Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B6rr3qRj30s5M3uRXDcaFwPQYx8.roa
File: B6rr3qRj30s5M3uRXDcaFwPQYx8.roa (raw, json)
Hash identifier: rtmCnQXJeuD72E5hLNHmd6TL0aB7DeTFNOJR6S/jcjA=
Subject key identifier: 07:AA:EB:DE:A4:63:DF:4B:39:33:7B:91:5C:37:1A:17:03:D0:63:1F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 426BBEBC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B6rr3qRj30s5M3uRXDcaFwPQYx8.roa
Signing time: Sat 01 Jan 2022 14:03:11 +0000
ROA not before: Sat 01 Jan 2022 14:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 193.182.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114357436 (0x426bbebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07aaebdea463df4b39337b915c371a1703d0631f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:59:89:21:65:f2:96:3e:d1:97:4b:52:61:
5c:88:69:80:5d:fb:1e:49:34:dc:65:0d:81:8b:29:
78:eb:97:3e:c5:d0:b3:48:db:e2:58:25:da:5f:a0:
41:dd:84:aa:79:d3:68:a7:e5:a6:3c:a9:c8:95:38:
86:7e:ce:6e:86:d8:b2:45:aa:87:cd:e1:e9:3f:23:
b6:62:cf:9d:0c:50:60:16:c7:72:c9:ff:1b:70:c8:
32:89:01:49:84:74:45:44:0d:b4:3f:53:97:b7:8b:
8c:05:da:81:2d:42:81:ca:45:61:fd:5b:d1:13:38:
d0:90:98:fa:14:fd:a0:ca:6e:b2:1c:ec:84:11:95:
78:28:25:cb:f1:7f:48:b6:26:94:33:b0:4c:c9:cf:
cc:5f:e9:ce:a6:a0:f4:3a:f8:52:e0:49:95:33:52:
0c:7c:cc:43:a6:21:df:ca:8c:a4:0a:1d:5c:b1:d6:
0d:cc:ad:1c:b3:90:0a:cc:54:d5:49:dc:0a:6c:25:
38:99:69:f1:8c:ce:15:f4:55:93:82:96:92:11:19:
99:88:48:2f:ce:72:63:da:1c:71:c5:d8:0f:8f:a5:
a3:ab:f3:29:31:fc:12:6e:17:b0:a4:6c:0c:e2:b9:
7b:79:d6:47:3c:1b:c1:b9:71:42:90:2f:99:25:fb:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AA:EB:DE:A4:63:DF:4B:39:33:7B:91:5C:37:1A:17:03:D0:63:1F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B6rr3qRj30s5M3uRXDcaFwPQYx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0d:37:f9:ca:8b:17:b9:fc:59:6d:8f:7f:6f:5a:43:48:e6:
34:c1:2c:6c:db:7a:ed:c8:31:9c:c7:99:b1:6b:0f:88:74:7a:
86:56:65:b9:1a:1c:3e:8e:85:ce:b0:5c:0f:4f:06:5d:63:42:
f8:8d:1f:0b:00:38:05:01:b5:fd:b2:6d:5d:c3:26:ab:cc:91:
1d:f6:4d:be:b3:7f:a7:a0:bc:bb:67:2d:4c:52:28:62:8f:f4:
73:fa:e7:88:22:82:22:6f:12:db:fd:b5:00:f5:be:dc:5a:51:
36:cf:c9:1f:35:a7:8d:13:ec:d6:ff:47:e8:22:32:5b:e2:a6:
62:19:d2:a9:70:b4:a7:b6:f4:10:1a:fb:3e:3a:e8:5c:59:b6:
0d:5c:d5:e5:57:83:3a:9e:46:11:fa:ad:a8:cf:82:92:86:82:
fb:38:d8:09:f6:b8:47:1e:b7:c5:c7:e3:d4:58:f7:a5:88:3a:
61:46:74:ba:01:05:78:08:76:db:62:42:78:a2:3a:4d:07:40:
7b:0c:bf:50:6d:fc:17:5d:3d:da:69:b3:91:cb:9e:9d:aa:ae:
fd:20:71:53:56:74:bb:56:22:09:e6:83:c2:0d:f9:b8:88:71:
7e:86:f0:36:01:b9:96:2d:28:ad:d2:5d:87:81:48:9e:ac:86:
80:16:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org