Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/5nr3sImVKiP5ANkGcVGsqWiUnCk.roa
File: 5nr3sImVKiP5ANkGcVGsqWiUnCk.roa (raw, json)
Hash identifier: CYi68U5zdoRNfymB78EHY36kz41MC6PpYU6HTDbCqX4=
Subject key identifier: E6:7A:F7:B0:89:95:2A:23:F9:00:D9:06:71:51:AC:A9:68:94:9C:29
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 018281985D0B4C9E55E8DFB437A924A1DE69
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/5nr3sImVKiP5ANkGcVGsqWiUnCk.roa
Signing time: Tue 09 Aug 2022 07:53:42 +0000
ROA not before: Tue 09 Aug 2022 07:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212352
IP address blocks: 193.243.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:98:5d:0b:4c:9e:55:e8:df:b4:37:a9:24:a1:de:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Aug 9 07:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e67af7b089952a23f900d9067151aca968949c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:1c:b5:1a:5f:7b:21:3f:04:a3:20:0c:56:
7b:84:8a:a1:60:26:f5:21:2a:04:d6:d6:66:54:26:
41:30:3b:2f:9e:d1:60:d0:fd:69:af:24:31:f2:14:
6c:91:e0:e1:0b:1b:a7:1e:c0:a8:22:90:00:4c:40:
7b:77:b5:7e:89:2c:b2:e2:c3:33:42:ea:f3:10:16:
ae:9a:88:11:66:51:6f:69:88:6a:f2:0a:6c:56:ff:
17:2f:58:e7:8c:55:c4:d3:d0:db:a7:17:f9:90:9a:
9b:85:14:5d:f6:08:ab:ad:e5:97:84:fb:85:11:38:
7a:b0:57:c0:09:c8:92:94:3b:82:1c:9c:e7:59:5c:
1d:35:f8:66:ea:4e:48:9f:e6:6b:b0:d3:17:59:74:
b7:47:d9:50:e8:5b:c7:6e:e1:ee:7f:90:b3:1f:5b:
42:cd:e1:ad:52:d9:e9:c3:47:97:22:f7:f1:2d:c2:
9e:51:1b:eb:1c:39:0d:24:52:74:a3:44:21:fb:3e:
5d:01:1c:b1:b8:2c:06:c2:49:0d:d3:93:ba:9e:8c:
a5:0d:d2:d7:15:c6:24:5d:3d:7f:47:47:42:1b:11:
2b:26:12:a1:e7:ac:72:0a:82:5c:27:0c:55:c3:c0:
c7:48:cf:e3:d0:07:e4:45:be:e7:f2:27:bb:ac:54:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7A:F7:B0:89:95:2A:23:F9:00:D9:06:71:51:AC:A9:68:94:9C:29
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/5nr3sImVKiP5ANkGcVGsqWiUnCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:42:e1:19:b5:67:ca:3c:4a:d6:23:a1:b4:ae:70:30:b2:b8:
76:85:f0:d1:0c:f6:43:65:95:7e:78:b1:fd:bd:bf:87:47:58:
8b:16:39:af:82:00:d1:ab:ab:ae:f4:f0:47:7a:21:64:91:68:
98:00:05:fa:ad:1d:01:cf:71:a8:22:b8:65:e4:79:5d:49:40:
41:5d:4c:0c:96:4e:da:74:22:59:63:ae:3a:11:62:a1:52:5c:
99:75:99:aa:ba:1f:47:46:33:13:36:bb:b3:0c:89:a7:48:bb:
c0:af:60:1f:72:31:82:2d:01:5c:9a:3f:91:64:9c:4e:c9:0d:
de:3f:0d:10:be:78:e8:26:8b:34:86:6b:17:d1:3c:14:5b:3c:
bc:5a:2a:5d:d8:8b:99:af:93:de:b7:84:a8:05:02:ec:10:cb:
d1:c8:d3:d5:93:16:fc:40:78:53:42:ea:d2:1a:13:1a:61:ed:
38:10:0e:a9:b2:19:cb:ba:e8:6e:c9:b6:7d:e8:25:68:c9:c6:
16:e1:99:a5:74:ea:2a:52:f8:ea:67:a7:eb:e7:b9:30:68:d6:
bd:56:58:b0:88:9d:e4:4a:d6:4b:b7:9b:b1:68:c2:40:20:8a:
d1:52:e7:e6:16:a2:da:11:70:82:b6:3a:e8:21:5f:49:2f:7c:
81:f1:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:00 2024 by rpki-client on console-ams.rpki-client.org