Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/iXJKkKwA6vYEaiNpLYn3kfiDlLA.roa
File: iXJKkKwA6vYEaiNpLYn3kfiDlLA.roa (raw, json)
Hash identifier: S+VJUbN7R8N1FjfIKuIadgazauVkXYM3ekFKMWt7Uec=
Subject key identifier: 89:72:4A:90:AC:00:EA:F6:04:6A:23:69:2D:89:F7:91:F8:83:94:B0
Certificate issuer: /CN=9f246632e857f370c3038f75545f122b8eb16d1a
Certificate serial: 9750EB
Authority key identifier: 9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyRmMuhX83DDA491VF8SK46xbRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/iXJKkKwA6vYEaiNpLYn3kfiDlLA.roa
Signing time: Sat 01 Jan 2022 03:00:17 +0000
ROA not before: Sat 01 Jan 2022 03:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9916651 (0x9750eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f246632e857f370c3038f75545f122b8eb16d1a
Validity
Not Before: Jan 1 03:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89724a90ac00eaf6046a23692d89f791f88394b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:9a:14:9b:f0:43:30:96:c4:eb:e0:98:92:
22:b9:c2:59:71:53:ef:d7:f4:32:ad:09:48:20:71:
6c:98:f7:f5:81:9c:bb:b5:10:05:f5:fc:9b:da:ed:
c8:1e:e8:5e:5a:8f:96:30:e7:50:c6:6f:ec:ab:54:
fb:bf:76:0d:a4:ab:85:56:2e:c5:c7:6e:df:e2:c3:
92:2e:3d:e5:a4:50:d6:67:0d:5c:b2:ed:dc:53:22:
7c:93:d5:5b:61:0a:23:08:99:9a:83:a3:2c:6a:03:
dc:fa:c9:b6:d7:c8:85:79:25:8f:3f:99:34:d3:db:
50:70:91:9e:62:d8:50:4b:88:93:ff:4c:ce:eb:f0:
31:9c:19:7d:32:4c:06:20:16:46:1d:88:24:76:b0:
38:79:f9:a8:2c:01:fb:7f:f8:ee:c7:d8:a3:8c:16:
05:5b:f3:64:43:1f:9a:da:e3:a1:8b:27:14:c5:19:
8d:a5:1c:ea:e5:5c:3f:bf:bb:50:45:ae:0a:01:a1:
de:28:a8:25:c8:6e:79:5d:1f:ed:f6:89:37:0a:7e:
d3:0e:ae:fe:59:4a:3b:9f:52:e4:47:a3:6e:54:78:
01:13:fc:99:1a:ed:0e:a0:6d:f3:6a:f2:50:91:14:
91:2f:fa:14:fb:50:4d:c5:d7:f6:6f:f9:5e:23:6c:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:72:4A:90:AC:00:EA:F6:04:6A:23:69:2D:89:F7:91:F8:83:94:B0
X509v3 Authority Key Identifier:
keyid:9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyRmMuhX83DDA491VF8SK46xbRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/iXJKkKwA6vYEaiNpLYn3kfiDlLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:61:ee:49:21:4c:f1:35:73:5b:53:f7:83:06:40:2b:23:b9:
d9:1b:14:0d:9d:8c:8d:b8:db:13:93:2f:f1:75:61:64:ce:ac:
0b:83:e8:2a:94:6c:0f:90:f6:19:23:b9:96:b2:bb:94:51:e9:
65:b0:57:ca:00:bb:ce:d1:bb:f8:e8:c6:fd:f3:03:e0:61:a4:
6d:e9:41:9b:08:20:2a:50:4c:22:ce:d3:fb:63:79:c0:14:4d:
9e:b1:02:2d:70:a2:3a:92:f5:e1:70:14:59:41:62:44:b8:fe:
4c:9c:8a:df:c7:a4:4b:20:42:5e:29:e4:06:9e:a9:1c:12:6c:
08:8f:28:92:91:c5:a5:83:57:31:d5:9f:f0:ae:f2:89:45:ee:
c1:80:fa:58:0b:82:3e:d4:69:eb:9f:74:b3:1b:6d:5b:f4:60:
86:2a:14:70:f2:fa:53:53:b7:fe:a1:2a:ff:18:89:a1:67:aa:
7a:4d:99:d0:cb:41:a1:d3:08:ac:d8:c9:a8:c7:ba:27:e3:8a:
93:f2:a5:06:57:73:a5:d6:fe:b0:3b:7b:f1:cc:49:a1:65:a6:
d4:b6:08:e8:7e:91:94:4e:51:9c:1e:54:2d:ec:c4:05:1a:f0:
7e:9b:02:e1:87:8a:6f:9d:66:6f:a9:aa:7c:0d:1b:39:5a:00:
1e:72:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-fra.rpki-client.org