Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hfMWAPXBrFQlY3bSgePTmx9NxoU.roa
File: hfMWAPXBrFQlY3bSgePTmx9NxoU.roa (raw, json)
Hash identifier: cO4h+zSZWvUOyXi7BB7KecVwyC/n3Yy6m1vXdcuNM4c=
Subject key identifier: 85:F3:16:00:F5:C1:AC:54:25:63:76:D2:81:E3:D3:9B:1F:4D:C6:85
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018364EF9FCD05F7B572F47FED1380E6F529
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hfMWAPXBrFQlY3bSgePTmx9NxoU.roa
Signing time: Thu 22 Sep 2022 11:22:48 +0000
ROA not before: Thu 22 Sep 2022 11:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60068
IP address blocks: 193.19.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:ef:9f:cd:05:f7:b5:72:f4:7f:ed:13:80:e6:f5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 11:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85f31600f5c1ac54256376d281e3d39b1f4dc685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:55:a6:e2:b4:06:30:04:f3:38:75:91:01:
d9:f7:d0:85:de:b4:a8:96:5b:d2:8c:13:2a:b9:e3:
09:d7:62:b3:a5:6e:16:c2:ad:e2:50:2e:ce:de:10:
f9:b7:8f:04:a6:b8:2e:a8:80:69:6f:f9:22:3c:77:
b2:3b:8c:0f:ef:93:4d:77:37:70:34:32:20:6f:f3:
aa:de:7a:7d:af:44:38:0b:b4:2b:99:69:b7:95:3d:
94:31:94:eb:4c:cc:47:0c:85:ee:78:94:1c:c9:5a:
07:1b:4c:1d:8e:25:f7:a9:f0:32:80:45:b7:c2:93:
8f:23:3a:73:0d:58:61:54:8a:ce:a3:2f:4b:21:f8:
d7:27:a5:94:5a:38:56:b4:38:26:f9:34:99:f4:ea:
c6:f0:2d:ef:a0:05:73:15:ba:9d:b5:83:d4:47:c0:
65:36:2c:d5:07:0d:48:e5:4a:d2:6b:f9:a0:2b:2e:
03:c3:06:2d:6e:1e:a6:68:d0:4e:80:5f:7d:34:75:
81:9f:97:1c:ee:f5:3f:37:66:88:35:8c:53:6b:36:
e9:d4:bb:10:58:fa:d0:e5:df:31:40:43:f4:2b:2f:
bd:9b:b1:8e:e8:66:9e:78:2c:89:46:bd:fd:6f:24:
ea:24:53:7b:d6:8d:2c:3c:25:5c:a1:2a:8b:bc:60:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F3:16:00:F5:C1:AC:54:25:63:76:D2:81:E3:D3:9B:1F:4D:C6:85
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hfMWAPXBrFQlY3bSgePTmx9NxoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
Signature Algorithm: sha256WithRSAEncryption
48:92:db:e8:6f:9e:22:8b:5e:83:59:62:73:6b:8e:8a:c1:8d:
ba:1c:f3:7d:8a:8a:be:2b:94:5d:f9:11:7a:5c:26:30:51:38:
bd:b0:7c:2a:a9:89:d6:39:4b:8f:bb:bc:d5:e0:53:60:ef:4d:
2b:1a:99:de:24:07:7f:55:7a:45:38:c6:41:36:02:99:11:19:
66:fd:a9:89:e4:37:79:72:d5:d3:62:62:37:1f:e5:ef:9b:3b:
06:75:69:38:1d:0d:b0:76:4a:b1:02:c1:61:32:aa:1a:ab:a1:
18:8d:8f:b8:ab:3e:de:a4:2d:22:fd:88:a3:96:c3:23:d5:ce:
ba:92:dc:36:8e:26:3d:07:cd:c8:84:42:07:01:14:56:22:3b:
ba:76:a9:6d:ed:bd:35:7a:0b:1e:c7:ac:1b:bc:f3:44:7a:f8:
81:d9:0e:93:78:1d:1e:73:0f:99:db:9e:7f:ac:de:23:ea:25:
56:c4:f8:b3:1b:60:44:2b:ae:86:99:7c:bd:b6:73:a3:e3:b2:
16:fa:62:0a:9d:6f:d9:ad:54:1e:c3:7c:ea:34:4d:95:77:43:
a9:e9:5e:68:89:f6:6c:f4:84:23:d6:7a:02:0b:8f:2c:44:ec:
9e:71:28:81:0f:0b:33:aa:19:84:20:e9:2b:39:e7:4d:f2:34:
24:f0:42:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org