Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/O3Q2E4z-Yjgbp0r9Ueu9DeWs00M.roa
File: O3Q2E4z-Yjgbp0r9Ueu9DeWs00M.roa (raw, json)
Hash identifier: DyTalveBK11IfsTMFDTkQdyRbF3hCyyLKWpemZdNIhI=
Subject key identifier: 3B:74:36:13:8C:FE:62:38:1B:A7:4A:FD:51:EB:BD:0D:E5:AC:D3:43
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 10DCE306
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/O3Q2E4z-Yjgbp0r9Ueu9DeWs00M.roa
Signing time: Sat 01 Jan 2022 10:58:18 +0000
ROA not before: Sat 01 Jan 2022 10:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28878
IP address blocks: 193.30.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282911494 (0x10dce306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jan 1 10:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b7436138cfe62381ba74afd51ebbd0de5acd343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:aa:4f:0e:46:ec:43:61:57:69:a2:63:e7:
ef:3b:dc:dc:bb:ef:5b:5a:c2:36:43:8c:74:27:a1:
41:eb:d0:8d:13:3b:71:09:30:b9:c7:70:9b:9a:33:
7d:ff:db:98:78:e7:ee:f8:fa:71:18:86:d0:16:ef:
2e:7e:34:34:1c:38:06:fe:94:40:8d:e3:27:45:b5:
8f:bb:11:1d:a3:1e:83:e0:4a:f6:20:d3:47:20:e2:
90:62:64:49:a6:2b:31:12:53:58:d6:ea:5c:17:89:
3f:80:38:67:35:6a:18:69:32:26:c9:36:02:4e:b0:
0e:a8:41:68:be:93:81:fb:93:32:0c:91:9b:a3:30:
83:12:0a:f6:9d:98:e9:aa:1f:cc:50:51:53:73:60:
57:22:b9:0e:a0:dc:28:c0:a4:38:22:2d:f5:a4:ce:
57:2c:0f:1f:5e:d8:cb:7c:ed:e1:a1:63:23:5c:3e:
98:96:46:5b:63:2f:fb:64:91:0f:53:6a:4f:ee:36:
17:90:f2:d9:a9:36:a2:84:7c:ac:8f:c3:95:55:9b:
94:16:60:63:0c:e4:77:ac:e6:b3:94:ad:a3:11:65:
4f:62:32:94:27:09:d7:84:2a:a3:9e:e8:bd:43:ad:
22:d1:37:e2:a7:a1:ef:19:7e:bc:f3:e0:c1:d4:ef:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:36:13:8C:FE:62:38:1B:A7:4A:FD:51:EB:BD:0D:E5:AC:D3:43
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/O3Q2E4z-Yjgbp0r9Ueu9DeWs00M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.170.0/24
Signature Algorithm: sha256WithRSAEncryption
10:07:12:f7:2a:6f:65:21:4d:c4:8b:25:37:04:47:51:b7:d6:
50:89:87:51:8f:3d:b4:c4:2c:f0:31:02:90:ff:96:a7:7c:d6:
eb:3d:2d:1f:4e:3a:a7:51:58:3e:d4:2e:e0:f3:cc:74:6b:c6:
ea:f7:46:9b:59:b3:63:0a:ce:9e:7a:71:8d:da:fc:8e:aa:d4:
c9:2d:2d:7e:c2:47:84:1d:dd:f7:15:95:b1:fe:e2:7c:0f:a7:
a9:54:29:b2:38:a4:82:2f:c1:4a:d7:65:3b:c1:c2:62:77:16:
f6:cc:a6:1c:e4:0d:78:ed:d0:7b:c9:40:b9:83:37:d9:a0:5a:
0e:9f:c0:28:d7:a6:57:96:2c:f9:4a:7a:fb:fb:e4:ba:5e:a4:
15:b9:d5:98:f2:09:7b:70:11:45:a8:12:81:e5:c8:31:8a:39:
d4:f5:2f:bb:51:56:91:d6:90:06:0e:b0:54:6b:8f:ec:b6:6e:
ac:10:86:24:ca:98:a7:16:07:fd:48:be:16:8d:88:7a:be:15:
14:ed:fc:a4:6f:40:a6:87:80:93:f6:d9:b6:f9:d5:18:29:8f:
d7:ed:d7:42:23:04:7f:40:e3:f9:27:33:b0:ac:46:37:5e:77:
42:f1:98:74:bf:d6:eb:0b:55:e5:a0:7a:09:2e:9a:c1:65:27:
28:83:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org