Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/uUeWSsleR5X4qN7pTmRkkCAED3Y.roa
File: uUeWSsleR5X4qN7pTmRkkCAED3Y.roa (raw, json)
Hash identifier: 8oM/XlxmNC7UoLE3uB7mCiXpgmBXpzxqTE7YvrBj99g=
Subject key identifier: B9:47:96:4A:C9:5E:47:95:F8:A8:DE:E9:4E:64:64:90:20:04:0F:76
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 03B6D503
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/uUeWSsleR5X4qN7pTmRkkCAED3Y.roa
Signing time: Sat 01 Jan 2022 15:02:40 +0000
ROA not before: Sat 01 Jan 2022 15:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12732
IP address blocks: 193.34.122.0/24 maxlen: 24
193.34.120.0/22 maxlen: 22
193.34.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62313731 (0x3b6d503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Jan 1 15:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b947964ac95e4795f8a8dee94e64649020040f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:64:e6:0d:e9:32:ee:5c:d0:e9:7e:a9:c9:
03:ce:a5:c3:a2:40:c7:35:94:0b:19:40:85:58:27:
5e:f3:44:f8:14:6b:e2:7b:35:d4:53:4e:64:b2:c4:
53:de:f9:3d:70:f6:0d:d2:cf:3d:3b:16:3b:9b:0d:
00:ab:79:29:30:f1:da:9f:9b:c4:6d:bb:01:4b:22:
ef:a7:a8:b0:3c:07:67:11:b4:8f:31:5f:4b:78:ce:
27:bc:c7:cb:6f:af:23:e4:3a:7b:c8:6c:62:c9:cd:
0c:b4:7c:94:bf:5c:35:6a:ee:c2:c2:b5:b5:01:c4:
1a:58:8f:32:59:89:35:4e:fd:65:c9:1b:30:db:73:
d6:11:12:91:20:dd:42:f4:86:01:9a:1b:b8:b8:25:
66:59:6f:24:c4:8b:02:1e:94:52:1a:9a:ad:14:5a:
75:50:91:7f:d3:a6:e0:5a:8f:48:5b:22:39:96:54:
ac:90:93:1c:01:2f:65:9c:bf:4f:55:38:23:55:95:
fe:c5:c8:97:13:5c:24:a9:a8:cb:ec:35:5c:31:15:
25:09:12:39:e1:d8:91:60:81:04:f0:31:0b:0c:fb:
c9:f8:b3:ae:5e:cc:37:57:7e:4e:c0:49:2e:3d:a8:
ff:3f:62:be:d1:6c:3b:f0:a1:95:9a:3f:d6:26:ed:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:47:96:4A:C9:5E:47:95:F8:A8:DE:E9:4E:64:64:90:20:04:0F:76
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/uUeWSsleR5X4qN7pTmRkkCAED3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.120.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:ae:d0:c1:83:bb:9a:e9:0f:ff:f4:c8:75:b8:3c:8d:6c:b0:
9b:2c:22:bf:a1:c5:c1:91:8f:e4:6e:93:46:e3:17:14:0d:c6:
e5:ab:e4:1d:5c:9c:17:32:0b:79:06:56:1f:66:20:15:2a:93:
bb:bf:d0:c5:97:8e:09:b9:dd:15:31:22:67:23:3b:bd:e0:01:
82:10:f6:78:a6:6b:c8:06:14:6b:10:3d:13:ba:59:b3:c8:ab:
6f:dd:33:20:98:92:45:78:9c:6c:7c:c7:db:f1:40:c2:38:7b:
a2:82:39:db:0b:2d:4c:10:98:ce:ec:31:a5:ca:ed:e2:50:60:
46:1b:1a:55:2a:12:6d:e4:91:10:48:99:53:30:4a:4b:55:05:
87:60:34:f2:f2:9c:d7:c8:27:bb:9f:0d:2b:68:aa:06:52:eb:
33:dd:0a:ca:da:9e:50:ae:10:c4:cf:51:b4:41:3e:ae:42:ed:
cf:16:7e:99:71:8c:b4:9d:22:55:24:8d:94:be:d0:1e:5a:a5:
c3:c6:97:f2:2d:7f:3f:0d:73:10:68:d8:0a:06:f5:f0:bf:4e:
d8:a3:01:20:a7:35:40:e2:93:a3:5d:11:1b:c8:67:81:8b:f0:
c1:1b:08:2a:2e:7c:01:86:46:7b:94:b5:09:ea:4d:de:1d:3a:
b4:de:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-ams.rpki-client.org