Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/frBUOvkwFOZCcJyo219w4lcHTks.roa
File: frBUOvkwFOZCcJyo219w4lcHTks.roa (raw, json)
Hash identifier: a6vXBvPG/stnLOvK1tZl3YjM+g3dqSPxx0Zl8vgSDPA=
Subject key identifier: 7E:B0:54:3A:F9:30:14:E6:42:70:9C:A8:DB:5F:70:E2:57:07:4E:4B
Certificate issuer: /CN=b1de96d535d5954a16f67d89201ff8062a151ab5
Certificate serial: 01BC10
Authority key identifier: B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd6W1TXVlUoW9n2JIB_4BioVGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/frBUOvkwFOZCcJyo219w4lcHTks.roa
Signing time: Mon 21 Feb 2022 13:47:36 +0000
ROA not before: Mon 21 Feb 2022 13:47:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 193.9.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113680 (0x1bc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1de96d535d5954a16f67d89201ff8062a151ab5
Validity
Not Before: Feb 21 13:47:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eb0543af93014e642709ca8db5f70e257074e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:78:9c:f7:b5:90:bb:94:3f:2d:e4:b5:ff:
c8:d7:0f:43:cc:17:ec:20:4f:36:9f:6a:d1:bb:96:
70:8b:c8:f5:70:36:40:0d:33:13:b2:7e:84:1a:d8:
ce:46:b4:8d:f7:7e:27:57:34:17:b0:e6:c8:25:c6:
4c:1c:04:a9:40:81:2b:cd:c3:3d:8e:7f:e5:c7:02:
fd:12:1d:5d:39:8d:9b:89:42:24:dc:58:be:5e:16:
b9:74:6d:61:de:20:16:92:9e:20:09:b6:ea:8f:8f:
e7:a3:d2:77:30:f2:78:5c:c5:60:28:62:97:54:f3:
ba:81:f6:8b:2c:2d:5d:7f:23:b1:af:49:2f:f6:98:
1e:c3:3b:62:9c:45:38:f3:9d:87:49:54:82:ef:cf:
c9:33:2b:1c:ef:97:52:34:7b:83:42:24:b0:57:f4:
2b:f7:2f:fd:c4:a2:84:b1:4d:53:dd:3b:ee:5e:7f:
8b:e2:37:09:2b:af:8b:54:7e:74:a0:fe:e4:84:52:
6d:1c:70:90:ab:0b:75:1b:43:ac:26:a5:f1:f9:49:
ca:54:a6:47:cc:95:e1:66:17:6b:c1:dc:0d:8b:13:
bf:58:d6:9e:a5:6c:d0:3c:50:df:34:bf:1b:6f:8b:
75:3e:58:08:8e:6f:20:01:87:8f:f1:3a:94:58:95:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:54:3A:F9:30:14:E6:42:70:9C:A8:DB:5F:70:E2:57:07:4E:4B
X509v3 Authority Key Identifier:
keyid:B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd6W1TXVlUoW9n2JIB_4BioVGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/frBUOvkwFOZCcJyo219w4lcHTks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/sd6W1TXVlUoW9n2JIB_4BioVGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.49.0/24
Signature Algorithm: sha256WithRSAEncryption
57:25:6a:d3:4d:70:2c:25:ef:60:86:50:ca:d7:4f:1a:47:8e:
72:40:c4:1a:d0:34:d6:f5:2e:3c:be:c9:44:da:cf:e5:2d:e6:
fe:b1:51:ae:3c:f7:0e:30:4e:a8:7c:be:5f:8e:06:41:25:3a:
34:4a:18:17:73:f8:c0:ce:29:ad:19:86:15:6c:ec:e2:95:80:
e3:df:42:54:5a:4d:cb:32:c9:72:4d:ab:55:7b:1d:80:06:50:
b6:a7:85:23:15:cd:0f:91:c0:0e:dc:cb:83:31:23:0d:ed:e2:
49:19:d3:ec:14:d9:a3:18:51:5d:18:ff:b2:ac:27:0c:a0:8b:
80:04:0d:ee:55:1b:ee:ef:87:a2:be:35:20:d4:c9:41:8d:ff:
22:ae:a4:c3:a7:f5:f7:31:fb:ea:9e:51:1a:68:22:1b:32:fe:
60:25:4b:f2:67:3f:eb:71:27:58:4b:d0:27:a6:89:92:10:e7:
37:ee:71:c3:ce:f1:9c:17:e9:91:05:36:b7:8b:dd:5a:d3:e5:
55:99:19:be:b7:b5:2d:65:24:a6:e3:17:55:7b:7b:00:54:4f:
68:17:49:80:59:87:b1:09:13:6b:f0:72:3f:1b:48:a8:ab:ff:
7b:f7:84:fc:65:42:de:66:64:bf:58:6a:84:b6:d9:08:ef:b3:
f7:59:53:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:51 2023 by rpki-client on console-fra.rpki-client.org