Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/ige3ltjqE3egRm2j8B_icA0cg2w.roa
File: ige3ltjqE3egRm2j8B_icA0cg2w.roa (raw, json)
Hash identifier: E4E7E7hooDafnpzdhizLJNxQMGPZa58ft0upCEGTXVA=
Subject key identifier: 8A:07:B7:96:D8:EA:13:77:A0:46:6D:A3:F0:1F:E2:70:0D:1C:83:6C
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 0182921F01EBDD74A58CD9B0A2BE5A6F423C
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/ige3ltjqE3egRm2j8B_icA0cg2w.roa
Signing time: Fri 12 Aug 2022 12:54:41 +0000
ROA not before: Fri 12 Aug 2022 12:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.39.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:1f:01:eb:dd:74:a5:8c:d9:b0:a2:be:5a:6f:42:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Aug 12 12:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a07b796d8ea1377a0466da3f01fe2700d1c836c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:9e:ba:e0:ef:39:9e:19:2f:0f:d6:fd:fb:
e0:1b:d2:63:d8:f9:02:bd:a3:5f:24:f7:57:fe:64:
5a:29:b7:a0:38:cb:c9:b4:51:90:95:b5:4e:77:12:
c9:82:ba:e9:7a:e1:5c:b3:d2:de:ee:15:27:5a:68:
1a:1e:98:f8:49:5e:9f:de:d6:49:e4:b1:4a:84:91:
5c:ed:b3:8a:7e:bd:b2:87:6b:46:e5:15:8a:ad:41:
f2:be:0c:bd:eb:3d:16:7f:e6:dc:54:1b:af:76:7c:
53:0a:15:f4:67:a6:0d:88:08:72:66:3f:49:d9:eb:
e5:3f:87:3f:ec:37:f0:59:27:ff:55:61:b7:ba:3a:
87:69:11:75:0e:b1:a3:a6:51:88:85:28:b9:c2:94:
8e:3a:0b:66:4d:68:8f:5e:32:9c:81:b1:68:ba:8c:
bc:e4:23:b5:e5:34:11:d5:f5:e1:e2:53:27:48:e7:
7d:60:d9:b2:f5:30:a5:fc:5c:5c:4e:7c:f0:ab:52:
1b:c8:14:a3:9c:47:44:0b:d0:1b:93:29:25:03:4c:
6d:e7:7d:bf:75:1e:e2:88:d5:69:a0:6a:0d:a8:e4:
21:43:fd:03:a3:f5:66:40:a2:58:e7:7e:7c:38:98:
8a:11:68:38:7c:11:4e:3a:93:b0:44:3b:9b:80:22:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:07:B7:96:D8:EA:13:77:A0:46:6D:A3:F0:1F:E2:70:0D:1C:83:6C
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/ige3ltjqE3egRm2j8B_icA0cg2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.114.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:78:48:64:3e:31:45:95:f4:3f:50:2e:4a:28:92:4f:c3:9b:
b3:89:83:64:b7:e9:33:b2:5b:82:2d:c6:7d:2a:0b:2b:81:0a:
13:26:71:ae:b8:57:32:b3:0a:68:b0:62:35:94:4d:5a:26:d9:
8c:07:9b:e7:fd:b3:8b:c5:f4:4e:0a:d2:16:dc:dc:bf:fe:2b:
4a:af:11:e8:7d:93:32:74:97:83:e6:54:c7:6e:a5:5c:df:62:
6e:6b:60:5f:06:bc:bd:37:1a:3b:0e:0b:fa:22:b5:6b:21:db:
c7:f6:e0:d1:a9:c5:ea:6f:e4:8a:fd:65:b9:f4:9d:40:09:cc:
25:a7:fe:92:06:de:59:8b:b0:33:e8:ce:ef:1c:6f:1a:2c:b7:
41:27:f1:74:27:ce:53:8b:60:c7:ff:bb:47:f9:3d:31:8f:2c:
64:80:3a:f6:b6:6e:a7:35:9e:60:f7:aa:d2:d5:ef:d1:fc:d9:
9e:ae:36:7d:47:97:7f:84:cb:dd:84:fd:7c:0b:c1:8e:74:81:
72:92:0a:ba:db:f1:61:cc:b0:59:1c:64:e8:05:13:c2:ea:bd:
ec:4b:4b:f0:7c:bb:83:d2:c4:9e:d2:91:39:78:90:bb:35:1c:
70:60:c5:32:69:6e:fd:e8:86:f4:2a:08:66:96:92:18:52:6b:
75:82:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:43 2023 by rpki-client on console-ams.rpki-client.org