Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lOqgn0Ej8EgNZYflfGtPcsM0FYY.roa
File: lOqgn0Ej8EgNZYflfGtPcsM0FYY.roa (raw, json)
Hash identifier: ZFq8WHIJiDwt4cIvAto2hucZgkrcaP8fdIKWJbejbes=
Subject key identifier: 94:EA:A0:9F:41:23:F0:48:0D:65:87:E5:7C:6B:4F:72:C3:34:15:86
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0315684F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lOqgn0Ej8EgNZYflfGtPcsM0FYY.roa
Signing time: Sat 01 Jan 2022 16:04:13 +0000
ROA not before: Sat 01 Jan 2022 16:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 193.34.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51734607 (0x315684f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94eaa09f4123f0480d6587e57c6b4f72c3341586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:19:c5:fb:5d:42:14:af:06:1c:ef:fb:36:
98:5b:2f:f2:8e:76:60:0c:cc:0a:4b:9e:aa:77:3c:
bf:cd:f4:17:8a:ca:97:bd:34:73:a3:33:ad:95:23:
b9:22:75:46:63:44:0e:2c:bc:30:c6:15:a3:bd:ae:
10:d2:81:36:db:4f:ae:c6:44:38:c0:47:a2:b4:19:
06:56:b6:e8:b2:ea:f3:0f:fe:20:3b:ba:4c:ef:49:
76:b8:a6:6a:e3:62:45:fc:98:a8:de:19:c8:d8:fe:
dd:6d:22:58:04:4a:49:46:6b:87:74:16:1b:c9:ee:
76:c2:ce:9d:00:9d:2f:65:57:fa:2b:d4:a2:84:ba:
f3:8c:dc:4c:e8:2e:7c:cb:bb:20:9c:bd:2d:cc:73:
2b:8d:00:c4:20:39:3d:58:5e:dd:17:06:02:1c:a7:
56:c3:75:78:85:b8:a4:ec:a9:d4:c2:2a:b5:4b:de:
18:b4:91:3b:74:2b:26:3f:36:e3:76:b9:98:4a:50:
bd:58:9f:0a:9f:9d:91:16:fe:83:8a:03:9b:aa:54:
58:1e:66:62:f4:03:8e:69:63:ce:b0:c2:88:99:b8:
42:6a:05:6d:c4:bc:5e:aa:88:db:06:e5:5b:e2:6f:
18:0f:3e:fb:04:5b:3b:d4:e8:2a:87:d7:e6:e8:1f:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:A0:9F:41:23:F0:48:0D:65:87:E5:7C:6B:4F:72:C3:34:15:86
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lOqgn0Ej8EgNZYflfGtPcsM0FYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8e:f1:90:2f:49:af:12:14:ef:ae:d1:e8:47:fa:e4:7a:ec:
b6:8a:9c:0b:aa:f4:6e:1d:5a:86:45:90:04:9e:67:17:0d:0e:
c6:a1:ae:c5:2c:8c:39:c3:55:f8:ee:c5:dc:00:8e:9e:90:8d:
6d:86:64:4b:50:2e:78:e7:ec:30:74:d6:7b:1a:7b:d4:3e:b1:
4e:55:d3:bf:1f:80:04:c7:80:35:28:95:0b:6b:b8:3c:5d:c2:
e9:0b:3d:1d:28:06:a8:50:86:f2:ed:86:6e:79:ec:33:ec:33:
ec:ec:66:fd:84:7c:ff:2e:4c:d4:de:26:a9:6e:25:74:e5:e8:
14:97:72:a5:5f:1a:27:c0:0b:ea:d1:72:c7:0b:10:1a:18:96:
fb:b1:82:4d:78:82:66:01:e5:d8:e7:02:08:b8:7c:c4:ea:bb:
53:db:12:54:f0:d5:4e:29:f2:92:8e:26:80:4b:7a:cd:c8:97:
23:9e:e4:00:64:e4:5d:13:cc:4e:8f:1b:5e:7d:76:35:29:28:
c7:af:60:92:e5:bd:a5:9d:fd:8e:dd:a4:ec:bf:e0:f8:9c:c1:
d5:90:b2:3d:43:9b:ca:bc:5a:26:9d:21:4c:04:09:02:d5:0e:
f6:3c:5b:51:a8:37:76:3e:84:14:e3:35:99:9d:c0:1b:61:1e:
13:48:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:29 2023 by rpki-client on console-ams.rpki-client.org