Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y0x5eB8WuYD01C_1zd03b0xhXTQ.roa
File: Y0x5eB8WuYD01C_1zd03b0xhXTQ.roa (raw, json)
Hash identifier: dRFLu9yx414Nm1+nIJMiKEOUdar9/U4xx2PSC9oMQng=
Subject key identifier: 63:4C:79:78:1F:16:B9:80:F4:D4:2F:F5:CD:DD:37:6F:4C:61:5D:34
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42C10894
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y0x5eB8WuYD01C_1zd03b0xhXTQ.roa
Signing time: Wed 19 Jan 2022 10:56:14 +0000
ROA not before: Wed 19 Jan 2022 10:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210409
IP address blocks: 193.182.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119946900 (0x42c10894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 19 10:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=634c79781f16b980f4d42ff5cddd376f4c615d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:2f:3e:56:c6:c3:53:ee:89:91:f9:2e:89:
b3:fe:f4:02:2b:28:a0:04:bf:66:aa:bc:94:75:3c:
a7:51:a6:4c:7c:86:1d:46:65:dd:f4:9e:19:77:45:
14:11:09:1b:ee:9f:2c:42:99:39:65:ab:8c:36:ce:
ca:67:8b:d2:83:c6:cd:d8:e7:97:f9:93:2d:4c:ac:
1b:da:c3:90:8a:a6:31:1c:1d:95:f1:55:bc:0f:56:
21:3b:64:49:da:b5:a0:ae:79:8d:ef:93:90:ca:13:
6c:1a:cf:8f:0a:af:4d:3d:b5:58:96:d1:f1:fc:f2:
30:d1:dc:44:42:2d:2a:76:d3:8f:37:77:a2:85:b0:
e5:ef:db:ea:e4:49:58:20:5b:ac:c1:ca:18:a1:31:
b4:19:1b:a1:36:c1:78:a8:cd:22:89:3c:7b:00:d6:
84:38:6b:18:7e:48:c4:ac:6d:8b:04:63:94:49:53:
89:8d:89:0e:34:24:0c:cd:8a:5b:01:1a:06:ca:2f:
7f:65:46:1a:78:1d:56:07:51:b6:69:ca:53:23:70:
31:c7:0d:54:52:ef:4b:46:4e:1a:73:25:07:04:21:
2d:b3:29:d3:0b:e0:9d:b9:d2:a0:c3:0a:0e:74:dc:
72:ea:c8:67:63:88:9a:02:31:c6:be:fb:7f:53:64:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:79:78:1F:16:B9:80:F4:D4:2F:F5:CD:DD:37:6F:4C:61:5D:34
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y0x5eB8WuYD01C_1zd03b0xhXTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.7.0/24
Signature Algorithm: sha256WithRSAEncryption
74:66:33:9b:d7:f7:42:7b:b6:e3:16:a9:eb:d4:8c:59:93:6e:
8c:f6:91:c3:d7:63:d8:c4:f1:6d:5a:88:72:ea:4c:6a:bd:00:
8a:e4:43:fa:e9:f6:41:0f:26:4b:40:8c:d5:fd:c2:57:20:c3:
60:7c:b2:2d:8b:08:78:9a:d7:9d:af:1b:b8:80:93:fa:ed:ea:
9c:cf:6c:d6:ae:9f:d5:2d:7a:92:63:08:7b:68:a6:a1:de:b5:
e5:7d:44:dc:5e:56:7b:24:48:6a:23:e7:66:f7:ba:bf:e8:f6:
52:4b:12:b0:0b:c9:ff:7f:9d:f2:88:b6:84:95:12:02:35:6e:
c7:0d:07:f9:76:ac:5f:bc:24:d8:57:70:d3:35:d9:15:13:45:
0e:ee:85:ea:48:52:95:82:2c:49:b4:ee:4c:73:3c:d1:a5:44:
d2:3f:37:af:33:d0:4e:89:6f:68:e6:1b:3f:b2:c3:60:36:03:
51:d2:fe:91:21:49:24:83:a0:a6:fa:bd:0d:0d:91:b1:b1:31:
a4:ca:cb:bd:74:7e:19:b0:62:a4:e4:cc:b1:a5:e3:7a:97:64:
f9:45:b8:f6:0d:4c:ac:c4:c9:9c:a0:c4:d9:19:4e:40:96:d0:
97:18:c9:22:f5:4f:73:b3:83:0d:d0:d7:e4:04:08:cd:50:8f:
a3:56:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org