Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9lZ1TbqgNo6-UUCRXYm0AquKly0.roa
File: 9lZ1TbqgNo6-UUCRXYm0AquKly0.roa (raw, json)
Hash identifier: CyK7fIOdoLr1RwqUvAXWey01NjfRe3qdaqtQN1Rbca8=
Subject key identifier: F6:56:75:4D:BA:A0:36:8E:BE:51:40:91:5D:89:B4:02:AB:8A:97:2D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 438F4B9C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9lZ1TbqgNo6-UUCRXYm0AquKly0.roa
Signing time: Thu 07 Apr 2022 15:27:30 +0000
ROA not before: Thu 07 Apr 2022 15:27:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.183.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133464476 (0x438f4b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 7 15:27:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f656754dbaa0368ebe5140915d89b402ab8a972d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:62:7e:25:75:4b:e5:c2:53:d2:38:b1:d2:
7f:e6:47:5e:5d:53:de:a4:7d:b7:86:fe:7e:fe:dc:
87:5e:a0:16:98:09:12:66:6d:2e:80:f9:ee:97:00:
68:7d:37:c0:f4:ad:ad:10:6a:be:bc:fb:0b:3c:24:
14:d6:4d:f3:cb:be:08:2f:24:25:b5:c6:d6:69:0d:
61:4b:2e:09:c5:35:ba:46:ed:a1:66:f2:1d:87:59:
2e:de:47:c2:89:b7:aa:25:c7:e7:b6:13:eb:86:a1:
ca:bd:0f:72:4f:6c:e2:d6:92:c9:f1:7f:d2:05:6e:
79:99:d8:1d:98:d7:d0:1c:f4:8b:58:e0:90:18:55:
bf:bc:df:ba:3e:c0:c0:45:be:7c:7a:fe:75:fe:77:
2e:a4:ba:30:d8:e3:33:45:7b:b7:12:95:1f:9a:de:
85:e8:c6:ef:e8:4e:3d:05:6a:3c:75:56:3a:7c:95:
c4:a5:d6:91:c2:32:1e:61:43:70:48:4a:4c:58:6c:
aa:a6:df:38:f9:6d:d4:ac:06:30:3d:14:bb:3d:9f:
2b:33:28:be:60:81:7d:c2:71:f0:05:eb:60:c1:fb:
10:6e:19:ab:34:a9:1c:9d:40:8d:61:7e:7a:91:ab:
c1:b7:1d:45:9c:47:9d:a8:29:98:27:3b:8a:7b:23:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:75:4D:BA:A0:36:8E:BE:51:40:91:5D:89:B4:02:AB:8A:97:2D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9lZ1TbqgNo6-UUCRXYm0AquKly0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a4:6d:3c:10:e1:99:8b:46:80:f2:4c:5d:93:2b:c6:f2:e5:
6c:80:6a:bd:12:4f:c6:bf:d0:8d:54:e7:af:33:2c:32:6d:4a:
eb:87:09:92:11:e6:12:09:65:13:ca:e1:ec:3e:b1:26:96:11:
1b:ec:8c:4d:26:88:3e:12:71:01:d5:67:99:f5:51:e6:48:04:
46:e9:57:74:62:9d:e5:c8:9b:3f:c2:00:5f:87:ea:c4:c6:4e:
cb:ca:25:db:47:69:dd:74:4a:be:cd:08:8d:03:53:14:a7:9d:
7c:6b:e4:37:cd:24:26:74:76:b0:78:cf:5e:1b:22:63:99:2a:
a0:7d:93:ff:cc:65:59:29:5c:dc:4c:06:7b:95:d0:15:68:ba:
34:d6:6f:19:28:39:a7:e9:18:9e:d9:cf:3e:50:d3:b3:2a:ea:
6d:26:44:48:78:91:bd:ac:b1:ae:0c:a7:b2:fd:d1:07:27:dc:
4f:09:e1:9a:75:04:9a:e7:67:ef:41:95:56:51:93:14:b6:da:
43:9b:f5:3f:89:1d:34:0e:31:ef:78:06:3e:bf:6e:34:b9:b0:
64:7f:af:e4:35:ac:c9:57:f9:56:ee:93:de:3d:7a:4e:e8:a2:
f5:4b:d8:f6:ee:da:c4:52:02:60:24:04:19:4b:b4:2a:b3:3c:
98:3e:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org