Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kRhZXec4pgVFpWq4SmdA5zTsY5g.roa
File: kRhZXec4pgVFpWq4SmdA5zTsY5g.roa (raw, json)
Hash identifier: q64NIVquJnGnZ2IdfTuryGOVW+IuzVYnP1OYMeWJ0GE=
Subject key identifier: 91:18:59:5D:E7:38:A6:05:45:A5:6A:B8:4A:67:40:E7:34:EC:63:98
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 428FC9E5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kRhZXec4pgVFpWq4SmdA5zTsY5g.roa
Signing time: Sat 01 Jan 2022 14:03:29 +0000
ROA not before: Sat 01 Jan 2022 14:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208583
IP address blocks: 193.181.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116719589 (0x428fc9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9118595de738a60545a56ab84a6740e734ec6398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:a6:51:e5:96:97:ad:be:b2:8e:16:7a:e1:
e4:e1:64:89:65:6a:46:4a:f0:e0:7d:aa:72:05:f8:
22:f2:4e:f9:a8:97:54:53:65:9d:3b:ca:16:b5:aa:
3e:9c:16:0f:15:13:f7:46:2d:81:3d:a7:97:f3:34:
ad:b0:c8:45:f4:47:cc:c0:e5:58:2b:c0:82:df:fc:
45:d2:85:19:8c:bc:9b:00:dd:2a:a1:29:fd:37:43:
27:1f:66:a7:46:63:0a:56:cc:58:1c:95:16:cd:ef:
4e:36:ba:80:87:bb:95:96:84:13:3b:0a:30:54:11:
68:d8:b7:d7:0c:5e:3f:7f:eb:9d:9f:23:fb:2b:67:
6a:62:cc:31:09:b7:84:54:74:d5:e6:d5:c7:43:bc:
e1:d4:06:a8:ce:d9:e6:c2:cd:c3:8d:8a:1c:71:13:
60:c8:e3:49:30:9f:bc:a5:70:92:99:42:ca:e3:21:
ee:ec:57:ce:d0:b7:d7:ea:49:62:d4:f9:3a:30:23:
51:49:c0:1d:5b:5d:71:82:e3:bb:b9:f9:0c:a3:6a:
b0:12:72:c5:9a:21:35:6e:c4:15:41:7e:ba:57:a2:
da:54:9c:ed:f4:30:d4:7d:80:a5:ef:d5:c7:00:cb:
ec:27:a6:42:99:fc:b5:0f:35:38:43:a1:69:5b:44:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:18:59:5D:E7:38:A6:05:45:A5:6A:B8:4A:67:40:E7:34:EC:63:98
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kRhZXec4pgVFpWq4SmdA5zTsY5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.177.0/24
Signature Algorithm: sha256WithRSAEncryption
96:db:2f:86:ed:fb:55:65:16:bf:96:6e:cb:f7:9d:5e:86:ee:
ac:40:13:78:fe:05:2e:4d:6d:ae:dc:40:ae:ad:c1:c9:73:62:
ef:04:13:2c:ad:bc:86:a1:26:a0:06:3c:43:6a:b4:71:c0:0d:
31:de:3e:2c:4b:5f:27:70:92:26:02:33:c1:d5:93:92:ec:b1:
4f:14:b4:05:fe:ca:09:fa:da:72:a6:6b:4a:76:7b:40:82:0a:
1d:2b:01:4b:3b:a0:bb:c1:85:21:25:51:18:fd:93:06:ce:bd:
4b:16:57:8c:4f:9f:6b:7a:f9:f3:93:db:bb:ec:f8:e3:ff:93:
ac:8c:df:58:ff:cd:73:59:a6:05:5f:c2:a1:fc:e7:b9:b5:d6:
07:13:de:32:4c:02:ce:4b:de:c0:60:50:96:ec:57:2e:a1:64:
61:dc:1b:78:b5:97:1a:5f:f1:60:eb:00:4e:69:0e:54:9c:74:
44:05:f0:e7:38:f0:d9:8e:03:c8:fd:5d:07:ff:39:f0:11:2b:
c5:4f:88:4e:c3:5a:db:53:bb:74:21:04:c4:de:7b:21:41:4c:
b1:1f:c8:43:2d:32:6d:9c:d5:3d:28:e3:1f:df:6d:7d:74:e9:
50:c2:4d:82:be:e5:ff:fc:7c:0b:e5:72:34:49:a9:00:cb:04:
2f:24:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org