Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/mZgn8qb1djhZcJMG_9cJ8VKCLiI.roa
File: mZgn8qb1djhZcJMG_9cJ8VKCLiI.roa (raw, json)
Hash identifier: exAy9S1iZCcojaFFwffsqIC4GlFhUhFNJPamS6RrL20=
Subject key identifier: 99:98:27:F2:A6:F5:76:38:59:70:93:06:FF:D7:09:F1:52:82:2E:22
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: B42A
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/mZgn8qb1djhZcJMG_9cJ8VKCLiI.roa
Signing time: Tue 03 May 2022 08:17:45 +0000
ROA not before: Tue 03 May 2022 08:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42234
IP address blocks: 193.200.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46122 (0xb42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: May 3 08:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=999827f2a6f5763859709306ffd709f152822e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:ea:21:a4:f1:79:7a:b9:3f:79:02:2c:0e:
26:1b:87:e4:f8:92:ed:cf:81:c9:a6:da:43:26:58:
03:84:7f:fa:93:7c:51:e9:44:89:70:80:23:54:5e:
24:6f:f9:ca:0d:6a:7d:99:a8:f2:39:e3:04:0a:9a:
be:d5:09:53:09:25:ad:95:d1:6a:f4:06:64:66:4e:
7a:b1:81:13:f4:ea:b1:a4:78:45:d2:27:f7:9a:1e:
92:51:9f:b3:16:cd:3f:ca:da:b0:e4:7e:8f:6f:38:
90:a0:83:4e:b3:fe:65:71:56:f3:40:1a:8a:d8:6d:
d5:53:32:16:40:da:12:f6:fc:d6:7d:06:0e:18:3c:
04:2a:fc:26:b0:5b:3c:d9:77:ad:f9:b5:7f:7d:09:
19:04:8d:82:e3:0a:38:89:65:97:4d:11:6c:da:22:
0d:83:90:6f:62:94:50:22:d9:0e:5e:ee:61:1a:13:
a2:67:33:4f:f4:66:2f:29:19:e3:69:eb:1e:ff:4f:
40:7b:01:16:b2:db:ee:6c:6c:7d:a5:77:65:05:35:
da:eb:7c:b1:c3:36:ea:8f:72:e8:2c:19:9c:74:63:
ec:2a:de:12:50:e2:10:95:c5:bb:4b:b7:98:6f:c6:
36:dd:d9:e6:0c:3c:dc:66:6e:c4:1f:15:c1:34:ac:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:27:F2:A6:F5:76:38:59:70:93:06:FF:D7:09:F1:52:82:2E:22
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/mZgn8qb1djhZcJMG_9cJ8VKCLiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ec:e6:b8:bb:d6:bc:05:c0:83:51:6a:1d:fd:d2:22:b9:17:
22:3a:ef:24:d2:da:f8:24:6f:ef:12:2f:57:db:6c:1d:3f:90:
a7:a9:ab:27:fc:ed:de:a2:7f:90:f8:ba:e0:d6:be:cb:13:56:
47:04:e9:b1:1e:32:0a:c7:46:d4:13:9f:2c:99:98:1c:ba:27:
50:3f:43:60:8e:ab:d4:82:4b:b8:71:9f:c6:47:da:07:03:e1:
9d:43:fa:0f:aa:c8:fe:4c:bd:22:09:c1:70:75:c3:96:c4:27:
f1:40:00:ce:ca:4d:e8:9c:6f:52:03:cf:e9:6d:16:5b:a6:ee:
66:f8:19:e2:36:f7:20:7c:d7:42:37:0d:49:f6:c3:b5:5f:30:
7f:8a:4f:e2:3c:e8:f2:b6:f5:55:80:78:43:3d:27:54:3d:a3:
f8:77:99:04:e9:91:bc:71:3e:db:73:30:90:ec:72:36:e7:f9:
07:0b:e8:09:91:0b:26:9b:6a:9a:1a:f4:df:c2:40:48:53:af:
e9:b8:11:39:70:ca:c2:7b:29:ac:41:da:21:61:28:31:57:f5:
c9:ca:32:61:9d:e6:53:23:28:fd:45:7c:5f:15:d4:5a:d9:46:
38:e9:d1:a6:fe:4b:f8:fc:b5:93:57:fa:ff:e9:84:33:f1:e3:
ee:99:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org