Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/fFHzLtJoebCjXrFlA7eSA3kaZCU.roa
File: fFHzLtJoebCjXrFlA7eSA3kaZCU.roa (raw, json)
Hash identifier: YHDTtHNRbvCYJBtTdj+6xXHdUah7Q4ETLnooFgByzAw=
Subject key identifier: 7C:51:F3:2E:D2:68:79:B0:A3:5E:B1:65:03:B7:92:03:79:1A:64:25
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 078E2334
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/fFHzLtJoebCjXrFlA7eSA3kaZCU.roa
Signing time: Sat 01 Jan 2022 07:59:16 +0000
ROA not before: Sat 01 Jan 2022 07:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197448
IP address blocks: 193.239.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126755636 (0x78e2334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Jan 1 07:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c51f32ed26879b0a35eb16503b79203791a6425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:65:fa:2b:4b:9b:de:26:d7:8f:40:b5:87:
52:c5:86:ba:a0:d7:f8:23:e4:0d:88:b2:7f:06:69:
4a:8f:49:56:71:93:2b:fc:60:ec:ca:c9:d9:8b:c5:
d3:26:30:19:b3:c8:fc:a0:f0:35:2b:3e:54:89:9b:
42:4d:2f:4c:49:d0:96:65:d0:86:c9:34:7f:07:27:
02:75:5f:a4:0b:b6:e3:02:99:2f:a2:ca:0e:d2:66:
6d:02:1c:01:92:f9:21:d0:9c:2b:9a:6c:7f:c7:10:
94:00:4d:e8:91:af:e9:93:ec:b1:ac:0e:b0:e9:07:
4d:63:94:50:a0:99:40:4a:ad:ed:42:f9:4e:39:f3:
22:bd:f3:fd:af:77:d6:35:a5:d0:53:63:9e:95:a4:
75:89:01:10:e1:d2:f0:7b:23:c9:c5:88:ed:08:05:
0a:12:27:07:4f:b6:e3:92:b7:dd:07:5f:1e:82:74:
21:fc:de:6e:36:e6:5d:53:43:21:67:94:ea:18:99:
30:75:f2:22:ed:2d:5e:4a:19:44:3d:b4:15:87:89:
df:81:46:51:0c:4a:14:b7:71:89:de:a6:98:d8:2c:
05:d0:cd:ec:a4:e6:0d:bd:f8:21:1b:68:eb:b4:83:
11:ce:a2:bd:90:8d:9b:43:74:0f:0d:b7:2a:95:32:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:F3:2E:D2:68:79:B0:A3:5E:B1:65:03:B7:92:03:79:1A:64:25
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/fFHzLtJoebCjXrFlA7eSA3kaZCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.205.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3c:d2:ba:5c:bf:a5:83:8a:f2:99:35:a7:88:45:f3:12:af:
08:2c:f7:db:d6:2e:0e:44:7e:fd:bc:ed:c3:1f:17:bc:56:a4:
1d:bf:df:e3:83:af:93:37:24:95:67:b3:45:7e:39:5a:c7:f3:
fe:6b:26:65:0e:46:b0:3c:50:3d:93:16:67:6f:4c:16:54:41:
19:af:ae:32:51:67:ff:fd:ce:4c:c5:b0:f9:62:d4:04:ad:69:
f9:91:76:be:f7:5e:7e:30:78:c2:9c:c4:50:2a:ca:6e:56:cd:
22:f1:28:95:00:64:7f:74:b0:c2:30:7b:7e:ab:e5:05:65:14:
08:57:a8:16:2b:a0:24:c3:4d:ad:57:a1:79:ee:5b:6e:72:3c:
3a:41:0a:6f:ca:30:39:71:3c:03:ec:ba:12:a9:b1:5f:e2:10:
02:9a:63:db:f1:e1:9c:32:70:33:4f:0d:01:a2:7a:99:72:ea:
8a:f0:98:46:e5:d7:fe:26:72:77:9b:14:d3:fa:34:eb:e8:0c:
5f:2e:18:7e:6e:34:29:61:31:90:4d:50:ac:1b:62:b4:c2:a2:
d2:3a:fa:23:fb:3f:e9:99:88:c3:79:c8:11:f2:71:99:1b:ac:
fc:ad:17:a3:66:1b:7e:07:af:37:a5:19:7b:5e:bd:58:bc:b2:
69:c3:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:29 2024 by rpki-client on console-ams.rpki-client.org