Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/L9eAaTJeZ0QgVLQlE41bV4fVMoU.roa
File: L9eAaTJeZ0QgVLQlE41bV4fVMoU.roa (raw, json)
Hash identifier: DkN0SWK5Y1m2LN3psEeSZz1B1N6dtal5xD1SkyekMEs=
Subject key identifier: 2F:D7:80:69:32:5E:67:44:20:54:B4:25:13:8D:5B:57:87:D5:32:85
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 0582027F
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/L9eAaTJeZ0QgVLQlE41bV4fVMoU.roa
Signing time: Sat 01 Jan 2022 06:52:07 +0000
ROA not before: Sat 01 Jan 2022 06:52:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 193.47.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92406399 (0x582027f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Jan 1 06:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fd78069325e67442054b425138d5b5787d53285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:90:59:02:d5:fc:b2:0e:de:55:6d:fd:1d:
4a:e9:9a:15:04:dc:6d:4a:10:ee:88:08:b6:b7:c2:
d4:dc:df:8b:70:95:58:b8:3a:3b:51:cc:1b:ef:1e:
35:f2:dc:d5:e9:36:71:24:2d:ef:4a:c2:ac:dd:94:
3a:77:dc:1a:55:ca:a9:32:24:35:bf:41:48:48:d4:
93:6a:8d:22:5d:37:78:0f:fd:a1:74:0a:4c:0c:ea:
aa:b6:52:1b:c6:a8:d7:7b:68:45:b9:d8:21:37:c3:
8f:df:06:8d:8e:d8:81:63:8f:51:84:f8:81:97:83:
63:6d:86:a7:28:e7:67:45:af:a1:f0:6a:83:4e:f1:
c0:79:7e:63:3c:e6:41:37:8c:e2:51:0b:24:a2:86:
33:7b:84:3b:65:15:51:e9:16:97:0a:7a:47:44:98:
55:fa:65:ce:da:30:57:6b:db:4e:4b:89:85:56:ff:
5e:d6:f5:6d:2f:86:e6:df:60:8c:a2:57:b3:6c:92:
fb:4c:49:c4:30:c1:af:fb:b3:db:8b:7f:6b:b3:31:
42:6b:8c:04:dc:b2:13:9c:a2:e4:ae:18:e0:a0:45:
ef:4f:4c:5b:b8:94:8c:21:c1:cb:4b:c3:7d:e4:a6:
97:d2:cb:c7:98:bd:9c:cc:89:b2:52:3e:12:e9:92:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D7:80:69:32:5E:67:44:20:54:B4:25:13:8D:5B:57:87:D5:32:85
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/L9eAaTJeZ0QgVLQlE41bV4fVMoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.103.0/24
Signature Algorithm: sha256WithRSAEncryption
08:74:ff:66:5a:5d:de:b5:71:73:c3:67:7f:36:eb:42:e0:67:
a1:3f:a6:b5:88:ff:18:42:24:09:2b:c3:33:e4:c0:1b:40:32:
86:79:ef:87:32:28:9e:7e:26:3a:b8:24:5f:1e:f9:39:d7:87:
45:b8:ff:da:d2:9e:4e:51:5d:5a:ec:e7:5d:76:83:47:5d:30:
5d:fa:65:70:ed:ac:f4:5d:84:1a:94:1e:de:b4:98:3e:9a:53:
46:ac:40:ae:02:81:90:d5:df:25:9f:73:34:d9:ab:a8:aa:66:
34:37:37:d5:f1:c7:f4:6a:cd:bf:47:2d:ec:2b:02:d1:25:ae:
69:4c:8c:27:6a:a4:1d:b3:80:71:86:33:d9:44:79:48:82:ac:
b7:66:36:88:bc:d1:c5:bf:33:00:2a:9e:06:2a:b1:50:0c:94:
57:ff:43:c3:6a:32:79:6c:cd:23:07:04:06:14:28:42:41:01:
89:cd:cc:cc:58:0f:39:9b:3b:80:e2:17:75:95:ab:b8:fd:75:
cb:a9:20:93:d9:41:e3:3e:7c:92:96:78:c3:01:eb:49:c2:7d:
e1:87:e0:8a:61:7d:d3:94:2d:bc:6b:fa:c9:88:70:b0:64:e3:
b4:99:35:9e:28:21:65:b8:41:3e:51:4e:cd:7e:9d:14:33:ff:
a9:b9:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:08 2023 by rpki-client on console-fra.rpki-client.org