Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/sA70rUcvwmvXel9N3w_k0ozgan0.roa
File: sA70rUcvwmvXel9N3w_k0ozgan0.roa (raw, json)
Hash identifier: R6G3/Yrn2vsUG/b1d0038EUk3DrLzXoSXlvTZCbSBDA=
Subject key identifier: B0:0E:F4:AD:47:2F:C2:6B:D7:7A:5F:4D:DF:0F:E4:D2:8C:E0:6A:7D
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 04837D2D
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/sA70rUcvwmvXel9N3w_k0ozgan0.roa
Signing time: Sat 01 Jan 2022 13:59:41 +0000
ROA not before: Sat 01 Jan 2022 13:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21437
IP address blocks: 193.104.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75726125 (0x4837d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Jan 1 13:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b00ef4ad472fc26bd77a5f4ddf0fe4d28ce06a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:0f:5b:59:36:b6:d3:7d:5a:fb:aa:c9:43:
d2:c5:c5:06:76:18:9c:87:2a:e3:28:75:bb:df:38:
d1:82:e4:4c:a2:95:0c:5b:c9:5e:7b:0a:45:ae:bd:
5e:84:e0:23:3f:f4:d9:62:fe:b9:09:c7:6c:45:3c:
3c:73:8c:a2:68:1c:f5:c4:ba:3b:f6:68:27:c3:81:
fd:34:36:1d:c5:c3:1b:e3:0a:3e:ad:e5:eb:c5:54:
84:8e:5d:60:e3:06:c9:a6:05:be:18:af:2b:92:25:
18:70:b0:e9:4b:c3:21:b1:cb:a8:f8:7c:a7:c9:72:
6a:c1:f8:b4:72:7a:84:10:5e:8c:cb:a9:0a:10:0e:
f8:e4:ed:2b:e7:8b:68:63:3f:41:71:06:a8:40:a2:
f4:e4:c4:4f:7f:a0:c2:01:3c:7b:c3:35:0d:a7:99:
71:49:67:9a:fc:d0:4d:11:aa:ad:f6:de:5b:79:40:
db:fc:5c:c1:ed:66:37:20:db:b9:ab:a7:f4:f1:ff:
a0:21:6a:32:8e:e2:fb:fd:2f:da:92:1e:45:35:a0:
dc:30:2b:9b:bf:48:6e:4a:1a:0d:85:47:8e:e9:fd:
82:da:fb:6c:9c:cb:3e:04:22:da:16:70:03:7a:53:
03:86:6c:13:12:b7:61:c7:1d:93:75:af:af:84:7d:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0E:F4:AD:47:2F:C2:6B:D7:7A:5F:4D:DF:0F:E4:D2:8C:E0:6A:7D
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/sA70rUcvwmvXel9N3w_k0ozgan0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6c:ae:7e:db:ce:b1:a8:ff:43:1e:d0:55:8a:95:9e:d7:aa:
5e:28:4c:24:24:00:12:3d:ec:97:20:b1:15:3d:8a:c9:b3:04:
8b:4d:d9:cc:10:c8:13:b3:0d:f7:eb:d8:91:70:9f:4e:28:39:
73:31:24:72:46:6b:3b:38:91:0d:3c:8f:54:5d:d0:cd:46:45:
c9:99:3c:ae:c0:03:98:96:ad:1b:ec:05:be:ef:f3:7a:97:b6:
a1:1f:df:c0:5a:a1:c6:56:4f:db:34:6a:44:35:a4:0b:1c:10:
bf:a1:70:11:f4:03:a2:74:65:32:c2:2e:d5:57:b7:de:a7:cf:
b7:d7:b8:78:6d:29:09:35:8d:79:ca:74:cf:ad:7f:e1:97:f5:
e7:23:9a:2f:29:3a:6a:70:9e:3b:f8:e8:a4:fe:e3:e5:39:17:
a7:d5:20:bf:6c:c5:63:3d:3a:3b:53:1d:26:fa:99:c9:c0:26:
65:0c:5a:a6:a0:9c:a5:27:d7:0c:16:d6:8f:fd:8a:d7:33:7c:
23:dc:5f:02:1e:2e:9b:b8:6b:f0:58:65:cf:7c:1d:c2:59:89:
ea:a2:40:48:13:91:65:db:51:db:c2:90:6c:5e:ec:28:e4:d4:
37:f9:a8:9e:c0:88:a8:f7:59:a9:be:4f:d5:98:81:4e:4f:ea:
84:29:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:01 2024 by rpki-client on console-fra.rpki-client.org