Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/xWkh_7zchRmssTXUgZ4EYa3POz4.roa
File: xWkh_7zchRmssTXUgZ4EYa3POz4.roa (raw, json)
Hash identifier: d34kqpn4oYaaMfkp6qvNzHk+dHK4mIi8C2gydK+LikY=
Subject key identifier: C5:69:21:FF:BC:DC:85:19:AC:B1:35:D4:81:9E:04:61:AD:CF:3B:3E
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 0183F3FDAED20FCBFD66197E5D89C0B8D560
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/xWkh_7zchRmssTXUgZ4EYa3POz4.roa
Signing time: Thu 20 Oct 2022 06:03:52 +0000
ROA not before: Thu 20 Oct 2022 06:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198009
IP address blocks: 193.201.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f3:fd:ae:d2:0f:cb:fd:66:19:7e:5d:89:c0:b8:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Oct 20 06:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c56921ffbcdc8519acb135d4819e0461adcf3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:9e:25:ca:1f:12:62:fd:10:e5:45:b1:ec:
ab:d3:ad:40:f4:cc:22:e6:45:d7:33:c5:0f:64:88:
2a:cc:4b:4e:96:f6:4a:fc:c3:e9:50:b0:6e:28:9c:
12:f6:97:f3:e0:1f:d5:32:00:11:63:95:90:4c:a0:
f7:44:2c:cd:e7:f9:05:f6:15:3b:06:d4:18:5e:12:
45:01:98:fa:0c:05:bc:5a:28:77:f7:49:fc:ea:1f:
6c:b7:4e:95:6f:9f:60:d4:80:7d:c0:86:73:77:22:
f4:0e:5a:09:5f:40:21:b7:fb:7c:5a:44:f5:d3:c6:
21:b5:fd:b4:80:05:7d:a1:97:ae:0b:cd:83:2b:86:
b9:66:3c:25:98:13:1f:9d:22:ce:ee:b9:15:2f:0f:
9d:fc:8a:b4:ec:8a:61:a4:88:c0:eb:2f:dc:de:59:
63:35:5a:74:80:aa:ea:ac:56:6c:a1:fa:92:44:91:
be:6c:88:bd:b1:38:fb:9e:d3:40:4c:7f:fe:5d:e5:
8d:b2:53:d9:95:89:ef:53:90:d4:1a:34:4e:bf:44:
55:75:ad:71:b1:80:b2:00:41:b6:1a:07:df:2c:c0:
c5:7e:a6:7e:79:d0:67:cf:5c:79:eb:a3:b4:51:89:
8a:81:d8:9a:e5:50:f5:07:98:1f:9b:53:97:b9:67:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:69:21:FF:BC:DC:85:19:AC:B1:35:D4:81:9E:04:61:AD:CF:3B:3E
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/xWkh_7zchRmssTXUgZ4EYa3POz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:71:fd:69:77:51:29:45:62:18:f3:4f:18:58:86:e3:84:a1:
fb:5f:be:7a:89:be:30:66:ce:9e:50:6d:e7:1d:01:51:7b:bf:
ac:83:ae:b0:64:f3:39:3d:30:03:4e:86:df:82:46:7a:ea:2d:
e3:f4:52:8f:08:d0:c0:45:5d:4e:99:18:c8:87:8e:ae:9b:30:
99:05:87:ac:35:bf:f8:cf:94:71:ee:39:0e:07:09:4f:13:f7:
73:0f:b3:34:7d:10:80:fc:2f:c8:91:c8:6f:c1:26:c6:96:fd:
45:c9:46:ba:d7:db:09:d6:6f:da:41:3e:d5:ae:0d:f7:7c:c4:
1c:d0:72:02:e1:cd:7d:9e:d1:2e:ae:4f:3b:c7:58:e2:28:ea:
4f:23:11:2a:ec:6e:76:01:3d:75:ce:7e:48:4c:28:1f:be:70:
ad:80:7a:02:e0:3d:61:d2:ae:96:b6:36:03:6d:04:44:04:fb:
12:f0:5c:9f:3e:16:86:f1:e1:f6:4f:5f:19:c2:37:2c:97:21:
e6:43:1a:69:11:f5:2d:2d:34:3f:83:b5:3c:35:27:ea:11:a4:
f7:3f:19:a6:2e:c6:4f:16:46:64:d4:ed:04:d0:9e:9d:c6:fb:
3d:83:dc:95:eb:76:1e:8a:60:0e:5a:f8:c3:06:2d:79:e0:b6:
e2:08:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org