Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5b4407-b9de-4d40-ad53-6c629d4228e8/1/0ibMR36s_7RSrgUDqZRzBmfBRnA.roa
File: 0ibMR36s_7RSrgUDqZRzBmfBRnA.roa (raw, json)
Hash identifier: OooBBWRB2f6ukAHqadfg11xJZnYdX8BIHatTLkdkphI=
Subject key identifier: D2:26:CC:47:7E:AC:FF:B4:52:AE:05:03:A9:94:73:06:67:C1:46:70
Certificate issuer: /CN=18754888f49d5b0c8cb9e6d60ac0eed71fc9b56a
Certificate serial: B93782
Authority key identifier: 18:75:48:88:F4:9D:5B:0C:8C:B9:E6:D6:0A:C0:EE:D7:1F:C9:B5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHVIiPSdWwyMuebWCsDu1x_JtWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5b4407-b9de-4d40-ad53-6c629d4228e8/1/0ibMR36s_7RSrgUDqZRzBmfBRnA.roa
Signing time: Sat 01 Jan 2022 06:58:03 +0000
ROA not before: Sat 01 Jan 2022 06:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.56.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12138370 (0xb93782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18754888f49d5b0c8cb9e6d60ac0eed71fc9b56a
Validity
Not Before: Jan 1 06:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d226cc477eacffb452ae0503a994730667c14670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:5d:76:32:ea:f9:3b:5c:0f:37:67:00:fa:
2d:3a:10:2c:d7:dc:d2:1c:74:ee:7d:6e:c3:0b:1e:
dc:7f:f8:58:57:6e:36:4c:95:3a:72:8a:60:c9:90:
f0:67:5a:68:8a:8f:3e:4d:f8:95:17:35:60:73:25:
8e:fd:69:69:19:a1:bf:02:88:62:54:5d:7c:24:94:
ea:d8:a8:92:9b:d1:62:22:c5:33:cb:f5:f6:bf:be:
90:98:02:71:6c:8a:58:a7:6a:1d:93:38:a6:35:6c:
52:8f:b6:a6:53:cb:a9:07:4b:b8:85:ab:df:cb:2b:
54:9f:91:e2:0e:cc:13:5c:a5:ff:09:e4:e5:ca:e5:
7c:f0:84:39:5a:d4:3c:ee:dd:34:c5:88:ce:ec:94:
d8:d6:f1:ca:c0:b6:33:40:a8:13:7b:fa:da:24:aa:
4e:4c:70:69:69:7f:a4:17:73:c4:4d:02:f2:3f:a5:
2a:25:9b:d4:04:e1:02:b2:bd:68:9e:a4:44:19:b1:
7c:7c:5b:28:0e:39:6a:6e:56:b6:e0:de:de:8f:b0:
e7:95:9d:c6:69:03:0f:31:31:5c:30:97:84:f9:34:
84:f0:7c:d1:2c:93:c7:80:60:30:0d:10:a3:aa:6d:
be:35:69:f8:ef:4f:ab:e8:78:b3:87:36:32:d0:05:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:CC:47:7E:AC:FF:B4:52:AE:05:03:A9:94:73:06:67:C1:46:70
X509v3 Authority Key Identifier:
keyid:18:75:48:88:F4:9D:5B:0C:8C:B9:E6:D6:0A:C0:EE:D7:1F:C9:B5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHVIiPSdWwyMuebWCsDu1x_JtWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5b4407-b9de-4d40-ad53-6c629d4228e8/1/0ibMR36s_7RSrgUDqZRzBmfBRnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5b4407-b9de-4d40-ad53-6c629d4228e8/1/GHVIiPSdWwyMuebWCsDu1x_JtWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:2e:b0:f3:f5:ad:fc:15:28:e2:80:b7:28:ce:4c:9b:32:12:
15:00:93:89:02:d0:c9:21:37:b4:38:03:72:6f:30:31:fb:78:
03:db:e1:d9:e4:72:2c:02:54:ab:ed:1f:ff:6c:86:e5:09:b5:
2c:00:10:47:7f:e9:c0:18:5e:d9:39:0c:58:4d:ec:b8:2e:06:
06:84:a6:76:e0:83:1a:7e:28:30:8f:d9:cd:38:5c:9f:86:58:
21:9b:b5:90:c2:a0:26:90:25:55:95:8c:ad:f6:fc:e8:a2:57:
97:33:cc:43:c5:eb:b3:54:e1:d0:64:ef:fa:fd:d7:a5:ca:7f:
7e:64:b3:ed:a6:06:6a:74:5b:ad:ba:5d:d0:20:71:dd:5b:01:
94:8b:d2:71:6f:dc:35:f3:47:1d:6f:2a:cc:7d:89:50:9a:1f:
43:0b:eb:32:ba:81:92:62:96:07:8c:6c:15:09:f4:c6:2f:88:
e6:f2:72:17:8f:ae:19:57:98:81:c1:95:3b:d2:1a:a9:1c:20:
70:20:37:89:44:25:1d:2b:b4:45:3f:24:91:ed:7f:29:3a:fd:
f8:37:00:6f:a4:33:4f:86:3f:b1:62:47:81:40:e2:fe:ea:15:
1e:7b:5e:12:c8:c1:8d:d8:a0:12:92:1c:b4:2c:9d:59:3f:3e:
1d:3a:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-ams.rpki-client.org