Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/cqRlnW9_FW26my8QONFUfeJEa64.roa
File: cqRlnW9_FW26my8QONFUfeJEa64.roa (raw, json)
Hash identifier: HFlUwPr3ttRrRx5ZzfigSmKorI5uzp+lRhIVvQ/CNoY=
Subject key identifier: 72:A4:65:9D:6F:7F:15:6D:BA:9B:2F:10:38:D1:54:7D:E2:44:6B:AE
Certificate issuer: /CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
Certificate serial: 021646
Authority key identifier: F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/cqRlnW9_FW26my8QONFUfeJEa64.roa
Signing time: Tue 24 May 2022 09:00:14 +0000
ROA not before: Tue 24 May 2022 09:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59427
IP address blocks: 193.178.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136774 (0x21646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
Validity
Not Before: May 24 09:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72a4659d6f7f156dba9b2f1038d1547de2446bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:3c:15:ea:10:e3:70:9b:44:7a:c0:aa:dc:
42:3b:1a:8b:ce:00:49:4f:87:f9:49:b1:1b:b5:1d:
d7:3c:af:7a:78:43:c9:21:3d:b9:ce:5a:1a:30:3b:
5c:98:22:6d:28:cc:f1:36:bf:67:ff:9e:bd:c3:b0:
96:39:11:c3:6a:97:78:19:ad:32:1f:69:48:2d:d6:
8f:ef:d6:92:ed:3a:14:01:9c:26:14:73:5f:06:43:
20:3d:c7:cb:32:ca:70:cf:7d:29:e5:78:9c:f4:9e:
31:97:97:11:d4:68:0d:9c:f4:a5:ac:11:39:02:b9:
ce:36:09:8c:0f:4c:f8:eb:38:f2:fe:39:f6:93:93:
d5:c3:58:54:11:06:3b:c6:19:92:66:72:72:27:7d:
99:0d:cb:60:e5:61:99:db:89:83:18:e1:8d:62:af:
ac:a4:b4:c0:db:40:f1:17:f9:8b:eb:aa:62:cc:bb:
a0:1b:b1:20:cc:c6:39:3b:a6:b8:60:04:86:44:af:
a3:4f:95:28:48:7c:ca:fc:a7:52:33:63:b4:e7:2f:
0e:17:31:bf:0f:8d:76:d6:f5:92:e7:05:d5:bb:04:
94:11:30:19:bc:a8:24:cf:cd:c8:55:96:fc:e0:ea:
46:2e:37:3b:e8:67:ad:9e:1a:c7:8a:72:ba:6d:58:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A4:65:9D:6F:7F:15:6D:BA:9B:2F:10:38:D1:54:7D:E2:44:6B:AE
X509v3 Authority Key Identifier:
keyid:F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/cqRlnW9_FW26my8QONFUfeJEa64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.186.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4c:63:8b:5f:d9:d6:05:46:a2:6c:a9:16:58:c0:e9:52:14:
7a:4f:69:11:44:ad:d1:f9:eb:5a:8c:80:fb:7d:13:61:51:3d:
a1:f0:9d:6e:a3:bf:d9:b1:b0:e0:07:44:63:ae:03:d8:85:44:
6b:07:3a:ad:49:f0:72:5b:0f:ac:59:66:2a:40:d3:64:26:c3:
89:fc:63:10:6f:e9:f1:db:3a:52:66:42:a7:e1:c3:90:81:da:
37:5b:aa:02:3e:c1:76:8b:a7:40:c2:c1:d4:ea:14:87:12:65:
1f:2a:86:a1:b7:f6:94:14:a5:73:cf:b8:ab:2e:c2:4e:37:8f:
2e:1a:bd:5e:35:2c:b3:d8:1c:73:aa:b3:77:3a:b9:5f:60:aa:
74:49:44:42:89:a0:ec:66:54:d1:6d:ad:ad:d9:6f:9b:ea:f9:
44:12:b3:d3:88:41:7a:1a:d7:6c:91:d4:5e:27:7b:90:2a:50:
93:a8:43:18:91:43:5c:90:89:0b:e9:6f:8d:d2:1f:ed:9d:91:
90:74:26:e1:de:ba:df:46:89:b2:2d:e8:9b:3a:3d:75:d5:ee:
27:a9:01:93:83:c6:4a:7a:e2:6c:fe:8d:01:f2:94:74:01:ec:
82:2c:a9:07:b5:3e:69:24:da:1e:2a:57:b5:81:48:6e:e1:07:
85:70:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:57 2023 by rpki-client on console-fra.rpki-client.org