Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/Cf2iAj3ggK0eA6AUEvT9Rmdr9oY.roa
File: Cf2iAj3ggK0eA6AUEvT9Rmdr9oY.roa (raw, json)
Hash identifier: u3cVr+NBYZkKw4Lfkx68MypXQgDdMmSZIz5FQVqyY9c=
Subject key identifier: 09:FD:A2:02:3D:E0:80:AD:1E:03:A0:14:12:F4:FD:46:67:6B:F6:86
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 06EAD89C
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/Cf2iAj3ggK0eA6AUEvT9Rmdr9oY.roa
Signing time: Wed 26 Jan 2022 15:37:30 +0000
ROA not before: Wed 26 Jan 2022 15:37:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43298
IP address blocks: 193.84.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116054172 (0x6ead89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jan 26 15:37:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09fda2023de080ad1e03a01412f4fd46676bf686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:75:1e:13:02:93:10:d3:da:e1:bd:a2:91:
23:16:9c:b4:78:f3:61:6d:84:da:51:84:65:8e:ef:
b2:90:b4:97:1f:b8:6c:33:d0:ba:66:5a:59:e3:e6:
cb:7b:aa:b5:dc:fb:b0:a6:20:ba:3b:43:4b:cc:59:
c0:f9:5f:8f:1d:97:42:28:1a:e9:fa:37:ac:62:84:
ff:d4:ba:c5:3d:21:23:c7:59:34:a9:83:44:d0:ed:
af:f2:30:be:ae:87:60:fa:69:f1:42:e9:44:3c:91:
b6:6d:39:c6:ab:45:65:84:16:23:a1:a2:f8:ba:ca:
9e:11:ee:76:a3:ed:5f:24:27:d1:7f:4e:af:aa:05:
c5:62:ba:a2:5e:84:9a:a6:f0:94:db:64:ac:21:1e:
c3:c9:4b:b5:c2:cf:bd:64:8d:f8:fc:8f:60:81:a5:
16:56:98:83:4f:88:c3:f1:20:0f:7d:a6:30:40:81:
45:4c:32:9d:f8:e2:f8:bc:6b:b9:bb:6c:73:89:73:
23:b7:4c:ab:e1:7f:8c:e8:26:4f:b6:d6:92:d1:ee:
1a:b8:8c:66:c8:75:97:ef:da:71:45:4f:a7:fa:e0:
d3:81:33:94:e7:9c:56:d0:89:a7:18:ff:9d:08:91:
6f:cd:98:cf:aa:2e:39:c4:67:c6:96:c3:5e:4c:89:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FD:A2:02:3D:E0:80:AD:1E:03:A0:14:12:F4:FD:46:67:6B:F6:86
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/Cf2iAj3ggK0eA6AUEvT9Rmdr9oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f2:e5:1d:c2:38:1b:46:5f:5d:55:18:6d:50:48:df:3f:f4:
32:05:d7:ba:69:a3:a7:58:95:bb:af:04:c8:f5:16:f3:8b:c6:
b4:be:b5:8f:35:51:61:36:86:21:3e:eb:98:61:7c:8c:27:ff:
62:0b:91:e8:9d:ec:74:fe:be:54:16:5f:ad:75:6c:9f:a7:ff:
19:99:d0:19:55:37:e4:f9:9e:8d:59:5e:59:e5:c7:af:01:b4:
48:ca:b3:76:93:01:c2:5b:4c:86:7a:f9:55:76:3a:d5:48:37:
89:0f:f4:03:5c:8c:59:96:70:67:5d:b3:0b:90:30:0f:0c:6e:
41:d5:98:6e:cd:6b:e4:61:16:6d:64:37:9a:27:5b:37:24:4a:
2e:de:0b:52:cd:f0:8c:b3:92:e4:0c:2f:92:50:67:c5:8c:93:
08:4c:01:3f:a2:64:c2:a9:cf:da:0e:aa:17:42:ad:1c:3b:e1:
5d:b4:d7:d4:4b:ec:e2:52:86:cf:43:4d:c9:ef:ce:84:e1:f8:
45:e9:d8:32:36:52:05:78:63:af:20:a0:bb:a3:da:bd:16:62:
59:2c:2c:ce:f7:6e:95:4e:14:89:a0:7f:93:7a:57:cb:86:28:
08:3c:28:32:5d:d8:59:3b:fe:08:c8:ac:51:46:8e:b0:da:cb:
3c:13:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net