Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/fFCWs6dFVGkk3Zl2UzTymQGilu8.roa
File: fFCWs6dFVGkk3Zl2UzTymQGilu8.roa (raw, json)
Hash identifier: HI7GDvUFBN6x1/oTvYWAOHqmLLlXpIxuzZm4eRXeSnQ=
Subject key identifier: 7C:50:96:B3:A7:45:54:69:24:DD:99:76:53:34:F2:99:01:A2:96:EF
Certificate issuer: /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial: 0A0EACE9
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/fFCWs6dFVGkk3Zl2UzTymQGilu8.roa
Signing time: Sat 01 Jan 2022 10:54:02 +0000
ROA not before: Sat 01 Jan 2022 10:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210196
IP address blocks: 193.148.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168733929 (0xa0eace9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Validity
Not Before: Jan 1 10:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c5096b3a745546924dd99765334f29901a296ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:f5:35:01:9c:7c:69:e0:90:5f:9f:3e:86:
0f:cf:a9:d8:59:05:16:65:36:6d:82:9f:69:73:cf:
c6:80:43:81:b1:0c:30:e4:5b:bf:44:f5:9f:dc:4d:
15:91:40:1a:12:f1:a5:03:2d:b4:cf:0a:52:2a:ed:
3a:84:77:b1:a0:5f:a7:35:05:df:08:79:39:b8:ad:
ec:4d:90:4f:08:dd:9b:86:2a:56:f0:f5:a4:b5:e9:
20:58:49:e2:e9:41:3c:27:6d:bf:4c:33:02:60:0b:
5c:b7:f0:fd:ad:1b:19:c9:a9:f1:0f:80:9a:09:c4:
f9:f8:6e:c2:5d:91:cd:a3:82:35:68:e7:29:90:59:
fd:64:fb:73:55:5b:ec:bf:a7:20:17:f9:9d:30:f1:
28:80:f6:e4:68:ab:e4:fb:ac:ca:49:84:34:75:c3:
bb:bd:be:b6:1f:52:fc:c2:04:bb:f0:b2:d2:cb:08:
9a:e2:ce:e1:76:8f:c7:bf:c1:c2:f9:19:c9:04:15:
99:18:62:c4:d9:85:d5:86:cb:05:90:4b:6b:a0:01:
1d:a8:59:f5:46:c7:95:37:38:19:35:f7:c6:9c:e2:
1d:be:dd:77:72:2d:24:6d:b8:9d:e8:70:5d:31:29:
08:30:24:cc:3b:cf:46:b5:55:db:57:65:e5:e8:a8:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:50:96:B3:A7:45:54:69:24:DD:99:76:53:34:F2:99:01:A2:96:EF
X509v3 Authority Key Identifier:
keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/fFCWs6dFVGkk3Zl2UzTymQGilu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:56:88:00:be:9c:e9:eb:ff:bd:d9:d6:f2:a6:6f:f3:46:98:
ed:18:94:14:c3:6f:cb:73:87:cf:e6:a0:07:49:e8:4c:a6:de:
49:87:1a:ce:aa:51:50:9e:be:6f:b9:c1:c6:58:9c:02:94:e7:
96:fd:3f:bb:bb:41:78:83:a7:16:63:12:8a:9a:84:81:ca:1c:
ca:70:15:2e:f3:9f:7f:27:d1:0d:4b:90:f9:00:f3:b9:4d:da:
cb:04:89:bc:2b:27:ef:c4:8c:ab:52:c1:77:ac:57:ed:c1:95:
65:a4:af:11:c1:ab:ae:a3:b2:ed:96:af:84:80:39:f7:8b:fe:
71:04:d9:13:d5:0e:8e:a0:89:f7:59:7f:09:16:40:24:62:b7:
04:fc:2e:be:21:09:50:fa:38:38:e4:3c:96:f3:d9:77:eb:93:
5a:56:c4:1c:1e:c0:7e:31:09:17:85:36:f1:a7:18:7a:46:ec:
c9:6d:90:4a:43:c6:7d:d7:ed:3a:1c:fe:d4:53:cc:da:ea:95:
5f:a9:d0:60:46:a9:f9:8b:19:60:c8:48:4b:9a:b9:04:73:e1:
79:6a:5d:5d:02:fe:a1:a5:a6:67:68:da:fe:41:28:31:a0:72:
b7:d3:09:1c:bd:ba:e7:4b:10:98:69:bd:88:6f:ed:5d:44:19:
93:b8:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:02 2025 by rpki-client