Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/KBUg9435ppuavO4Zr-R2mLrps2g.roa
File: KBUg9435ppuavO4Zr-R2mLrps2g.roa (raw, json)
Hash identifier: Vw/kFN9RWx3RG0XQYU6n9js8P/5B4dk09aiX7FQojy0=
Subject key identifier: 28:15:20:F7:8D:F9:A6:9B:9A:BC:EE:19:AF:E4:76:98:BA:E9:B3:68
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 01845796FE11E095A4A9873946AAEF46EBE9
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/KBUg9435ppuavO4Zr-R2mLrps2g.roa
Signing time: Tue 08 Nov 2022 14:13:43 +0000
ROA not before: Tue 08 Nov 2022 14:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.207.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:96:fe:11:e0:95:a4:a9:87:39:46:aa:ef:46:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Nov 8 14:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=281520f78df9a69b9abcee19afe47698bae9b368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:2f:ea:94:31:c8:f4:f5:3b:30:8f:85:e1:
c8:23:50:da:4c:80:45:4b:aa:4f:08:b0:3f:32:df:
ca:ed:8f:5b:39:6f:e0:e3:2c:f1:b5:bc:59:a0:72:
46:fd:c9:21:d9:f4:63:d2:b4:d6:66:29:1c:3a:86:
96:a5:fe:4d:21:11:93:59:7d:b9:49:bf:68:d1:29:
fd:ff:bb:e4:9b:64:19:04:8b:2e:5d:12:5b:9d:74:
46:7d:aa:66:9c:95:0f:47:6f:56:ab:97:69:13:45:
47:b4:ae:b9:66:98:b7:2f:b5:95:b9:af:85:f9:16:
94:c3:75:11:ef:19:06:84:6c:88:df:c2:2d:17:50:
f7:48:24:ea:d1:28:7b:64:81:e7:35:54:b2:7d:bb:
4b:1c:9e:02:75:49:43:91:7c:54:12:ea:77:64:ed:
fe:23:0c:63:ec:a9:b2:75:1e:3d:6f:e7:3b:24:6e:
32:f8:07:18:f4:24:84:ed:72:9c:9b:48:de:2e:da:
a8:f1:ed:59:63:88:c3:f2:84:ff:9e:6d:98:72:a1:
3a:23:ea:59:b1:94:b1:ee:84:d2:13:ee:fc:41:a3:
f0:bb:5a:6d:6b:5f:cc:27:0a:a4:e2:bc:e5:0b:5e:
66:78:f4:ac:2a:df:14:72:f0:3a:dd:b8:55:29:a6:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:15:20:F7:8D:F9:A6:9B:9A:BC:EE:19:AF:E4:76:98:BA:E9:B3:68
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/KBUg9435ppuavO4Zr-R2mLrps2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a6:c1:fd:1c:61:95:99:1e:6f:df:26:ff:78:28:91:e8:54:
ba:d4:9e:47:6c:71:6b:53:7e:59:f8:ba:0d:ae:c7:9b:d4:42:
47:7d:bb:42:23:9a:3b:59:da:a3:fb:c9:6a:7f:b0:9e:9b:46:
7f:c6:79:ea:1f:cc:ca:e4:46:e1:d3:80:7b:7a:ef:27:99:d5:
4f:fb:b6:ee:70:27:6e:a8:40:a4:f3:b9:39:ef:e1:2e:a7:96:
8a:cf:1a:d2:76:86:ba:d6:4a:d6:7b:4c:2b:e9:1e:f4:93:40:
3f:47:73:2e:2a:13:54:13:5b:b5:89:b7:7f:8f:d1:46:7b:87:
d7:20:e2:4b:3f:06:f7:14:56:de:e4:5c:17:e4:17:c5:52:49:
34:10:35:b2:5e:a2:9f:74:ba:85:7e:1a:ea:02:f9:fb:05:6a:
63:b6:48:e6:ff:d0:db:86:ec:c3:cf:41:69:d7:34:b0:aa:42:
e4:ff:20:a1:b3:cf:7a:a2:03:52:bc:c1:d3:6d:a8:45:09:e4:
59:6f:72:c8:25:6a:f4:bf:2b:9f:2e:60:d1:b5:57:7d:de:81:
6e:58:8a:44:ad:b5:ce:5f:51:d9:4d:54:b6:f5:19:d0:29:93:
62:1d:02:91:96:ed:f9:b8:2c:35:98:62:15:18:f9:13:c1:6a:
b5:58:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:23 2023 by rpki-client on console-ams.rpki-client.org