Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/G9RCXWuRqNF9dMxWmCEUScdI_qY.roa
File: G9RCXWuRqNF9dMxWmCEUScdI_qY.roa (raw, json)
Hash identifier: i3QsrtQcUyVhtjHF3PSmDRvVwAtIC5ULmzmF7VwVkgE=
Subject key identifier: 1B:D4:42:5D:6B:91:A8:D1:7D:74:CC:56:98:21:14:49:C7:48:FE:A6
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 02AA64
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/G9RCXWuRqNF9dMxWmCEUScdI_qY.roa
Signing time: Sat 14 May 2022 04:45:40 +0000
ROA not before: Sat 14 May 2022 04:45:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20703
IP address blocks: 193.104.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174692 (0x2aa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: May 14 04:45:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bd4425d6b91a8d17d74cc5698211449c748fea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:8e:8a:2f:2b:87:f1:bf:31:3a:4c:87:f2:
df:10:ef:b6:5b:92:7c:85:49:f1:0a:6f:a7:a8:92:
2d:c2:fd:59:1e:ee:62:f8:5d:cf:77:6d:5d:4a:5c:
88:69:73:8d:7b:de:a6:ae:58:4e:e6:e6:11:74:b9:
66:d0:57:01:18:74:31:0e:4d:a5:83:4d:37:0a:c1:
11:f7:f5:5c:df:ad:92:49:95:ce:00:88:7f:6a:36:
9d:bf:2b:22:ea:55:5c:62:cc:75:ae:82:07:fb:3e:
9d:ab:13:fb:57:8d:8c:da:ee:2d:29:f1:57:78:9d:
dc:a9:7b:a0:cd:47:9e:6f:ac:e5:24:b5:00:88:f6:
18:3f:80:9c:e9:aa:01:59:20:96:ec:26:5a:2b:29:
ca:f8:99:b6:76:a9:f4:39:83:7f:f0:c3:33:0c:03:
60:74:11:a3:b6:af:89:7a:37:1c:f8:df:f9:a1:91:
2e:26:27:a8:75:24:7e:0f:87:af:84:7c:5e:5d:84:
87:32:9b:7e:2e:30:87:42:1b:4e:92:3d:9f:ea:9f:
9a:8c:4f:87:21:24:9a:f9:de:28:b9:31:fb:27:8f:
4b:8e:ac:0f:ef:b9:74:bd:be:ef:bd:9b:9b:a8:79:
ab:c9:cb:09:ec:87:9f:15:72:2f:10:c9:91:87:b9:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:42:5D:6B:91:A8:D1:7D:74:CC:56:98:21:14:49:C7:48:FE:A6
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/G9RCXWuRqNF9dMxWmCEUScdI_qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.30.0/24
Signature Algorithm: sha256WithRSAEncryption
67:df:f9:a2:6c:14:51:c7:18:9a:63:d4:6d:96:78:c5:ff:b0:
f4:a3:f2:4b:e4:25:55:01:2d:d2:88:d3:0e:eb:a3:5f:9f:9a:
fe:3c:76:9e:e0:76:56:c0:20:ed:7f:f4:b7:62:3e:6c:c2:58:
53:6b:6c:a0:e3:ea:97:c3:ca:7f:ee:9c:2a:29:98:db:87:11:
b5:35:3a:cc:fa:ae:61:82:94:40:7c:d9:d7:44:75:ac:49:c6:
d8:7d:32:e9:80:86:70:af:82:0a:c7:c2:73:09:db:c7:2f:2d:
33:26:90:b6:20:cc:64:c0:2a:0d:63:7d:82:d3:ef:c4:db:ca:
99:14:9b:b2:cc:ea:46:d8:df:0b:10:c0:e8:33:ee:15:b7:52:
33:da:b9:77:36:44:71:88:b8:19:82:ae:d7:c3:c7:4d:77:54:
fb:ff:71:ce:e9:49:a1:38:82:6c:04:81:a8:9d:e3:11:66:c0:
2d:04:44:12:94:43:22:25:83:e3:99:e1:50:f8:cf:cc:6f:3d:
69:e6:ca:6a:1c:50:a3:fe:72:4a:a2:8f:5d:6d:ba:0d:ec:96:
de:a1:55:07:83:72:42:20:5f:c0:bd:6c:2b:d0:31:a2:5d:36:
98:be:fe:a7:14:2a:5f:b4:dd:dc:7f:1b:f2:98:d8:d8:fc:c1:
88:69:e6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:44 2024 by rpki-client on console-fra.rpki-client.org