Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/Pc2cOz4aXXr87TMY1Jcj3Xn9_EE.roa
File: Pc2cOz4aXXr87TMY1Jcj3Xn9_EE.roa (raw, json)
Hash identifier: UkBdvtLdxEc5yt7AAU0XgLwDk1Uemh2itey+ahXKbFA=
Subject key identifier: 3D:CD:9C:3B:3E:1A:5D:7A:FC:ED:33:18:D4:97:23:DD:79:FD:FC:41
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 0182921F0323CC65CFDD0B00C34A44C3FFA5
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/Pc2cOz4aXXr87TMY1Jcj3Xn9_EE.roa
Signing time: Fri 12 Aug 2022 12:54:41 +0000
ROA not before: Fri 12 Aug 2022 12:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.39.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:1f:03:23:cc:65:cf:dd:0b:00:c3:4a:44:c3:ff:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Aug 12 12:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dcd9c3b3e1a5d7afced3318d49723dd79fdfc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2a:14:b1:64:b6:1c:82:6c:2f:d3:03:7b:7e:
1e:7f:23:94:80:8c:ee:ca:1f:cd:3f:59:4a:64:b8:
05:a4:d4:78:a8:75:5a:56:bf:7f:e6:3a:f9:64:f2:
7f:e2:72:fa:9b:d7:94:26:d0:a4:fa:f9:0c:e1:d4:
4a:2b:8c:db:ea:2b:94:d2:ae:e9:f4:00:75:52:38:
c1:5a:bc:37:86:1a:1a:67:e0:2c:db:80:4d:a4:77:
48:00:e0:50:95:b4:25:c5:35:cf:b9:4b:dd:e8:76:
61:3d:20:89:51:3c:4b:f6:4f:55:5b:4c:32:cd:be:
dd:88:c0:74:75:cf:48:df:a8:96:6d:ae:02:65:20:
7c:c5:89:f4:2a:ef:57:7e:d7:1f:a9:a9:20:ea:17:
34:71:c5:da:ef:1a:e8:d9:26:0c:7b:6b:ce:54:7f:
80:39:78:50:10:b8:c3:d3:f3:2a:d3:de:6a:04:d1:
b8:01:84:81:2f:d0:57:bf:25:93:b1:a3:1c:fe:b1:
81:6f:9e:1a:2d:a7:39:24:3e:9f:fc:3f:42:c4:10:
b0:a5:d2:3b:da:25:7d:90:af:3c:7c:f6:11:0c:ee:
a7:d0:64:75:0e:49:1d:7b:d2:0c:93:15:d6:c6:15:
f3:1d:c0:4c:cb:cb:3e:4b:93:08:81:fe:77:25:75:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:9C:3B:3E:1A:5D:7A:FC:ED:33:18:D4:97:23:DD:79:FD:FC:41
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/Pc2cOz4aXXr87TMY1Jcj3Xn9_EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f6:c1:e3:1d:c9:d8:2f:76:64:7f:61:c9:b8:38:49:87:03:
0a:a5:bb:51:27:d8:0b:d3:78:95:83:8d:ef:d8:36:de:b0:64:
8e:8e:5d:b5:9b:a8:b3:f2:e6:81:d2:c4:9c:a0:c9:db:ee:7e:
f9:08:ad:15:0f:33:e3:31:e5:ea:0a:bf:38:e0:8b:54:de:54:
47:2b:5e:e6:c1:fa:65:ca:6a:22:a1:83:75:bf:d4:d9:6f:78:
9a:f3:09:be:56:fa:5b:57:58:a2:a2:7e:be:fc:b1:4c:f6:ab:
03:af:7d:44:de:a9:b8:9f:a7:8d:3c:2a:8d:54:af:02:51:62:
5c:47:dd:76:9e:22:6b:5f:16:46:c3:42:82:92:f7:70:14:be:
7f:e2:47:cd:bc:e0:44:a1:ad:ee:71:3a:70:3f:e9:b7:5c:9c:
b8:c7:65:7b:5c:bc:50:43:0e:89:e6:aa:5d:07:71:f1:89:62:
1f:55:0d:40:01:2a:2f:28:13:f7:03:62:16:b3:da:2c:bd:61:
ce:8f:03:18:7a:99:f5:b8:c6:c5:ea:dc:8e:4b:ec:29:8e:c9:
2a:a7:6a:eb:db:9a:2a:85:88:12:77:7a:fb:be:99:68:4d:02:
c9:80:c1:a8:07:c5:05:aa:ea:cc:7c:8e:3b:19:16:f1:2c:aa:
7e:9c:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:43 2023 by rpki-client on console-ams.rpki-client.org