Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/oky2PPmJDiTMQzbFfd6xIem40J8.roa
File: oky2PPmJDiTMQzbFfd6xIem40J8.roa (raw, json)
Hash identifier: LpFZe08+9wxhdYVYUzOpyYMAW9yxPMYQ4bQZ8vbl/bs=
Subject key identifier: A2:4C:B6:3C:F9:89:0E:24:CC:43:36:C5:7D:DE:B1:21:E9:B8:D0:9F
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 078FC039
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/oky2PPmJDiTMQzbFfd6xIem40J8.roa
Signing time: Thu 02 Jun 2022 04:41:37 +0000
ROA not before: Thu 02 Jun 2022 04:41:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57635
IP address blocks: 193.203.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126861369 (0x78fc039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jun 2 04:41:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a24cb63cf9890e24cc4336c57ddeb121e9b8d09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:ac:88:0c:cb:90:7a:c8:9a:76:b5:15:7c:
2b:de:f0:0c:44:67:e7:5d:fc:fb:ce:5c:9b:d4:26:
9f:22:35:f3:03:56:77:94:86:78:0e:75:6c:a0:16:
c1:c6:b7:4d:7e:c8:b2:6d:c5:b2:e2:c1:d4:d5:02:
32:17:2b:cf:44:00:5d:e4:97:5c:34:eb:cc:0b:26:
1b:ab:58:ad:d9:36:18:b5:35:65:89:64:78:f8:f1:
27:da:f8:57:1f:63:69:ea:ec:39:45:20:0c:bc:44:
5f:b8:a4:1e:09:6d:8d:0e:cd:b2:19:56:e0:e7:5c:
ee:ce:67:21:57:00:27:f7:86:e0:d6:92:f2:21:91:
b4:ef:f6:6f:46:f3:f8:ef:5a:aa:1e:70:49:77:52:
a2:d3:5d:ee:a5:5a:a2:f8:6f:50:cf:0c:22:b9:cd:
b9:a1:46:93:1d:c2:25:72:bd:7e:23:4a:82:58:d2:
2c:5b:18:70:9c:f2:23:28:b9:41:90:5d:11:90:6d:
27:32:04:29:2d:c4:42:34:42:8e:d0:7c:ae:8c:62:
ec:4f:d1:9a:77:cd:70:5e:45:b4:fa:4c:14:1f:e9:
46:9d:b0:be:c0:18:15:07:30:65:e5:87:4d:09:3f:
b6:cc:ce:76:c0:b7:3b:0a:10:66:87:ff:0f:82:ea:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4C:B6:3C:F9:89:0E:24:CC:43:36:C5:7D:DE:B1:21:E9:B8:D0:9F
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/oky2PPmJDiTMQzbFfd6xIem40J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6c:d4:b3:bf:a8:3b:4f:a7:19:97:a2:01:c7:71:c4:51:56:
c4:24:00:48:97:dc:27:13:d9:7f:f5:1a:e0:f6:39:a4:2c:c7:
01:73:af:e3:1f:88:73:30:b0:a9:4c:37:f9:66:e3:1a:f4:05:
7e:f2:58:c9:38:7d:52:0d:6f:52:3b:05:2c:86:c0:c5:3a:52:
4f:cb:43:af:77:97:9b:24:13:df:6c:6b:e3:f1:e5:26:ea:d4:
79:d0:7d:6e:00:94:61:cc:ab:03:6a:f1:1c:8b:cc:9b:d7:fd:
7a:b3:0f:66:f3:65:e0:cc:80:45:3a:61:1a:09:7e:10:ff:88:
21:0b:0c:70:28:fe:9a:a1:3e:5b:cc:f1:2e:ba:c3:17:bd:51:
1b:46:a0:49:84:7a:9f:72:60:14:ad:26:54:f3:e1:78:20:db:
15:6f:f6:a6:fb:ae:b4:74:b3:8f:dc:ba:c0:ac:7d:95:8b:9b:
5d:a7:74:29:3b:17:ab:21:c0:1e:95:25:be:ab:cf:95:f6:44:
64:ce:30:fe:36:6f:50:e1:51:0c:39:b7:31:fa:69:4e:52:da:
dc:43:14:fb:e8:86:8d:06:6e:1b:dd:b5:a0:46:23:d8:34:ca:
04:85:fb:72:44:27:a4:ae:3f:29:cc:b4:77:11:39:0b:a3:01:
95:fc:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:37 2024 by rpki-client on console-fra.rpki-client.org