Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/GvlfXcd8EjJuufwb6F_t9mq_U50.roa
File: GvlfXcd8EjJuufwb6F_t9mq_U50.roa (raw, json)
Hash identifier: Rmld1lYj+sA/g8rgj8EwWzoRc8ifYikmpUezYwtJx9U=
Subject key identifier: 1A:F9:5F:5D:C7:7C:12:32:6E:B9:FC:1B:E8:5F:ED:F6:6A:BF:53:9D
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 01845796FED1A8A08B3BF39DD71014226AB4
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/GvlfXcd8EjJuufwb6F_t9mq_U50.roa
Signing time: Tue 08 Nov 2022 14:13:44 +0000
ROA not before: Tue 08 Nov 2022 14:13:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.207.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:96:fe:d1:a8:a0:8b:3b:f3:9d:d7:10:14:22:6a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Nov 8 14:13:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1af95f5dc77c12326eb9fc1be85fedf66abf539d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:1d:10:b1:fb:c1:b1:c1:9c:c2:2f:06:d1:
8a:d6:d6:a7:d3:f5:7a:de:d7:0b:99:68:b1:ea:91:
62:7c:1f:d1:c2:02:14:29:51:95:80:58:32:16:8e:
25:f6:36:de:81:e5:c4:ed:ae:a0:3a:f3:b3:75:fa:
e8:13:0b:42:f8:18:15:64:58:04:b3:2c:1d:1d:37:
a6:d0:c7:b6:2e:65:72:31:62:8f:17:d0:6d:97:24:
18:a6:50:fb:d0:dd:0c:4f:e2:b0:ed:83:32:e7:72:
e6:d3:70:a2:e2:6f:f5:c9:7e:60:cc:c0:5e:0c:a7:
35:48:06:0b:f0:fd:5c:8f:8c:c3:7e:f7:8c:64:14:
3f:31:e3:24:1e:e5:21:76:2c:60:be:51:95:95:6f:
57:3d:d9:85:fd:05:57:1d:a9:8e:0f:9e:a3:eb:73:
00:52:2e:51:69:0b:07:4f:88:2f:0b:c2:6d:49:f9:
5f:28:27:88:3b:a1:04:fa:0e:88:4d:0d:94:aa:cd:
8f:05:da:ab:13:e8:8a:37:4b:83:07:f2:1e:29:92:
c1:3e:06:c4:82:9e:6e:a6:56:76:60:e7:3e:d6:ed:
88:96:35:d9:2d:17:06:64:bf:31:f7:a8:e0:7f:89:
2d:1d:0e:ed:31:8d:eb:99:f5:e4:97:a7:99:84:58:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:5F:5D:C7:7C:12:32:6E:B9:FC:1B:E8:5F:ED:F6:6A:BF:53:9D
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/GvlfXcd8EjJuufwb6F_t9mq_U50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:74:91:69:86:7c:bf:e7:48:85:81:24:fc:08:8c:59:d1:91:
fc:52:a2:38:a7:b3:f1:8a:0a:99:2d:c8:38:d5:65:82:8c:e7:
cd:aa:51:5a:df:e9:61:ff:74:d3:d7:89:f3:ff:bf:33:0e:84:
58:4e:cf:31:c6:ed:63:35:e4:33:ff:15:12:9d:a8:c7:72:9e:
f0:eb:f7:ad:e0:40:43:6f:e7:47:c8:44:c8:2d:a9:34:7e:53:
29:59:86:27:85:c2:b7:08:88:6f:32:fc:34:0f:d5:a5:3e:d5:
12:cd:51:f8:a9:a8:b1:d4:c6:a2:c0:72:8a:9b:b4:e9:d1:92:
47:65:bb:49:c9:a0:f8:ab:c1:c4:ac:07:ad:1d:65:66:1f:36:
37:4e:b7:e9:78:3a:0c:9a:78:a5:bc:56:5b:64:ae:3b:ea:ae:
f5:fd:17:a6:81:8f:90:a0:71:63:a0:b1:1b:26:05:80:a9:f0:
f3:1d:40:6f:50:b9:e4:77:02:4c:73:99:d1:c1:eb:2e:ca:88:
5d:19:f4:59:60:a3:36:1e:9c:65:11:fc:17:8f:44:55:90:f4:
39:58:06:aa:74:44:03:82:ca:8e:fd:1c:3d:6a:0a:ac:77:52:
30:a7:6f:f7:67:fb:79:6a:15:b7:c5:f0:e3:b9:e0:7c:68:53:
f3:05:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:29 2023 by rpki-client on console-fra.rpki-client.org