Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/63lBwy2bza6MnzXwMjJnIV_NM5Y.roa
File: 63lBwy2bza6MnzXwMjJnIV_NM5Y.roa (raw, json)
Hash identifier: bR5xK3DN71qSCQcUfLYFqLR64RdfxtaK5oQGN7XcMJw=
Subject key identifier: EB:79:41:C3:2D:9B:CD:AE:8C:9F:35:F0:32:32:67:21:5F:CD:33:96
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A2F9980CDD20A2663D0C90727BC43DB
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/63lBwy2bza6MnzXwMjJnIV_NM5Y.roa
Signing time: Wed 20 Jul 2022 05:58:23 +0000
ROA not before: Wed 20 Jul 2022 05:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47477
IP address blocks: 193.83.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:2f:99:80:cd:d2:0a:26:63:d0:c9:07:27:bc:43:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 05:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb7941c32d9bcdae8c9f35f0323267215fcd3396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:88:2a:0d:54:55:bd:d3:6c:28:3a:af:29:
76:68:5e:7a:c1:a7:19:f0:6c:f7:b8:4f:1f:4d:87:
ae:fc:22:f3:05:cf:72:d9:11:c5:e4:a3:74:04:25:
fe:d7:70:c9:81:0f:7a:e6:7a:ed:fe:9c:f4:95:49:
f5:bf:55:1f:d9:22:fb:1b:b4:d8:05:62:bc:b4:0b:
c3:8a:dd:10:a6:28:27:9a:2b:22:a9:14:58:81:2d:
5e:7c:69:8e:8b:9a:fa:d0:88:18:5f:e0:ab:ae:40:
db:5c:7a:c0:96:70:14:23:53:6a:2d:30:32:16:75:
47:db:e6:7d:0a:f3:9e:5e:bc:b1:13:93:85:b4:15:
e1:33:74:cd:83:1f:4e:a0:84:ed:55:cb:a5:2a:37:
23:3a:c7:c8:07:1c:68:10:6f:d8:c5:24:c2:a8:12:
2b:1d:11:ea:c5:83:0b:99:7c:1e:be:db:b9:d1:26:
c5:74:06:9a:8c:00:9a:ed:33:7f:06:7c:d6:38:05:
a9:4b:de:41:f8:91:ef:69:10:56:82:3d:d0:ad:ca:
a3:2e:e7:ad:54:d9:e5:b6:c6:c0:34:c9:cb:d7:2b:
ea:0f:4c:29:6a:83:cc:01:39:c3:36:cc:39:14:e6:
85:b8:51:db:ef:50:65:0a:d5:cf:65:22:99:b3:85:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:41:C3:2D:9B:CD:AE:8C:9F:35:F0:32:32:67:21:5F:CD:33:96
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/63lBwy2bza6MnzXwMjJnIV_NM5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.83.204.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:67:b5:7a:29:2a:cd:b9:fa:e4:9f:87:2c:d1:bd:a0:23:8f:
e7:d7:fe:57:c2:f3:f0:30:38:55:d0:c7:14:92:73:af:f1:b9:
39:29:c3:94:12:fa:0d:a6:c8:a0:58:cf:60:b9:6a:3c:75:5b:
59:a3:d8:eb:6b:9e:8c:e9:9e:85:b8:26:81:d8:d9:7a:7e:9f:
b2:77:0f:20:2e:a9:39:1b:46:5a:e1:80:47:05:92:6f:22:1c:
6b:5c:ba:de:56:c6:bd:80:df:66:e5:0d:c9:f2:1f:1a:68:7a:
9e:72:dd:8f:b8:c3:02:4b:11:04:69:b5:22:20:fb:9b:28:32:
c4:ed:5c:13:07:2d:03:d3:4e:77:a2:17:dc:1d:11:f5:ae:c5:
59:b6:c5:c5:65:3f:b3:20:07:b2:3b:61:c5:0e:6f:5b:1c:19:
26:62:1f:14:e3:ac:53:66:d2:46:4e:7e:fb:64:00:32:17:fd:
57:08:8c:87:32:7a:89:0d:24:1a:51:e0:9d:04:af:4e:2f:52:
c0:b4:90:04:82:80:d1:aa:e2:3d:0b:aa:76:5e:03:2a:52:99:
47:5e:96:50:66:20:30:8c:e8:29:f4:b7:bd:9d:fa:01:c9:92:
3b:79:f4:69:ec:cf:5f:0e:5b:53:73:ed:25:ca:7c:52:c8:93:
31:06:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org