Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/5B2LrHnzZFC3p24FTKMuGyGi2bE.roa
File: 5B2LrHnzZFC3p24FTKMuGyGi2bE.roa (raw, json)
Hash identifier: dTQr+unbiwxyEysTLPIuUQn8qCTsSRu9dODk3w2WsnI=
Subject key identifier: E4:1D:8B:AC:79:F3:64:50:B7:A7:6E:05:4C:A3:2E:1B:21:A2:D9:B1
Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial: 32791513
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/5B2LrHnzZFC3p24FTKMuGyGi2bE.roa
Signing time: Sat 01 Jan 2022 15:59:05 +0000
ROA not before: Sat 01 Jan 2022 15:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49009
IP address blocks: 193.96.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846796051 (0x32791513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Validity
Not Before: Jan 1 15:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e41d8bac79f36450b7a76e054ca32e1b21a2d9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:f7:68:88:96:6a:dc:29:aa:31:1e:4b:0d:
5e:16:a8:22:ef:fa:78:df:da:7c:98:92:55:3f:84:
54:a1:1f:6c:4c:c9:d5:57:50:6a:f1:a3:64:70:b8:
3f:79:22:66:42:3c:37:de:99:d9:fb:6e:57:ee:4f:
2a:5b:c8:17:11:80:9e:40:d4:ea:dc:a5:5c:6c:94:
8f:0b:e9:d3:40:98:b5:f8:16:3a:17:5f:73:95:72:
ca:42:ec:01:6c:62:68:a3:c7:4d:6a:f5:fe:a8:fb:
fe:4d:7f:26:e5:cb:f8:92:62:a1:50:a7:c3:09:5c:
0b:a9:11:98:f4:46:b3:de:8d:1a:10:63:41:1a:53:
50:23:17:39:9b:5e:cc:04:d6:4b:86:29:38:5d:cf:
39:4a:12:87:64:8e:87:86:b2:c7:09:95:b6:dc:cc:
8b:88:e5:b0:b0:bd:17:3b:05:1a:59:8f:fa:2c:9b:
1c:db:a6:b0:44:d2:34:46:6c:a9:44:d2:e1:ed:07:
ce:fd:88:b0:40:f1:1c:91:71:64:23:75:64:fd:ff:
30:47:b2:96:2a:c3:ba:c7:f8:1f:22:e6:04:5d:76:
78:b8:e5:41:57:88:ef:d3:d5:ff:34:c7:24:b6:40:
83:ff:e0:25:bf:42:d8:7e:0b:93:a8:b5:af:b4:41:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:8B:AC:79:F3:64:50:B7:A7:6E:05:4C:A3:2E:1B:21:A2:D9:B1
X509v3 Authority Key Identifier:
keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/5B2LrHnzZFC3p24FTKMuGyGi2bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.224.0/24
Signature Algorithm: sha256WithRSAEncryption
be:de:49:d0:a0:3f:7c:40:19:c6:5b:c3:2d:24:d3:4a:ae:3a:
df:d0:d2:f4:46:91:62:60:f4:c2:82:e5:f7:d6:32:1e:e9:bd:
cf:6a:62:a1:15:18:87:c3:df:6a:04:60:45:22:7c:93:b4:2d:
73:75:51:27:56:27:ff:14:be:35:48:be:7d:b9:d8:35:9a:bc:
fd:c2:8e:d0:44:ef:6f:fa:05:49:eb:63:3c:ab:82:cf:04:67:
5e:7f:03:c4:6b:2f:b5:a0:79:b9:27:d4:b4:5c:c0:37:09:17:
61:16:4d:6a:e1:2e:44:43:9b:f1:ea:ac:e5:22:19:42:b4:24:
4e:e7:18:af:f5:90:b6:b7:da:6b:14:d4:42:a6:69:f4:3c:48:
d3:c1:61:f4:79:61:36:ac:56:7d:0f:3f:bb:ee:9d:37:dd:93:
b3:8f:39:f4:2b:94:3c:8b:5a:9a:35:53:bc:ab:ec:12:ac:03:
ad:9e:d8:c8:89:ca:24:68:de:ec:a9:3f:0c:48:b6:87:34:02:
56:e1:6b:94:3d:a7:30:84:b9:82:0b:1c:b5:c0:7b:5b:57:49:
98:8e:61:77:b6:e7:df:36:74:0d:a5:78:c2:24:ba:22:6a:ca:
f7:cf:d9:2e:60:72:ff:c4:57:f5:9f:1c:58:00:c3:fe:69:d1:
73:d4:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:59 2023 by rpki-client on console-fra.rpki-client.org