Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/fGXw6ks5yyIhxvW9oYny35RSYOU.roa
File: fGXw6ks5yyIhxvW9oYny35RSYOU.roa (raw, json)
Hash identifier: hj2uAiXVvDhbUojxN5QCReYzH2Vx6SeC4oNCCXkf+S8=
Subject key identifier: 7C:65:F0:EA:4B:39:CB:22:21:C6:F5:BD:A1:89:F2:DF:94:52:60:E5
Certificate issuer: /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial: 0AA0C10C
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/fGXw6ks5yyIhxvW9oYny35RSYOU.roa
Signing time: Sat 01 Jan 2022 05:02:38 +0000
ROA not before: Sat 01 Jan 2022 05:02:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178307340 (0xaa0c10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Validity
Not Before: Jan 1 05:02:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c65f0ea4b39cb2221c6f5bda189f2df945260e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:49:99:b0:43:9e:0f:d5:67:bf:86:06:69:
5d:e7:8d:9b:28:a0:89:35:57:c3:46:4b:ec:95:b1:
e3:a6:be:25:58:3b:26:e1:63:79:10:5d:cc:80:6a:
1f:9e:3e:1f:c5:1b:e7:1a:82:8e:06:c6:33:09:8e:
76:04:48:09:7d:c0:b0:1f:7d:0a:51:44:f4:19:fb:
f9:67:62:4e:1a:35:31:96:27:d4:1f:4e:a0:66:35:
58:cd:33:0c:bc:5a:43:04:55:f2:35:80:f5:df:97:
94:f6:40:e9:5e:fa:8d:05:58:44:a7:da:0e:03:87:
5a:58:8a:27:c5:72:8e:8e:b7:84:4a:b6:f0:a3:c3:
1f:a2:28:1b:10:33:1d:71:41:76:f1:22:5f:e6:f1:
19:f8:56:d9:77:33:ae:c3:9c:3a:c4:00:48:bb:46:
46:46:28:82:46:ff:fd:b2:fa:05:e0:25:63:6a:a9:
cc:15:a3:c0:40:76:af:dc:d4:55:d7:e2:2e:04:04:
2b:ba:dd:f8:af:6c:cd:db:0b:14:42:fe:6c:fd:56:
a4:e1:33:a8:0e:8f:5b:ac:52:bb:ef:21:ed:c0:a9:
25:fc:df:51:ea:90:94:da:73:f6:c0:c3:3f:66:14:
d3:ae:d3:a3:84:fb:fb:1a:2a:25:6d:5d:71:4f:45:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:65:F0:EA:4B:39:CB:22:21:C6:F5:BD:A1:89:F2:DF:94:52:60:E5
X509v3 Authority Key Identifier:
keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/fGXw6ks5yyIhxvW9oYny35RSYOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.160.0/20
Signature Algorithm: sha256WithRSAEncryption
12:78:c7:c2:15:d2:f5:e9:8c:ea:9e:7e:0b:27:60:2d:ef:79:
3e:92:a4:19:28:9f:da:30:24:73:56:ab:b4:05:35:4d:d5:2e:
06:0c:bd:d3:93:e7:7a:85:be:f6:be:ce:2f:28:45:09:18:48:
12:42:53:44:38:c6:9a:94:f4:08:f6:b4:30:33:d9:23:cf:ee:
42:64:cf:fd:67:e7:4b:5d:b8:15:15:35:02:f3:b6:a7:3a:c2:
05:82:e1:d0:b8:7d:74:4d:b3:4e:68:d2:b9:c6:e9:57:3c:77:
e0:8b:a0:e6:3b:06:b8:ce:fb:e7:d2:b7:5c:5d:c0:4c:86:41:
ba:5e:93:0c:51:3a:4a:0c:b5:18:73:2b:c5:22:12:9a:6d:b5:
fd:eb:83:7d:11:b0:b3:5e:ff:04:f0:e1:58:ef:1b:2f:1a:c5:
15:67:f3:84:e9:b4:9e:da:7a:58:f4:85:c2:a9:2c:a8:c1:11:
5e:12:66:2c:0b:c7:56:7b:45:86:67:2e:02:0d:a5:55:c2:b6:
26:e1:28:fb:3b:2e:63:8a:9f:f7:f2:23:18:10:46:59:e5:95:
73:69:43:d3:de:92:2f:32:2f:c2:9b:b6:d0:7d:1e:9e:ce:8f:
c6:80:59:eb:f0:8e:11:8a:67:ff:c5:d8:ca:a5:e9:26:78:bb:
6a:44:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:14 2024 by rpki-client on console-ams.rpki-client.org