Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/b5oVz5yVE2redxtBpLjetyF8PHg.roa
File: b5oVz5yVE2redxtBpLjetyF8PHg.roa (raw, json)
Hash identifier: 2oEY+bDH5U1hdy4EPaQCdOkk6riHPX8oNCOEB+OEQus=
Subject key identifier: 6F:9A:15:CF:9C:95:13:6A:DE:77:1B:41:A4:B8:DE:B7:21:7C:3C:78
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 02E33F
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/b5oVz5yVE2redxtBpLjetyF8PHg.roa
Signing time: Tue 31 May 2022 07:35:36 +0000
ROA not before: Tue 31 May 2022 07:35:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57132
IP address blocks: 193.22.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189247 (0x2e33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: May 31 07:35:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f9a15cf9c95136ade771b41a4b8deb7217c3c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:fb:6d:f6:d5:34:36:09:9a:3a:06:d0:05:
7a:ff:27:3d:66:1d:3a:c7:b6:9f:86:e1:f7:60:9e:
26:12:a0:0c:97:64:1c:f6:1b:f5:14:b6:5d:d7:c2:
ff:11:b6:36:4a:7c:c0:fd:40:48:63:ee:63:65:d8:
95:b8:7d:cc:52:9b:d9:e8:e5:3b:74:67:7e:3a:28:
56:b8:40:a6:36:eb:fb:fd:5e:6e:c6:6c:63:c4:f1:
e2:23:db:49:1f:66:54:14:ac:aa:9b:fb:72:29:dc:
f0:25:c2:f0:f2:aa:9c:17:b9:bf:3a:95:6f:97:90:
09:57:5b:e7:a2:ee:73:93:42:85:74:b5:b8:f8:10:
2c:fe:f1:8b:3f:c4:59:6d:b0:be:d5:d8:82:38:fc:
a2:18:01:1d:92:01:f8:99:6e:bb:51:28:57:c2:dd:
de:85:39:3c:08:74:6a:cf:02:1b:c3:4d:d5:c7:ac:
4b:55:e2:85:83:83:d1:a2:65:c7:12:fb:42:47:ad:
8b:6d:b2:12:c7:2e:0b:46:6e:32:dc:17:8e:48:85:
fd:4f:b7:b1:ed:a8:2c:e3:29:a5:15:b6:22:50:9d:
c8:2e:52:04:55:8d:b4:5c:84:2e:9a:e2:9c:d2:fc:
17:09:b1:35:e2:c4:9d:e4:99:ea:fa:2a:68:26:fb:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:15:CF:9C:95:13:6A:DE:77:1B:41:A4:B8:DE:B7:21:7C:3C:78
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/b5oVz5yVE2redxtBpLjetyF8PHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.95.0/24
Signature Algorithm: sha256WithRSAEncryption
38:96:39:7f:17:e8:f6:78:e3:d4:bb:60:b6:85:b3:d1:a3:09:
01:73:36:92:38:24:a5:ff:28:31:f2:c5:f9:94:44:14:d4:10:
d6:2b:66:30:84:b7:19:85:eb:b4:75:81:c1:7e:50:1f:1d:c8:
43:21:2e:92:49:c5:65:cb:51:f4:2c:25:72:10:a1:5e:fb:d2:
54:6a:fc:0f:7e:62:08:7c:c5:c5:c7:46:fa:ae:5c:85:32:d6:
52:37:cd:bd:2e:a1:93:ec:81:4b:c0:b4:0b:30:39:05:9c:ff:
af:45:88:ad:45:0d:51:4d:ed:cb:0d:f7:a2:cf:2e:a6:b7:44:
bb:43:4a:ff:2f:76:2b:3d:17:84:f1:ba:f7:23:3e:00:23:a8:
ac:97:9f:85:fe:46:55:b1:61:5a:41:6d:19:51:e7:ec:35:03:
eb:e4:22:29:3c:f3:2b:b3:b0:28:0f:81:6d:3a:24:c7:87:43:
5b:03:6a:fa:0a:22:5d:08:6e:8b:f6:4f:90:08:d3:94:0a:58:
d1:9c:43:c5:91:cf:6b:ff:ce:af:58:38:e2:98:1e:df:cb:ce:
f4:fe:9f:02:36:0a:e9:64:39:68:39:56:b1:e3:51:60:16:a6:
bb:94:15:04:97:a4:dd:ee:09:a8:90:a2:d9:8f:2e:31:b0:c0:
cf:81:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net