Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/_W99gErepgjL5uxPV0OfSHmtXWU.roa
File: _W99gErepgjL5uxPV0OfSHmtXWU.roa (raw, json)
Hash identifier: JVjbeIafeyjxcc9EcsXHQQ7Sud9Qkubc9jjKMuK0Be0=
Subject key identifier: FD:6F:7D:80:4A:DE:A6:08:CB:E6:EC:4F:57:43:9F:48:79:AD:5D:65
Certificate issuer: /CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
Certificate serial: E8495B
Authority key identifier: F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/_W99gErepgjL5uxPV0OfSHmtXWU.roa
Signing time: Fri 18 Feb 2022 20:46:30 +0000
ROA not before: Fri 18 Feb 2022 20:46:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 193.163.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15223131 (0xe8495b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
Validity
Not Before: Feb 18 20:46:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd6f7d804adea608cbe6ec4f57439f4879ad5d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:c4:66:eb:b6:bc:b3:30:43:76:01:3d:80:
71:a0:e7:02:49:7b:f9:9b:cd:af:ee:2c:ec:76:4d:
d0:f4:64:9d:93:2b:63:b2:77:bb:62:76:d6:15:5d:
13:33:c3:a8:e8:b8:16:9b:f7:e9:74:d9:93:1f:b6:
07:09:f2:26:50:fb:47:1f:d6:2a:5d:07:c2:0d:8d:
23:4c:41:f4:31:8f:0d:94:b3:bb:4d:f6:47:bf:5b:
cf:00:78:6e:07:ea:18:53:27:1b:ed:57:72:85:52:
92:09:c8:18:ed:b5:41:7a:05:22:e6:a1:a0:07:7e:
e1:2f:f2:15:c1:62:16:a3:5e:f8:3e:c6:34:1f:69:
28:55:00:12:d1:06:fa:17:a8:d9:b8:aa:d3:17:64:
3d:a9:e9:fa:08:f6:80:96:0b:80:47:6c:f3:8c:64:
6d:29:ea:b0:d8:21:29:06:87:3e:54:f1:5c:a6:a9:
47:9e:ba:67:c0:7c:a3:b2:cb:81:58:a3:0a:64:49:
46:4f:e6:f0:6d:99:18:3b:00:67:7d:1f:ec:91:9f:
28:03:4d:6c:bd:1a:34:d4:b7:42:61:33:0b:5e:15:
67:41:9f:0d:3a:04:de:60:81:84:77:bc:75:9d:0f:
6c:0f:69:74:d8:50:b8:00:e0:4b:fe:cd:8d:d6:84:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6F:7D:80:4A:DE:A6:08:CB:E6:EC:4F:57:43:9F:48:79:AD:5D:65
X509v3 Authority Key Identifier:
keyid:F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/_W99gErepgjL5uxPV0OfSHmtXWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:29:b7:de:16:c5:54:5d:56:56:cf:48:ff:73:b2:92:b3:d8:
a8:8c:8f:34:ee:06:d2:35:32:f5:60:cb:f3:08:a8:cd:08:f3:
34:ba:88:f6:c9:2e:38:83:1c:a4:48:c7:56:35:5a:84:44:47:
d2:4c:af:60:34:f0:49:36:a3:9e:06:4f:53:89:ed:a6:12:82:
ab:9a:24:15:cf:30:57:a3:b3:46:2d:e7:d8:b0:f3:2d:92:67:
2f:0e:c5:41:69:28:da:ea:a1:b2:59:88:97:03:fc:f7:a7:da:
a5:5e:ef:0d:aa:97:f6:ba:29:ac:df:80:51:97:6a:09:79:c5:
47:f8:61:39:ff:dc:c5:70:53:9f:4a:a5:d9:e0:f7:63:d6:6c:
3d:75:ed:9c:62:c5:af:4a:33:c1:c6:1c:05:f0:82:fa:dd:2b:
6e:ce:05:33:46:77:cd:38:6d:b0:17:95:54:23:6e:03:51:2e:
a2:cf:1c:ea:a3:27:88:cd:05:95:c6:9e:4b:ce:75:c4:d2:ad:
79:46:52:5a:f1:79:ea:b1:93:51:13:b8:6f:ed:37:7c:c4:a2:
bb:6f:21:c1:15:e0:a1:2f:65:1b:d9:0e:37:f4:3e:d1:c3:2d:
b2:2a:62:8e:83:3d:5b:74:fc:8d:0c:01:c9:8a:cc:8a:2d:da:
27:6b:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org