Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/38VeOJDcMcTuLDhKi7zB_0R-vIE.roa
File: 38VeOJDcMcTuLDhKi7zB_0R-vIE.roa (raw, json)
Hash identifier: PQ27apn9F8NbqNGHbxBuoQig6VVgd52IRVjRI2FrQs8=
Subject key identifier: DF:C5:5E:38:90:DC:31:C4:EE:2C:38:4A:8B:BC:C1:FF:44:7E:BC:81
Certificate issuer: /CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Certificate serial: 010E3A2A
Authority key identifier: 0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/38VeOJDcMcTuLDhKi7zB_0R-vIE.roa
Signing time: Sun 17 Apr 2022 09:57:40 +0000
ROA not before: Sun 17 Apr 2022 09:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 193.163.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17709610 (0x10e3a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Validity
Not Before: Apr 17 09:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfc55e3890dc31c4ee2c384a8bbcc1ff447ebc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:81:76:00:97:44:35:3a:00:59:c2:f9:25:
d7:05:11:fd:37:97:ae:3a:a4:03:95:58:72:46:4e:
62:db:86:da:25:dc:c7:7a:8f:f5:23:5d:62:1f:53:
5d:8f:ff:11:86:0c:3f:ce:01:14:8e:24:f7:31:b5:
b1:57:02:bc:89:2d:fd:c4:0b:a8:31:48:b4:5c:7a:
7e:29:ea:1e:20:01:61:54:a0:3a:4a:03:2e:ac:75:
58:04:0a:6d:86:25:61:bb:b4:20:1b:82:cf:ab:18:
9c:2e:53:a9:30:1b:34:ef:f7:12:eb:a9:01:01:4d:
4b:f9:8d:98:42:85:c6:99:d1:cf:b8:fa:90:7f:b1:
a0:89:78:3a:d3:7d:57:21:28:c6:26:f6:65:70:44:
fd:d3:bb:21:68:c1:5f:5c:12:69:c0:1b:b3:1f:be:
a5:b4:14:5b:24:9d:ab:f1:9e:d3:8a:2d:ec:f9:76:
4e:81:21:2e:b4:a9:c1:90:a9:e0:9d:c9:2a:a1:60:
fd:60:f9:14:4d:a6:f8:df:35:02:de:72:5c:41:41:
54:ca:1a:ff:dd:95:c5:ec:a5:fb:46:7a:0f:2a:e6:
65:ed:5c:82:de:b8:ca:dd:92:6b:9c:a1:95:65:f9:
5f:40:e0:1f:de:73:60:64:4a:c6:72:f3:97:76:c9:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:5E:38:90:DC:31:C4:EE:2C:38:4A:8B:BC:C1:FF:44:7E:BC:81
X509v3 Authority Key Identifier:
keyid:0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/38VeOJDcMcTuLDhKi7zB_0R-vIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c3:f6:2b:da:4f:4f:18:66:df:db:b4:0f:39:47:f5:b1:4d:
e8:79:7e:30:78:18:f1:44:65:a9:d9:11:4d:a9:0d:d9:f2:65:
90:33:f7:53:9b:68:a9:59:91:b2:1f:b5:84:0d:7d:21:9d:24:
ac:e0:82:79:a3:c5:d5:59:d7:91:9d:c8:1e:69:02:9c:dc:95:
39:2f:81:6c:3c:ad:c4:48:1a:49:a5:e2:58:fd:7d:fd:4c:c4:
92:cf:58:e9:a9:7a:54:ca:e8:30:fb:56:fe:48:c6:f2:95:5f:
2f:c5:64:d9:8c:48:3c:b3:3c:36:68:44:03:5b:d4:13:d5:55:
73:d7:9b:b9:94:eb:b9:2d:b4:d9:6f:04:11:ec:58:81:38:32:
4e:81:9c:67:84:34:64:c2:d3:98:1d:da:73:32:15:b8:32:3f:
bd:5b:83:b1:67:1b:0f:36:71:7a:9f:b7:7f:fa:3b:51:1f:70:
f2:3a:03:01:8c:5a:e9:95:e7:57:63:d4:6c:95:a2:09:02:c6:
a5:46:4d:cf:7e:4a:c0:81:66:6b:08:f6:25:4b:ac:b1:af:40:
ad:21:c4:6f:db:47:e1:12:ff:f9:d8:bb:6a:19:85:7c:98:20:
09:44:05:d7:82:02:9b:7b:82:ce:0b:15:17:91:5b:50:f2:5c:
9d:99:b1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:33 2023 by rpki-client on console-ams.rpki-client.org