Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/PuEuIflsdrAupSq-3FxSIYT5aUw.roa
File: PuEuIflsdrAupSq-3FxSIYT5aUw.roa (raw, json)
Hash identifier: DLFyGrU9TY8omRIqSt4e2rV0bfiBo4w+Xi2dCuxLjbc=
Subject key identifier: 3E:E1:2E:21:F9:6C:76:B0:2E:A5:2A:BE:DC:5C:52:21:84:F9:69:4C
Certificate issuer: /CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Certificate serial: 01835F5D45C3B58E8B78DE7814263FC91F6D
Authority key identifier: 0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/PuEuIflsdrAupSq-3FxSIYT5aUw.roa
Signing time: Wed 21 Sep 2022 09:24:51 +0000
ROA not before: Wed 21 Sep 2022 09:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 193.163.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:5d:45:c3:b5:8e:8b:78:de:78:14:26:3f:c9:1f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Validity
Not Before: Sep 21 09:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ee12e21f96c76b02ea52abedc5c522184f9694c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:d4:d1:b8:c0:d7:22:20:db:30:0e:e6:1c:
a3:cb:12:f1:90:42:81:a4:de:ed:af:5e:4a:6d:ea:
23:24:88:fc:04:65:f2:b8:88:a6:27:9d:3b:5b:fb:
11:b2:34:bf:80:23:c6:e5:f7:71:cb:a8:a3:ff:61:
d1:88:50:c5:c4:6f:6b:f3:6c:f7:78:eb:31:fb:cf:
c1:a1:cb:52:7b:34:50:e1:c3:2b:28:17:58:1e:b4:
82:c5:cd:08:3c:b6:e0:34:50:5b:94:6b:17:e5:95:
bb:a9:ec:13:5a:63:01:2e:43:d9:a9:77:bc:00:32:
96:d6:f8:1d:d9:9a:2c:eb:c0:cf:00:aa:9d:c1:02:
ad:ba:3f:15:5b:d9:2e:d4:17:e1:d6:b5:33:b2:52:
5e:78:fa:e7:c8:d8:8b:cd:8d:40:a3:07:5d:10:52:
46:43:a0:88:8f:d6:d0:ad:8a:a1:9c:19:8e:eb:b8:
dc:ff:88:c9:7f:4c:49:86:32:06:2a:fa:14:0f:32:
84:e8:87:5c:33:ab:46:ee:c4:58:05:16:59:5a:af:
30:e7:e4:16:40:55:c7:e6:e1:27:bd:da:72:35:ad:
49:01:63:36:6f:a5:70:bd:f2:eb:ab:f8:4b:9e:c5:
ed:bc:cc:ce:5e:01:5b:75:99:cf:cc:fa:d3:07:77:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:2E:21:F9:6C:76:B0:2E:A5:2A:BE:DC:5C:52:21:84:F9:69:4C
X509v3 Authority Key Identifier:
keyid:0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/PuEuIflsdrAupSq-3FxSIYT5aUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.92.0/24
Signature Algorithm: sha256WithRSAEncryption
26:43:53:f2:46:b5:74:65:12:50:12:ce:89:7b:d2:f7:fb:69:
f7:df:b5:ed:d1:e4:7e:ba:9c:11:57:fc:5b:4c:1a:af:1e:64:
4a:2e:0b:2a:b7:e2:27:38:3e:cb:c6:eb:38:d7:4d:4a:a6:7a:
8c:af:f5:aa:d4:e1:f9:b4:30:f3:5c:1f:51:fc:35:32:c8:a3:
bc:42:eb:0f:4d:ef:0d:31:f7:f0:9a:5c:6e:67:a4:bd:35:3e:
28:27:9e:76:cc:04:ad:78:ec:56:26:9f:54:79:f6:1c:3d:dd:
db:30:89:cf:6f:31:b3:8b:1b:53:51:30:29:f5:77:6a:6a:e3:
22:6e:29:13:5b:36:e8:cd:6a:3b:3a:6a:23:61:a5:1a:11:c2:
36:cc:bd:74:64:05:52:79:4e:3f:83:90:be:b3:e0:be:c3:45:
5a:27:aa:fa:09:21:af:21:3e:80:6d:85:be:cc:bd:6e:ef:cc:
9c:62:be:07:6d:e7:9d:55:25:9e:8e:94:de:43:ab:6b:51:8f:
20:5c:24:13:7b:b0:84:31:95:c9:2d:33:b5:1a:38:64:25:cd:
c6:56:68:c8:c3:9d:c6:af:d9:54:a3:0c:4c:c2:9a:5f:55:d8:
1c:b1:21:aa:41:45:97:2e:6f:2e:84:2e:08:0b:f2:12:d3:c6:
cb:71:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:33 2023 by rpki-client on console-ams.rpki-client.org