Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/igcvk6uvijylo5QuTiRN4AM7HU4.roa
File: igcvk6uvijylo5QuTiRN4AM7HU4.roa (raw, json)
Hash identifier: 8WfmDcmSc5Ft33tyVB18p28GplgpS878n9IP+qbzY9E=
Subject key identifier: 8A:07:2F:93:AB:AF:8A:3C:A5:A3:94:2E:4E:24:4D:E0:03:3B:1D:4E
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 3576DD24
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/igcvk6uvijylo5QuTiRN4AM7HU4.roa
Signing time: Sat 01 Jan 2022 11:55:43 +0000
ROA not before: Sat 01 Jan 2022 11:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41493
IP address blocks: 195.93.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896982308 (0x3576dd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Jan 1 11:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a072f93abaf8a3ca5a3942e4e244de0033b1d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:1d:be:76:f1:26:ab:28:3c:9a:5b:d8:da:
5c:c3:00:f4:c4:cc:19:b2:80:95:31:65:a5:4b:35:
13:12:b8:22:20:24:0e:75:95:ef:2d:ca:42:58:7a:
36:ed:d9:4f:dc:3c:95:c5:86:8d:b3:7d:a8:38:7d:
c4:a6:10:47:8c:a1:86:2b:10:6f:84:d6:47:e2:1b:
f7:0d:39:c8:62:69:d5:a9:a7:6a:ca:0f:48:31:78:
1b:18:4f:9a:1a:47:ea:98:dd:4d:92:65:75:16:d4:
b5:09:7d:d2:68:01:d8:bd:98:1a:b6:fc:f8:a1:45:
b3:f3:aa:80:c0:ea:35:f9:d4:fe:74:98:cc:4f:50:
d2:f5:ce:e8:1e:1b:2d:7b:55:a4:04:f8:93:29:ac:
0c:9c:6f:55:7f:3e:bc:62:f1:94:30:f3:ea:7a:c4:
d7:79:0c:d6:e0:e3:d0:22:15:44:af:9a:af:2f:5c:
4a:42:12:ec:95:15:8b:ac:5c:68:72:4b:3f:d0:fd:
48:9f:dd:0a:f4:4c:44:81:77:a4:ff:71:7f:fd:ec:
a6:dd:00:5d:f0:ad:d9:84:02:8b:7a:d8:a4:a0:71:
9f:7f:00:66:14:da:59:a5:5e:dc:0f:bf:32:f5:b6:
42:f2:14:ba:96:eb:a6:56:a3:bd:50:c6:cb:6a:6a:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:07:2F:93:AB:AF:8A:3C:A5:A3:94:2E:4E:24:4D:E0:03:3B:1D:4E
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/igcvk6uvijylo5QuTiRN4AM7HU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.196.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:dc:ab:6a:99:bc:28:13:9a:7c:f3:32:26:10:d0:c0:ed:0f:
71:e1:2d:ff:84:5b:13:c0:7f:68:22:0c:20:45:03:a5:08:ec:
ba:d6:1e:30:39:01:6b:89:6a:26:a9:d1:34:d8:e6:1a:ae:e5:
0a:42:a5:7f:f7:15:6c:9b:a2:fb:1c:4c:5d:e1:34:7a:57:06:
e9:c1:67:9a:97:53:19:ff:d4:08:3a:b6:f1:ce:eb:56:4a:c6:
6b:f0:67:f0:96:40:8f:6f:56:70:c6:9b:9d:81:a7:bd:a7:ff:
f2:0b:a1:2d:d3:17:56:ef:9c:bf:1d:e1:dd:f4:a7:69:71:ad:
04:d4:78:79:af:81:90:5e:ec:a4:72:51:ea:5a:eb:63:52:3f:
81:6a:44:a5:df:58:61:74:fc:ac:e9:63:03:94:20:99:f5:dc:
24:7a:61:fc:9a:3b:21:dd:33:67:cd:85:f4:c5:51:3d:b5:d0:
40:32:83:cc:8a:25:d0:f9:c4:6a:52:8a:b6:dd:62:da:78:68:
4b:9b:01:ba:b1:c9:fb:a3:3d:db:1a:98:46:35:cc:8b:0c:c8:
da:4a:bf:2a:9b:d0:0a:9b:fb:48:71:9f:ef:10:a3:0e:be:f7:
d6:02:71:ea:e7:0b:68:e5:c1:25:45:92:3b:89:e5:d3:86:53:
53:11:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:48 2023 by rpki-client on console.sobornost.net