Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/9-71rFHLUFdV_R-yIvyN-nrhUEo.roa
File: 9-71rFHLUFdV_R-yIvyN-nrhUEo.roa (raw, json)
Hash identifier: NFCgzzAa906eBAVderM/AX+Eja9bQS1/GHM/ONfPGZo=
Subject key identifier: F7:EE:F5:AC:51:CB:50:57:55:FD:1F:B2:22:FC:8D:FA:7A:E1:50:4A
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 02951F47
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/9-71rFHLUFdV_R-yIvyN-nrhUEo.roa
Signing time: Sat 01 Jan 2022 02:00:23 +0000
ROA not before: Sat 01 Jan 2022 02:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31313
IP address blocks: 193.169.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43327303 (0x2951f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Jan 1 02:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7eef5ac51cb505755fd1fb222fc8dfa7ae1504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:f6:a0:9d:af:4e:62:f3:93:7e:73:09:ee:
84:0f:b3:e5:46:31:bc:29:eb:09:ca:d2:c0:0f:6d:
03:6d:98:fa:bb:47:1c:a3:e5:a9:dd:2f:67:a4:54:
80:ee:1a:97:45:ed:2a:d3:b3:2e:25:26:4a:cf:6d:
78:26:cc:11:31:8c:2b:bf:21:76:83:a4:e9:e8:91:
b5:95:fc:87:fe:36:a9:40:7d:7b:45:0b:76:ce:be:
e9:8b:ab:76:61:ca:93:35:f1:51:25:0e:e4:26:94:
eb:e8:d0:5b:a3:88:cd:f9:8a:e8:02:55:be:19:12:
65:bf:0c:49:dc:4c:02:57:7e:91:ce:cc:ce:dd:3d:
fa:43:ca:e4:1e:4e:ad:91:2f:14:f2:d9:19:c4:89:
86:95:61:8f:c8:47:f1:c2:bb:45:c4:66:23:3e:45:
2f:dd:81:67:d9:e8:bb:8c:08:37:a4:b5:70:fb:93:
69:90:cf:2c:8b:a7:6a:28:ab:77:44:59:63:80:ec:
87:31:20:5b:9d:ff:3b:34:f1:d5:a4:44:f1:d2:6a:
7d:fd:b4:ab:0f:4c:ff:ea:22:0b:3e:f9:aa:df:e2:
ea:02:5f:b6:cd:3a:9b:3f:00:d3:35:a7:f3:e9:2f:
32:dc:82:95:4c:8e:f3:5b:0f:f6:a2:8c:07:af:0d:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EE:F5:AC:51:CB:50:57:55:FD:1F:B2:22:FC:8D:FA:7A:E1:50:4A
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/9-71rFHLUFdV_R-yIvyN-nrhUEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.6.0/23
Signature Algorithm: sha256WithRSAEncryption
55:21:c9:f2:02:cb:e0:f8:a0:87:c9:f8:f5:86:48:67:1f:30:
78:21:54:e8:85:42:63:5b:99:26:af:b8:f8:ad:9f:09:63:a0:
b7:71:53:6f:ab:f7:c3:91:63:56:0d:dc:e2:45:a0:85:cb:68:
cc:f0:91:59:6a:71:c3:23:99:63:b0:63:12:07:56:59:40:87:
51:00:7b:06:27:07:44:06:ba:69:5c:26:bc:9c:af:cf:a2:8c:
c7:31:f3:3c:30:35:fd:a7:92:89:6c:a9:e4:d5:58:d5:bc:83:
b9:c0:c4:f9:6e:a2:af:7a:01:24:93:6d:78:86:e9:5e:96:5b:
70:f5:6b:3a:2c:35:a3:c7:92:db:c2:66:cc:0e:8f:6e:65:cf:
3a:a8:0b:04:44:10:a2:1f:4e:cd:47:3d:d9:1a:37:62:de:47:
02:f4:3e:52:64:00:25:8d:5f:3f:ba:cb:79:10:de:21:e9:0d:
8a:34:3d:c3:d8:ce:f3:be:ad:65:4e:e9:4c:44:2b:21:48:bc:
fb:ca:56:a3:75:ed:8e:c8:9a:63:92:a2:df:9f:3c:97:4a:32:
8e:2e:1e:b1:fc:26:34:ae:f4:82:18:92:e8:a5:30:e9:1f:8e:
42:bc:30:7d:fe:b4:cd:a1:8b:d8:f7:69:fc:36:49:a6:9c:84:
4b:77:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:48 2024 by rpki-client on console-fra.rpki-client.org