Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/EcXf-gGNqkTtmteBXPPbGIFHTlU.roa
File: EcXf-gGNqkTtmteBXPPbGIFHTlU.roa (raw, json)
Hash identifier: VD4Ys6ddoJnJRp61MCYoKaC00sl342cQYDTrgACIv0U=
Subject key identifier: 11:C5:DF:FA:01:8D:AA:44:ED:9A:D7:81:5C:F3:DB:18:81:47:4E:55
Certificate issuer: /CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Certificate serial: 01846C0032DCC267196AF57EB78B94DFB559
Authority key identifier: 37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/EcXf-gGNqkTtmteBXPPbGIFHTlU.roa
Signing time: Sat 12 Nov 2022 13:21:03 +0000
ROA not before: Sat 12 Nov 2022 13:21:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207744
IP address blocks: 188.190.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6c:00:32:dc:c2:67:19:6a:f5:7e:b7:8b:94:df:b5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Validity
Not Before: Nov 12 13:21:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11c5dffa018daa44ed9ad7815cf3db1881474e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:b1:41:c9:ac:30:08:65:be:5c:0e:8d:74:
3f:30:3e:ed:57:6e:8b:9a:f5:1e:ae:da:1e:67:6e:
31:31:5a:66:64:1b:b5:68:b1:eb:22:d6:b1:a7:9f:
84:37:f5:47:9c:71:7b:4a:2d:4b:06:fd:ec:90:1f:
80:66:a2:c4:1b:64:51:ef:db:c2:98:ca:7e:1d:09:
fd:4b:40:fc:50:73:91:38:90:55:ed:73:a4:e5:8b:
27:f0:5d:d1:89:2e:bd:26:8b:8d:a0:2e:2f:7b:c8:
22:f6:d2:47:19:5b:83:8b:ca:3f:03:5a:0e:f6:cf:
f5:46:44:33:29:86:0f:c3:1c:61:0c:c8:e3:48:d5:
24:47:9f:6b:97:d9:dd:4f:be:32:d7:5c:59:be:91:
53:7c:0c:c8:8f:8a:a0:bc:7a:aa:6b:3d:30:ee:5c:
1b:fc:6c:c6:57:bf:b5:03:94:01:cb:58:9d:55:52:
ea:b8:06:48:dd:dd:0c:f1:20:52:fc:12:8a:fb:fa:
4d:4d:9b:09:c9:e8:7f:d6:27:99:30:f8:f0:2f:92:
ab:4b:93:bb:04:df:13:dc:13:0c:d6:32:58:8c:d4:
3d:7c:04:14:b5:ee:71:14:df:e7:e2:97:02:40:37:
bc:bf:77:10:1d:8e:3c:a7:a1:bc:88:6e:fb:5c:56:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:DF:FA:01:8D:AA:44:ED:9A:D7:81:5C:F3:DB:18:81:47:4E:55
X509v3 Authority Key Identifier:
keyid:37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/EcXf-gGNqkTtmteBXPPbGIFHTlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.192.0/19
Signature Algorithm: sha256WithRSAEncryption
59:a6:e3:13:60:e7:b6:08:99:05:8c:7c:63:26:ca:a2:ab:4f:
9a:27:66:4f:34:1b:b7:f4:74:38:b1:9b:a2:91:ec:ba:e6:60:
6d:ad:31:fd:f7:93:82:f5:03:9e:12:82:0d:dd:2f:b8:7a:5d:
c8:12:83:9c:fc:23:da:71:c1:65:fe:39:a4:3f:46:fa:37:d7:
0c:6b:24:bc:e9:c8:95:55:c2:75:c7:0e:3e:54:67:97:e6:e4:
15:89:d8:03:1c:d0:5b:0f:d0:af:d4:a8:7f:56:f5:9b:cc:1c:
6d:32:d2:30:62:c4:cd:4b:f5:95:59:66:5f:10:39:30:0d:d1:
f0:8d:42:ee:c4:dc:74:52:70:e5:cc:d9:da:80:52:4b:dc:73:
b5:20:69:01:b6:ff:f9:a1:34:8b:8e:89:6d:9c:3a:46:9d:68:
3b:7d:3a:30:ba:7c:34:b0:e2:71:74:bf:a8:1e:79:04:e7:92:
0e:d1:d1:b4:6a:f5:0b:79:93:78:89:d9:78:18:38:e8:49:94:
86:dc:97:da:fd:ac:f1:75:f3:d6:01:8d:18:08:99:4d:34:18:
d9:81:47:02:28:11:6c:9f:82:d1:42:e1:5f:80:3d:67:fc:77:
4f:bd:18:b7:c6:c6:83:10:cb:28:dd:0a:fc:6e:85:2b:5d:79:
3a:65:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:50 2024 by rpki-client on console-fra.rpki-client.org