Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KfGqoOUGS7glAuzue01tGcxuAuo.roa
File: KfGqoOUGS7glAuzue01tGcxuAuo.roa (raw, json)
Hash identifier: jTd/Yp4uKZNp5J/6EIHBx5f2495g3lS8b09S6EUWtRo=
Subject key identifier: 29:F1:AA:A0:E5:06:4B:B8:25:02:EC:EE:7B:4D:6D:19:CC:6E:02:EA
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 031DDD18
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KfGqoOUGS7glAuzue01tGcxuAuo.roa
Signing time: Sat 01 Jan 2022 16:04:17 +0000
ROA not before: Sat 01 Jan 2022 16:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47346
IP address blocks: 193.168.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52288792 (0x31ddd18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29f1aaa0e5064bb82502ecee7b4d6d19cc6e02ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:16:3d:b2:8a:d2:9b:d5:52:84:40:df:aa:
70:33:59:e3:08:db:ba:4a:66:85:df:31:2d:b9:0f:
9e:75:66:19:ba:44:37:cd:8d:11:81:fe:0c:47:de:
c9:67:cc:74:d1:1c:c5:0e:bb:57:2e:89:60:cc:5f:
58:d2:56:74:b4:ba:27:13:67:9d:8a:09:d8:91:52:
70:21:fc:7a:97:78:82:4a:11:1c:04:4e:56:f8:df:
8a:18:ed:4e:fd:b0:75:21:dd:71:b6:5b:6b:b9:98:
c5:1b:e5:8e:b8:c5:fe:30:07:2d:b3:a7:53:57:df:
97:5b:9d:a1:af:42:ed:8e:00:07:25:dd:3a:3f:33:
36:b2:90:45:ef:65:1b:7e:2e:4c:f0:e6:26:78:bc:
d8:b0:6a:a2:0c:66:08:e7:db:af:52:3f:56:b3:d6:
86:91:68:61:4b:42:1b:07:ef:7f:35:df:b9:c1:c3:
5b:98:cb:2f:b9:e8:24:4d:40:a8:a8:c3:0a:fb:2a:
cb:ba:f6:f9:79:e6:fb:f3:5a:61:3f:4a:9b:ac:6f:
c5:d5:94:b5:b4:c3:f0:21:43:d9:2d:5b:33:9d:6d:
a7:27:43:d2:5b:ba:5a:be:bd:5e:f4:9c:a1:22:f6:
86:30:0e:5c:40:52:de:a5:c1:dc:03:09:64:fd:86:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F1:AA:A0:E5:06:4B:B8:25:02:EC:EE:7B:4D:6D:19:CC:6E:02:EA
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KfGqoOUGS7glAuzue01tGcxuAuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:43:33:a9:65:7b:2f:ec:3b:8e:93:88:45:bf:45:f4:49:42:
77:1e:8f:2f:fe:7a:36:60:98:bd:0b:20:9f:56:2a:49:cc:bb:
c1:fe:20:d1:45:c6:3e:a5:4a:0d:89:32:cb:99:2c:a6:3d:49:
e4:de:40:e1:ca:32:38:6d:3f:81:c6:87:30:cd:38:aa:9b:5d:
4b:1a:fc:ff:13:ea:d3:15:03:96:80:13:70:91:a9:c0:c7:6e:
36:f8:4d:11:8b:eb:c1:36:aa:25:73:bc:a4:89:5a:c7:5d:07:
47:80:d1:00:e8:64:3e:53:5c:db:d7:7e:b5:4c:94:c8:f5:86:
de:d4:31:72:57:5f:eb:f8:f1:15:74:d0:c8:40:2f:0f:2d:90:
86:3d:0a:e4:17:9c:d9:13:e7:f4:77:e3:76:9a:e3:ab:46:d3:
30:06:42:9f:15:b7:72:f4:de:77:7e:11:41:40:83:6f:2a:c6:
80:5e:84:18:49:82:76:4b:9f:90:73:3d:7d:5c:d6:b7:e4:f4:
30:7e:16:11:bb:3b:ff:51:fe:de:32:f4:18:6f:6d:ca:65:8c:
f2:ba:f5:88:7f:3f:31:89:a5:76:d0:6b:e6:d2:c3:ea:cf:0c:
62:c2:9f:96:53:12:2b:7e:32:73:33:41:6f:bd:86:7a:f9:24:
39:e9:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org