Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/1Cg_Hm99U5Ui5UEVX0dtVl-Gx90.roa
File: 1Cg_Hm99U5Ui5UEVX0dtVl-Gx90.roa (raw, json)
Hash identifier: qjxnWt4MC+xZScLDPsKrZp1N5B0FiYceK/NiswwW8kY=
Subject key identifier: D4:28:3F:1E:6F:7D:53:95:22:E5:41:15:5F:47:6D:56:5F:86:C7:DD
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 87B751
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/1Cg_Hm99U5Ui5UEVX0dtVl-Gx90.roa
Signing time: Sat 01 Jan 2022 03:57:53 +0000
ROA not before: Sat 01 Jan 2022 03:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210553
IP address blocks: 193.3.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8894289 (0x87b751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Jan 1 03:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4283f1e6f7d539522e541155f476d565f86c7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:83:22:77:43:f8:e5:79:a6:3c:f1:fc:d0:
54:dc:49:3e:00:82:3a:e0:a7:bb:5c:a7:8b:6c:12:
b2:ea:1d:4f:72:59:6e:fc:b7:54:66:0f:7a:5a:00:
07:70:94:42:3e:bb:33:b4:16:3d:43:0b:c9:3c:25:
1f:c1:e2:7d:b2:89:65:c7:ca:b0:26:8c:c9:87:b0:
08:b7:66:d5:d5:d7:52:15:1c:43:59:3a:6f:e1:d4:
f0:0b:2c:5e:4a:d5:7f:22:ea:b1:12:da:00:21:5e:
95:f5:e1:7b:88:ab:c2:3e:51:07:c3:20:d0:47:2d:
a3:f3:5c:34:a8:10:dd:43:fd:7a:00:9d:e6:e0:e3:
03:94:ec:c3:76:6e:ff:ff:e3:72:81:66:07:db:24:
f6:0a:a3:01:4c:df:8d:fa:36:7b:b2:ec:1f:60:88:
3d:fc:a9:b2:9e:28:aa:a7:e3:b7:3a:ac:02:21:52:
15:92:ee:42:bc:8f:0b:5f:bf:7c:c1:8a:a2:de:ea:
c5:c8:08:29:c4:c7:85:ef:1f:14:35:58:9c:5b:57:
95:e1:74:05:91:0a:c0:dc:0f:09:7e:80:b9:23:1a:
8f:aa:de:83:c7:91:71:fc:7a:32:19:ab:71:da:48:
97:57:54:45:fb:87:68:2e:19:62:c0:a2:75:61:64:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:28:3F:1E:6F:7D:53:95:22:E5:41:15:5F:47:6D:56:5F:86:C7:DD
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/1Cg_Hm99U5Ui5UEVX0dtVl-Gx90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:17:c9:6e:5f:d7:ea:85:6e:de:27:4b:75:ef:af:07:b7:33:
09:28:bf:aa:10:4b:8b:c3:d5:cb:84:70:35:d2:7b:fd:c8:b9:
74:09:e8:19:1a:9c:e4:69:9e:26:5d:0f:b3:f3:a8:fd:8a:bd:
78:3d:4f:a8:f8:89:49:83:f5:a6:7b:25:ae:28:35:03:9d:a9:
c1:d6:df:56:46:36:aa:e0:6e:17:b7:33:0c:dc:8b:54:8e:a1:
f7:82:50:af:8c:5d:c2:ce:f0:0f:c0:ba:b8:29:e1:24:fe:c2:
05:e0:50:e4:aa:de:69:76:56:3c:4f:42:7e:3b:cb:50:d7:48:
00:3b:de:6b:23:bb:80:e5:ca:68:b9:f7:5c:0e:e4:f9:c2:91:
e7:6b:30:dc:a1:59:0d:d2:76:bc:05:e0:10:0a:9c:73:5d:c4:
b7:e1:df:91:8f:a4:d1:bb:52:17:25:26:d2:59:df:4a:d8:78:
d2:07:90:b9:24:3b:be:0d:0a:fd:e4:8f:2b:e0:9d:f9:cf:af:
b6:d5:55:29:a0:a9:81:0e:75:0c:20:f1:05:73:66:03:ce:37:
44:d8:77:67:bc:d3:92:db:ee:3c:44:cd:2e:64:cf:a1:db:68:
63:4a:2f:26:23:b4:eb:66:64:d8:c1:59:d5:42:76:31:12:0f:
59:b6:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org