Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/y_1Q7VzfVCQF3iuEYZ3twIA7GqM.roa
File: y_1Q7VzfVCQF3iuEYZ3twIA7GqM.roa (raw, json)
Hash identifier: k9IvDb/C5ifgyM6HfLWNPgh0A3CVo9UaUn9inKa8wn4=
Subject key identifier: CB:FD:50:ED:5C:DF:54:24:05:DE:2B:84:61:9D:ED:C0:80:3B:1A:A3
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 453FA07B
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/y_1Q7VzfVCQF3iuEYZ3twIA7GqM.roa
Signing time: Mon 27 Jun 2022 13:11:05 +0000
ROA not before: Mon 27 Jun 2022 13:11:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60077
IP address blocks: 193.151.159.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161797755 (0x453fa07b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jun 27 13:11:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbfd50ed5cdf542405de2b84619dedc0803b1aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:8c:57:bc:4a:17:ee:9a:50:d6:41:82:71:
75:5d:d4:39:95:10:54:43:7f:5f:ce:2d:6d:45:4e:
3b:4b:d1:fa:a6:ca:95:ba:e6:a4:e4:b1:48:45:e3:
8e:4b:cb:d5:dd:54:fc:9f:e8:44:a4:1b:63:b9:a8:
12:a4:ba:ad:ce:41:32:2f:25:7d:90:42:02:c0:6f:
0b:73:78:a4:c5:c0:f0:84:90:5b:f6:bf:07:f7:8d:
39:ca:7a:f8:85:0c:7d:2a:47:3a:e6:70:42:2c:8a:
d0:fd:f0:07:67:fb:30:3f:23:be:1d:66:da:1a:29:
3b:d4:fe:77:7f:3a:95:53:e8:54:0e:1b:07:65:86:
c6:b4:27:59:65:16:b2:f3:88:af:82:d9:3a:e0:bb:
81:be:24:ac:99:3c:b7:44:b5:a1:e9:6e:dc:fe:71:
b3:f3:77:8c:4a:19:18:bd:49:7a:6d:d6:b9:00:a6:
23:e3:5a:2a:15:63:92:9e:2f:18:d1:ac:97:7a:86:
79:77:70:bc:5b:6b:05:11:0b:0d:8d:73:89:1b:ca:
f9:45:20:60:5a:6e:8f:0a:d0:8b:98:c1:91:93:2d:
50:ee:da:0f:3c:a9:c5:ac:3c:5b:c2:43:cc:4b:71:
67:42:51:65:f9:2f:fc:53:e9:07:df:2e:0a:37:7a:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FD:50:ED:5C:DF:54:24:05:DE:2B:84:61:9D:ED:C0:80:3B:1A:A3
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/y_1Q7VzfVCQF3iuEYZ3twIA7GqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:48:23:7a:a9:f6:b7:a0:ce:5a:8c:dd:bf:60:2e:0c:09:e3:
9e:55:fb:5f:df:2b:d4:4d:e5:78:a6:82:dd:7b:0f:a7:f5:ed:
57:90:93:eb:f2:7a:35:47:c2:53:44:10:cb:73:20:e7:8c:d3:
07:29:ca:1f:de:01:56:e8:c4:53:9a:48:f8:7e:ed:d7:fd:05:
9c:8e:73:18:81:da:f6:42:35:ff:ed:e0:13:bb:a8:77:28:11:
76:2c:9f:85:1c:8e:1b:a2:09:54:cf:65:19:61:4b:46:d6:62:
12:3a:26:50:d9:74:e7:27:ee:c1:a4:14:8b:84:30:02:11:a1:
7e:03:da:39:d6:4a:7b:7c:2b:12:e7:2a:1e:83:e3:ae:d1:ca:
64:b1:8c:16:5b:d3:8d:d5:f9:6d:61:c8:00:2a:57:22:86:f9:
b8:2d:9b:a7:01:25:be:9f:96:1d:12:35:79:cc:08:a1:1c:08:
9b:9b:6f:6f:44:34:21:e2:04:4e:12:7c:9f:29:b2:5e:8b:80:
2b:bd:c4:7a:59:5c:63:fd:84:69:bc:f4:a8:a1:38:a1:33:fe:
f5:0c:5c:69:18:1f:31:d7:bc:25:f5:e9:73:b8:6a:c8:cd:fa:
cc:19:a1:29:0c:0b:c8:8e:26:9e:3b:e6:ae:23:8b:f6:b6:55:
6f:b4:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:08 2024 by rpki-client on console-fra.rpki-client.org