Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/lX4imm6uBfYEpk7mBRYObv26kl4.roa
File: lX4imm6uBfYEpk7mBRYObv26kl4.roa (raw, json)
Hash identifier: RmulE8keaT3DQszfQATvDYdgJvU50x5anusV6UGzgSo=
Subject key identifier: 95:7E:22:9A:6E:AE:05:F6:04:A6:4E:E6:05:16:0E:6E:FD:BA:92:5E
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 06FDCBA1
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/lX4imm6uBfYEpk7mBRYObv26kl4.roa
Signing time: Thu 03 Feb 2022 09:41:49 +0000
ROA not before: Thu 03 Feb 2022 09:41:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56552
IP address blocks: 193.84.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117296033 (0x6fdcba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Feb 3 09:41:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=957e229a6eae05f604a64ee605160e6efdba925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:03:18:ca:cb:d8:16:4b:4a:a2:c5:9c:c5:
e6:e3:81:36:d3:c2:8f:7e:63:19:1b:eb:9c:19:a0:
d4:2d:d4:ad:9e:94:b4:06:4e:2a:27:b6:79:f1:3e:
0e:a3:5b:cf:08:b2:99:44:12:fc:50:02:1a:5a:01:
9f:22:b0:86:79:44:b1:ed:bb:a7:07:4d:c7:30:7b:
31:88:83:af:16:a3:9a:68:e5:54:e5:78:8e:3f:92:
67:86:0f:f5:89:43:db:20:78:ed:cf:a8:16:ec:dd:
96:0d:de:d8:8b:b3:9f:e9:77:9e:04:80:0e:26:5b:
cc:b5:6a:8d:0f:d1:4f:29:21:f0:d9:1d:c5:54:b4:
a9:a1:96:09:60:04:07:7a:f9:50:3b:35:8f:94:d1:
2b:62:5b:e9:a1:ae:5c:12:d9:87:b8:30:c1:b6:23:
a8:cc:3c:da:1c:24:f5:bf:ef:fc:f1:b7:92:f7:ef:
bb:74:c4:5e:30:e6:69:3b:e7:c9:f9:6a:a3:64:97:
28:24:b7:f4:43:02:6f:cb:43:28:be:13:8a:82:2e:
3f:04:54:78:29:7f:01:c3:36:d1:8c:50:97:7e:b2:
f2:4e:45:b8:ec:3c:74:33:61:74:90:8c:f5:a2:2e:
5d:cd:2c:fb:00:2b:5a:35:6a:b2:e7:17:10:c0:70:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:22:9A:6E:AE:05:F6:04:A6:4E:E6:05:16:0E:6E:FD:BA:92:5E
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/lX4imm6uBfYEpk7mBRYObv26kl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:63:1c:ab:da:68:84:98:12:57:0a:72:b2:e9:77:f6:f0:a8:
ea:78:5a:e9:aa:0a:1d:fb:81:54:f0:e7:5f:ca:06:47:41:a6:
9a:81:ba:6f:19:79:46:d3:50:06:58:b4:97:d0:1f:08:c5:70:
47:34:97:91:88:79:7f:73:f0:93:94:22:cf:fe:26:35:2c:c9:
7c:b9:25:86:0a:ee:10:59:ec:92:62:bd:93:10:ea:87:ae:be:
f3:5a:5a:45:76:22:ed:a3:15:cd:47:5c:91:69:3b:a7:5e:b3:
a6:13:c4:a0:a8:77:83:92:b6:2d:5b:b9:b4:fb:8e:05:c8:0a:
16:17:bd:b7:d6:bf:30:50:03:c1:92:ff:33:0e:fa:f8:24:28:
5f:ba:38:d7:58:f1:9b:81:be:09:2f:aa:74:97:a7:81:4a:6f:
37:fa:49:37:29:e8:8e:9b:4f:12:40:66:f5:04:08:c1:30:9c:
40:bd:ff:9a:2a:b7:aa:26:77:df:70:db:5a:09:d4:cb:ed:c2:
0b:84:5a:d3:3f:3a:ec:9a:73:d7:1c:ad:aa:72:26:96:c7:3a:
b9:01:f1:19:53:f8:90:d6:d2:a7:07:17:3f:94:c8:a6:85:d7:
d5:bd:3c:ab:8c:c3:28:af:83:38:0f:53:af:e4:d1:f4:70:ed:
2e:d6:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net