Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SCF0IHxwksOjyURbiqu0tDdtG4Y.roa
File: SCF0IHxwksOjyURbiqu0tDdtG4Y.roa (raw, json)
Hash identifier: J5cynk/5HEZzVu57ooL08MplK8nbPW7yB22vuX9X6U4=
Subject key identifier: 48:21:74:20:7C:70:92:C3:A3:C9:44:5B:8A:AB:B4:B4:37:6D:1B:86
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4255BF6C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SCF0IHxwksOjyURbiqu0tDdtG4Y.roa
Signing time: Sat 01 Jan 2022 14:02:58 +0000
ROA not before: Sat 01 Jan 2022 14:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8769
IP address blocks: 193.234.82.0/24 maxlen: 24
193.234.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112915820 (0x4255bf6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=482174207c7092c3a3c9445b8aabb4b4376d1b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:f8:44:ab:60:35:9f:08:81:50:6e:73:fb:
06:96:ac:16:24:d3:87:3b:2a:f7:9a:f8:87:15:8b:
0a:a6:7c:a8:fc:7e:3e:a5:3f:52:9f:7c:64:52:78:
5d:1f:20:09:a1:28:44:94:62:1d:8a:76:a2:91:63:
07:2e:89:35:23:ec:0c:8b:37:ef:28:66:f8:64:59:
06:fa:af:df:91:31:74:52:89:a4:a0:5b:f1:75:2b:
3f:93:b4:fc:e5:cd:39:5a:34:bd:33:2a:77:d4:ba:
2a:4a:5c:12:3e:4b:11:4c:9e:e7:76:6e:e3:97:15:
a4:80:d8:8e:98:c3:36:6f:31:91:f3:d1:82:58:b2:
53:97:0b:a4:66:a9:1a:45:2f:b4:e6:31:58:40:91:
1d:ad:01:b8:37:d9:52:4d:22:45:63:27:24:94:98:
df:0c:2a:b0:8c:0a:8d:c8:53:ab:ee:e8:6d:07:18:
48:1b:dc:4d:b1:43:c9:8a:99:fd:eb:a6:9c:18:55:
4e:10:5c:5a:ec:7a:81:86:8f:72:13:0f:ef:23:be:
04:69:8b:fc:22:2e:d4:70:0a:81:50:0c:de:c5:f4:
67:fc:af:27:76:6d:b9:84:95:fa:10:97:d7:8f:ec:
22:ed:67:f7:85:0b:6a:17:d6:8a:e8:12:8b:21:16:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:74:20:7C:70:92:C3:A3:C9:44:5B:8A:AB:B4:B4:37:6D:1B:86
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SCF0IHxwksOjyURbiqu0tDdtG4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.234.18.0/24
193.234.82.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5c:b0:14:41:3b:c5:17:6e:c1:ba:68:f5:ed:2f:4d:16:cd:
63:d1:e4:90:fd:d4:6a:2a:01:10:8b:3a:df:15:c6:47:90:a3:
03:14:d3:fc:55:32:9f:61:e9:7a:3a:54:90:61:7c:06:fd:ae:
ae:eb:96:6c:4d:fe:51:56:84:b6:04:62:9f:e2:d6:70:70:94:
c5:6c:c6:dc:d8:61:b2:02:72:aa:22:e3:98:e5:22:c2:0f:62:
c3:ff:5a:7b:eb:38:67:96:50:50:5a:88:97:03:6d:e1:0f:5b:
2b:7a:25:66:1a:62:88:fd:df:86:64:63:2b:2b:a6:96:cf:ab:
23:7d:55:da:66:4f:b6:19:f9:36:65:c9:8e:82:fb:45:84:dd:
99:6f:f6:24:1f:d4:95:b2:68:ed:7e:f6:fa:5e:1d:c0:58:1c:
37:06:63:60:47:32:d2:e7:24:f8:fc:f5:e2:fd:9b:22:ad:b7:
02:19:a2:7f:df:58:1f:5d:95:38:44:1d:f9:ab:d3:e9:94:65:
5c:0d:83:34:82:01:9f:b7:16:bb:4b:d6:ce:92:96:78:23:46:
77:f5:99:b4:e8:38:c2:c6:4e:c8:bc:13:56:eb:82:b2:5d:bb:
fa:5d:00:26:d0:62:09:2a:05:e0:f4:22:42:06:86:ba:3f:12:
c8:35:8f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org