Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/SRSVJthyHkDw9ETzFZs-MvDK2Ik.roa
File: SRSVJthyHkDw9ETzFZs-MvDK2Ik.roa (raw, json)
Hash identifier: YrSJguBf04ni0UM2w9LJOXmEL9BmvPJhf6Bei6wW0t8=
Subject key identifier: 49:14:95:26:D8:72:1E:40:F0:F4:44:F3:15:9B:3E:32:F0:CA:D8:89
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: A85218
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/SRSVJthyHkDw9ETzFZs-MvDK2Ik.roa
Signing time: Sat 01 Jan 2022 12:55:10 +0000
ROA not before: Sat 01 Jan 2022 12:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.100.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11031064 (0xa85218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Jan 1 12:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49149526d8721e40f0f444f3159b3e32f0cad889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:02:ec:26:bb:f6:b1:d4:38:42:aa:60:fb:
b2:b2:36:08:2c:78:6e:37:72:b2:18:85:62:0e:37:
97:5a:09:50:c1:b5:fd:2c:5f:d3:ff:6d:94:ae:c2:
bf:1f:36:52:ae:fc:30:5f:36:03:cf:f1:ee:13:1c:
94:a1:aa:fa:43:30:16:9c:2b:26:df:26:1a:ac:88:
94:56:c1:bc:7f:9b:47:32:f4:b7:9d:72:a2:f9:6d:
2c:8d:3f:5c:61:53:0c:00:ba:4d:cd:5c:16:83:fe:
5d:4b:9c:65:db:e1:bd:01:42:88:94:b9:91:88:4c:
6d:32:bc:0c:b1:7f:ba:b5:13:bf:c6:ec:11:b5:1f:
91:12:de:0e:d5:b2:af:0e:00:5b:4f:17:cb:bc:c4:
38:5a:71:4e:ad:70:b6:a1:d4:9d:0d:08:d3:f3:a4:
37:99:3b:1e:ab:08:ba:fd:0e:df:de:5e:ac:c2:1d:
5e:89:12:60:26:d2:58:e9:a5:9d:5a:6a:f4:dc:5b:
dd:6a:63:35:c8:40:03:9d:3a:1a:41:97:a9:6b:2c:
a1:0c:21:88:3b:ee:73:0f:e0:ee:c2:27:19:08:06:
ca:9f:fe:fe:cf:0b:c1:e7:70:56:fc:16:4c:bf:b4:
74:03:56:c3:0b:2b:d1:65:ad:0c:ec:6a:b3:86:b6:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:95:26:D8:72:1E:40:F0:F4:44:F3:15:9B:3E:32:F0:CA:D8:89
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/SRSVJthyHkDw9ETzFZs-MvDK2Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.64.0/24
Signature Algorithm: sha256WithRSAEncryption
80:97:24:bf:f3:82:5d:2b:d8:8f:c4:08:a0:7c:c8:dd:d4:3b:
7e:fa:1b:10:8d:a9:d3:ed:26:8f:be:9f:d9:14:13:66:e7:a0:
ca:49:56:f9:19:bb:9f:65:a4:7d:ec:32:ee:cb:f5:ff:34:44:
a2:86:56:82:fc:d5:2f:3a:90:69:89:06:8b:99:40:42:3d:61:
ee:a3:2b:43:91:ad:21:43:b6:31:63:a7:0c:90:1e:6d:c4:43:
0d:4a:50:0b:3f:d0:d2:26:0b:57:68:be:24:f4:f9:c2:2b:c8:
9f:21:e3:a1:16:b3:a2:16:03:82:c1:3f:70:e5:47:c9:94:71:
78:b5:12:1b:26:17:bb:37:41:51:ba:de:4f:90:54:ae:fd:f4:
fc:f3:d7:5e:7c:15:a0:f9:aa:08:bf:c0:85:fb:c5:dd:6c:22:
74:cd:7a:3e:7b:a8:87:6f:ed:84:45:5b:5c:61:f0:c1:89:fb:
c9:01:0d:6d:f4:62:ad:ab:99:24:39:ad:24:b8:bd:40:14:c8:
e5:49:5d:4c:1b:9c:ab:19:79:66:fd:22:fb:af:c6:c6:93:91:
e4:ed:d6:3b:e0:85:4c:c8:d9:66:a8:ba:42:a7:0b:9d:1c:85:
48:03:2d:8f:0a:23:85:7a:d9:76:c5:7c:8d:c4:e3:78:e6:2f:
7b:2b:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:50 2024 by rpki-client on console-fra.rpki-client.org