Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/gDOkwEZARw41ttzkh13f5Od_EiE.roa
File: gDOkwEZARw41ttzkh13f5Od_EiE.roa (raw, json)
Hash identifier: g6hID641wJZWZkmTr5Gyp/jrSSMGnQGYH8U3x6AqjD0=
Subject key identifier: 80:33:A4:C0:46:40:47:0E:35:B6:DC:E4:87:5D:DF:E4:E7:7F:12:21
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 0B20E99F
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/gDOkwEZARw41ttzkh13f5Od_EiE.roa
Signing time: Sat 01 Jan 2022 05:56:37 +0000
ROA not before: Sat 01 Jan 2022 05:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52075
IP address blocks: 193.30.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186706335 (0xb20e99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Jan 1 05:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8033a4c04640470e35b6dce4875ddfe4e77f1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:3e:1c:84:c2:ed:7e:1e:c5:2d:a6:0e:e2:
30:f2:42:8c:0a:13:25:25:ea:14:18:3a:c1:9b:a9:
ac:13:96:0b:f7:00:78:c7:85:48:64:22:4d:9d:ca:
68:ce:27:fb:14:14:ef:43:c4:b9:bc:6d:4d:58:62:
3f:b4:0b:69:8b:af:e5:c5:9b:a1:5b:c7:c4:a3:d5:
4b:8c:5a:72:2f:90:90:c5:5e:dc:eb:25:6a:e2:2f:
5b:42:14:af:42:99:f9:9e:f0:f8:85:50:06:4f:06:
15:85:a3:ea:8d:66:fa:ed:8c:83:0b:54:69:04:5f:
ea:cd:21:24:d3:52:d5:9b:b2:61:a8:c0:14:6e:a3:
b4:4e:ec:e6:15:18:f8:48:53:55:e0:18:24:db:3b:
b0:65:c4:98:39:54:63:24:6a:c3:4c:de:76:d0:0a:
47:f1:8b:b8:3d:ef:0d:8f:27:53:2a:57:af:af:68:
ef:e0:2a:4c:3f:9f:11:80:01:4d:12:66:a0:66:1b:
5a:14:02:55:74:a2:b3:92:3a:f1:06:de:76:51:1e:
3a:d0:95:fa:eb:28:be:b0:87:47:cc:07:96:d4:a4:
02:02:c5:71:7b:d3:78:1f:44:d5:08:b4:5c:94:44:
fc:0b:dc:25:07:e2:09:7c:66:48:86:1d:16:76:20:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:33:A4:C0:46:40:47:0E:35:B6:DC:E4:87:5D:DF:E4:E7:7F:12:21
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/gDOkwEZARw41ttzkh13f5Od_EiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:30:ef:06:c3:33:ce:c0:34:73:0f:f5:5b:fd:75:da:ec:66:
02:92:02:5d:76:ed:b1:f9:f0:0f:7f:f1:c0:60:eb:76:5f:47:
22:5a:ee:16:26:17:e7:99:9b:72:db:da:00:57:23:80:ff:46:
87:a7:12:b7:6c:1a:e8:82:de:00:37:42:9f:71:45:b8:c1:35:
18:31:71:46:ae:31:00:c8:80:66:a2:4a:2b:80:ba:ac:cb:26:
44:17:32:e9:d3:73:52:d1:ff:62:47:33:db:95:65:f2:f0:20:
65:2f:4b:92:f2:af:67:96:f9:e1:65:95:56:df:ce:4c:3d:ab:
e9:11:3d:a1:5b:2a:a3:9d:34:f5:31:53:a9:cf:6e:36:ec:c0:
c1:f7:94:63:35:8e:62:07:ea:f6:8d:bb:7d:79:70:72:41:52:
67:bf:36:f8:79:8c:55:54:b0:a6:58:02:b5:62:e8:fd:c7:3a:
5c:58:a4:bf:cc:cb:d3:b2:0d:59:6e:18:b8:47:27:2c:ab:3a:
16:4d:19:dd:cd:58:4d:bd:c4:55:81:df:83:0c:3a:d5:d9:8e:
d3:0c:8e:8b:8f:6b:0a:4e:35:0b:68:0e:0e:04:12:2d:04:ed:
b8:a0:6a:26:8e:45:8f:8c:f5:9c:fd:6d:a7:fc:d8:43:c0:0e:
fe:4c:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:26 2024 by rpki-client on console-ams.rpki-client.org