Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XOtFlGoxRNKtVVT4s5U5Ji9-kkI.roa
File: XOtFlGoxRNKtVVT4s5U5Ji9-kkI.roa (raw, json)
Hash identifier: UC5KHG8nm79P8aGlgoXKk03A2QlK18j46QgJuvzlJq4=
Subject key identifier: 5C:EB:45:94:6A:31:44:D2:AD:55:54:F8:B3:95:39:26:2F:7E:92:42
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0182A1E36D24A8B74271C3CC28E8C24F6259
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XOtFlGoxRNKtVVT4s5U5Ji9-kkI.roa
Signing time: Mon 15 Aug 2022 14:23:32 +0000
ROA not before: Mon 15 Aug 2022 14:23:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203363
IP address blocks: 193.176.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:e3:6d:24:a8:b7:42:71:c3:cc:28:e8:c2:4f:62:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Aug 15 14:23:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ceb45946a3144d2ad5554f8b39539262f7e9242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:80:fc:ea:9e:ad:aa:5d:96:ca:fd:3e:64:
b5:ab:d4:9b:86:f8:f2:1b:a6:b3:3f:bc:fd:e8:21:
fb:ab:94:76:b8:f3:a9:58:c4:58:bf:a7:ac:f4:4f:
f5:ae:df:e3:43:01:31:93:23:ba:23:54:fb:45:81:
96:ee:ae:f5:50:d2:3e:d6:ae:0b:80:fa:f1:6e:c8:
f7:9e:e2:67:7b:70:6f:d0:d0:ed:f0:24:02:7b:f0:
e5:58:f9:3e:78:be:e2:74:0c:66:a9:90:39:10:37:
91:43:f9:8e:d1:22:58:0e:9a:52:1c:c3:30:d3:da:
20:69:59:f3:85:4d:78:7c:c8:f1:69:3d:fd:0c:09:
d8:65:5b:db:26:e7:81:25:0b:0d:4e:a7:c4:a8:63:
6f:4e:4b:9d:4b:d1:7e:11:5f:ea:8d:a5:24:75:9e:
f8:aa:4b:59:21:d1:cd:1f:15:37:5a:26:2f:41:ba:
1f:5a:df:bf:28:f3:e9:0a:ec:96:1e:73:0c:c2:a1:
5c:51:c6:9b:c6:3e:9c:2f:88:58:c8:79:e4:5c:41:
49:eb:01:c8:a1:ed:64:4d:bb:d6:a0:65:30:f0:cc:
5b:ba:88:17:ed:82:58:11:85:7e:0a:30:4f:cf:8c:
52:43:4e:81:ae:f1:5e:8a:a6:45:7d:66:28:42:44:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:45:94:6A:31:44:D2:AD:55:54:F8:B3:95:39:26:2F:7E:92:42
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XOtFlGoxRNKtVVT4s5U5Ji9-kkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.28.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2f:56:b2:90:a7:b5:6b:89:f8:dd:85:c6:e5:64:1e:b8:63:
49:ca:6a:e2:81:1e:d6:c7:f4:fa:33:1b:a4:68:7e:a7:f9:10:
45:ab:a8:d7:18:d5:f4:bc:bc:af:9f:85:f0:b8:ad:bf:05:76:
81:f0:68:14:4a:93:76:77:6c:15:be:14:b5:23:50:22:ee:66:
8f:74:36:c8:26:26:1d:35:c3:ef:3c:77:06:76:dd:05:55:b0:
fb:4b:14:02:85:1d:19:4c:fb:40:2c:a1:35:67:c7:6a:c2:47:
9e:89:bb:01:cc:ba:e4:bc:2d:99:cb:22:96:6c:d4:c6:ba:99:
40:c9:79:c6:2a:b0:37:bb:ca:60:50:ff:df:c6:1d:f6:97:54:
03:2b:38:e4:d6:1b:ad:b8:78:8d:41:74:89:4f:23:fa:83:dc:
01:c0:e1:78:ee:f1:a0:43:f7:83:d7:b9:f7:8c:da:8c:02:38:
db:73:98:f8:82:66:7c:55:da:28:56:d6:8f:ae:7e:75:67:56:
14:af:48:8f:13:bd:46:2d:fa:15:6c:fc:0c:99:f5:d9:17:a1:
eb:67:6a:66:58:eb:41:11:01:48:3f:4c:f1:6e:20:52:87:fa:
37:43:fd:31:16:0a:01:20:5b:68:32:e0:80:20:ca:1d:20:e0:
be:c0:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org