Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0_dPXgwRn33vHFCO7CHyQ9-YgoE.roa
File: 0_dPXgwRn33vHFCO7CHyQ9-YgoE.roa (raw, json)
Hash identifier: xPXkwmpRWEG5p6WeLAT5F3BYF3CYlTSIFw76q9Cxyjg=
Subject key identifier: D3:F7:4F:5E:0C:11:9F:7D:EF:1C:50:8E:EC:21:F2:43:DF:98:82:81
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17AC53E1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0_dPXgwRn33vHFCO7CHyQ9-YgoE.roa
Signing time: Sat 01 Jan 2022 04:54:08 +0000
ROA not before: Sat 01 Jan 2022 04:54:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 193.222.101.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397169633 (0x17ac53e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3f74f5e0c119f7def1c508eec21f243df988281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:84:1b:39:ba:de:0e:ac:8c:33:9c:a2:ac:
10:21:77:03:b9:f6:1f:8c:a2:cf:2b:88:5f:8d:f3:
87:0c:0b:aa:fc:8c:76:5c:7d:f5:73:be:72:4b:b0:
bc:53:e5:4a:2c:18:d6:f6:31:2b:25:3e:5d:5b:af:
09:1b:13:38:7e:0a:c8:46:4c:05:c7:11:32:f5:70:
ee:5c:97:24:4f:40:6d:4c:ca:1f:e7:47:76:06:0c:
f2:7a:b4:b1:ae:fb:d4:f2:f2:b3:6f:98:09:cd:fa:
b0:cb:5e:f7:9a:47:26:1b:ce:e0:50:0f:ee:b7:58:
85:43:ba:35:78:f3:92:49:66:2d:12:a3:d2:1b:45:
37:45:0b:7b:bb:3b:8d:f7:af:f8:40:12:55:b9:95:
37:e7:07:c2:e2:24:50:8d:c5:50:48:fd:ef:c7:8d:
21:8a:ba:a4:96:e9:25:7c:99:c0:34:da:98:36:02:
48:35:d5:b7:5e:b5:ad:d5:43:88:7a:1c:d4:23:16:
dd:30:c4:67:12:8d:7e:8e:6b:69:dd:4e:d4:a2:d2:
c0:a9:73:ff:7d:c1:61:3c:8a:b1:f6:8b:3f:28:e8:
b5:3e:4e:09:7a:5f:3d:89:7b:4c:6c:ee:be:e8:11:
40:59:6c:e8:8e:c5:bc:32:d5:e5:e9:e6:33:a2:fe:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F7:4F:5E:0C:11:9F:7D:EF:1C:50:8E:EC:21:F2:43:DF:98:82:81
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0_dPXgwRn33vHFCO7CHyQ9-YgoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:48:42:03:ab:2f:e5:02:86:a0:40:6d:df:4c:3d:5a:f4:ea:
05:1c:3b:54:b5:d8:39:da:9f:e8:fe:51:c7:d7:d2:77:9c:e8:
e9:f0:7a:15:7c:0d:f3:b5:9a:b0:b6:5c:b1:0e:31:09:8f:c3:
39:75:be:44:6a:71:92:fd:ca:ef:70:26:59:38:45:69:de:fd:
76:69:61:4f:23:ed:43:f9:5f:b8:fc:d9:4a:d9:f1:3a:0c:50:
5b:66:0f:d6:1a:7a:dc:07:28:bf:eb:4f:32:3a:8b:7a:85:ca:
88:a4:3f:c4:44:e3:a0:c9:86:59:ac:82:ad:c5:4e:9f:79:73:
87:04:00:3b:4e:b1:e9:d6:f8:72:06:01:65:3d:64:e9:cc:90:
9a:03:e5:6e:c3:1c:d1:8e:1e:39:59:0d:83:fc:74:92:f5:47:
ff:ef:fc:0f:89:1b:bc:02:21:7e:63:2a:df:79:d9:0c:79:19:
c9:40:d7:38:f6:6a:9f:1e:b4:4b:ae:c3:b1:3b:6f:80:5e:ae:
e6:0c:9d:92:18:74:18:e4:2e:b6:e0:47:c0:a8:86:4c:f8:e9:
3c:35:78:1e:97:ad:b7:06:f1:51:e0:76:50:21:73:79:50:af:
b7:b6:6b:63:16:50:0a:eb:95:a4:f9:2d:9a:14:01:05:2d:cb:
3e:db:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org