:26:19:30:c3:99:af:7c:ac:53:1b:64:0f:79:28:ea:29:
25:ea:01:62:00:0e:ea:18:0c:7c:83:37:0c:ea:f5:b9:5e:25:
b6:7e:d0:10:9a:4e:2d:2b:cc:0f:9c:3d:ac:ec:96:72:3c:b6:
98:aa:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:55 2024 by rpki-client on console-ams.rpki-client.org