Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/K6opIlKNaFFp2A7b9XPFcpJfBMM.roa
File: K6opIlKNaFFp2A7b9XPFcpJfBMM.roa (raw, json)
Hash identifier: SYz+qSq5Gg4VV80b08VYK/gO2lxovw5pQUYqkrFKXGM=
Subject key identifier: 2B:AA:29:22:52:8D:68:51:69:D8:0E:DB:F5:73:C5:72:92:5F:04:C3
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 28960E7B
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/K6opIlKNaFFp2A7b9XPFcpJfBMM.roa
Signing time: Sat 01 Jan 2022 02:01:36 +0000
ROA not before: Sat 01 Jan 2022 02:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197326
IP address blocks: 193.77.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680922747 (0x28960e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 1 02:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2baa2922528d685169d80edbf573c572925f04c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:1b:3d:15:fa:b8:be:3e:95:c3:08:88:0d:
60:ad:ad:18:46:4b:c8:81:b7:c5:c7:50:45:27:cd:
5d:f9:5e:4a:35:43:9a:e4:84:9f:18:a7:e7:74:c5:
5c:cc:90:da:60:68:e8:7d:f4:b0:65:dd:47:3c:36:
0e:59:2d:33:e3:15:63:89:59:3c:62:a6:d0:78:39:
ab:25:2f:11:2e:e0:f5:fe:d9:c5:2d:05:a0:13:6f:
9b:a3:f8:7c:58:12:f1:ad:25:b2:03:bd:a5:30:b1:
6a:89:f7:8d:7b:bd:27:14:34:4b:c3:c6:c5:41:26:
5d:31:0d:cf:c3:90:03:d9:07:b9:2e:66:4d:a6:f7:
c3:bf:d1:ec:cf:a8:9e:b3:4e:ac:3c:b3:8c:20:be:
01:85:1a:b9:a0:e9:45:41:88:6e:78:26:39:17:0c:
ee:f4:be:d6:dd:82:b3:c2:0e:7a:73:e4:fc:66:f9:
6b:08:15:e5:ff:0e:8b:f9:a6:e8:9d:ee:ef:b8:ff:
dd:46:db:56:c0:d8:a1:62:7f:72:85:1a:96:27:3c:
ac:9d:11:a9:eb:85:e5:70:71:91:9b:b5:ec:17:af:
37:28:87:b5:e7:16:12:c7:56:a9:29:7f:ee:e0:ee:
a3:66:92:07:27:23:69:9b:8f:7e:2a:eb:48:4d:e6:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:29:22:52:8D:68:51:69:D8:0E:DB:F5:73:C5:72:92:5F:04:C3
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/K6opIlKNaFFp2A7b9XPFcpJfBMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.77.42.0/24
Signature Algorithm: sha256WithRSAEncryption
57:e2:95:c7:d0:8e:0a:92:e2:8b:8b:46:c9:6d:2c:ae:91:35:
44:11:a0:5d:8c:e6:34:f7:82:f6:c7:38:a6:60:3b:b7:69:a3:
38:82:27:ba:dc:25:bd:aa:fa:a4:6e:f2:c4:35:ab:b2:c8:63:
c6:8b:4c:6e:7f:78:58:c7:b7:b6:60:3f:c0:62:74:e8:22:e5:
a9:8c:ca:eb:94:0f:ec:15:cb:1c:4b:22:dc:5e:0a:3b:84:45:
ff:28:7a:6e:ba:d7:02:56:61:af:31:cf:28:39:e6:f6:d9:10:
ac:67:50:03:f1:46:c4:41:aa:c9:c7:a7:2e:4d:87:9a:ce:a6:
b1:67:b4:ab:ab:05:c2:25:f0:bb:6e:45:0a:b2:bc:71:02:58:
c4:c4:bf:b1:81:29:5a:ac:98:ad:4d:95:cb:7c:cc:1e:1c:6f:
6f:97:ce:b6:e5:84:be:bb:23:fe:dc:b2:1b:f5:fc:61:77:7a:
68:5e:eb:49:1d:5c:9a:81:36:1e:8b:c7:4f:8e:6a:3b:24:4f:
c6:0a:9e:3f:1a:a1:97:02:a6:da:30:23:bf:fe:d4:28:43:26:
79:e4:a9:7a:ae:ad:52:bd:4e:19:54:d7:bc:f5:cf:3d:3f:cc:
5f:6c:c0:95:99:29:4e:8e:23:8d:c3:42:ed:ea:02:7a:6d:ce:
e6:3f:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org