Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/4LqET2g57YR5ZDFA1_cjIU0VwmM.roa
File: 4LqET2g57YR5ZDFA1_cjIU0VwmM.roa (raw, json)
Hash identifier: R4bRELL8B0kTjT2AiX3oHPm8vomD2PTrnz6sBkxPABE=
Subject key identifier: E0:BA:84:4F:68:39:ED:84:79:64:31:40:D7:F7:23:21:4D:15:C2:63
Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Certificate serial: 0CB2FA56
Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/4LqET2g57YR5ZDFA1_cjIU0VwmM.roa
Signing time: Sat 01 Jan 2022 08:53:53 +0000
ROA not before: Sat 01 Jan 2022 08:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58111
IP address blocks: 193.47.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213056086 (0xcb2fa56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Validity
Not Before: Jan 1 08:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0ba844f6839ed8479643140d7f723214d15c263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:84:be:f6:2d:88:85:16:01:ea:e6:8f:9d:
39:55:6a:4c:9e:e7:de:f0:7d:92:07:7e:ea:8a:04:
88:1b:a0:0b:ba:7c:47:32:a5:0f:9b:e0:aa:da:d8:
aa:25:74:b0:d8:21:1d:3c:5c:e1:c6:81:ef:70:1c:
7f:f6:1f:02:9f:22:0a:6d:f7:a6:09:43:f2:36:d0:
15:54:fa:1e:42:26:05:5c:4f:da:3a:80:64:d6:3f:
0f:50:04:de:cd:f5:a5:30:76:2f:51:2d:de:02:82:
b8:53:84:d1:7c:af:0b:7e:91:70:4f:66:51:f3:ac:
d5:af:53:e6:7d:04:db:54:f7:7f:b7:d5:b0:15:9f:
c5:c1:cc:db:fd:6a:24:b1:cf:33:68:a1:16:6d:a5:
e9:09:58:aa:34:98:e9:16:a7:bd:b5:eb:01:fe:de:
14:85:69:dd:68:32:88:70:cd:17:16:bb:4d:db:f4:
11:43:d0:17:22:9d:5c:85:49:c4:b5:12:8f:16:a0:
0d:70:91:d8:6f:83:28:46:8a:e0:df:94:98:02:da:
61:65:90:fd:c4:b4:aa:ad:ba:52:9c:dd:3e:61:1d:
fd:8e:4d:e8:a8:3a:d0:da:0c:47:67:ad:39:9d:3e:
df:97:ef:10:e8:c8:c2:3a:03:b7:bc:db:d8:45:36:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:84:4F:68:39:ED:84:79:64:31:40:D7:F7:23:21:4D:15:C2:63
X509v3 Authority Key Identifier:
keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/4LqET2g57YR5ZDFA1_cjIU0VwmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:63:e0:07:70:b8:57:3c:bb:b4:80:1e:e0:16:7b:07:1a:a7:
c2:4e:04:6f:c8:1e:68:e0:55:65:01:f7:11:83:00:95:3a:26:
18:06:ab:15:f3:e2:d4:b8:e8:05:69:f6:88:61:78:36:fa:b1:
c0:55:df:fa:bb:31:6d:b5:80:b5:a2:e0:74:3e:7a:0b:64:af:
76:ba:ca:2f:83:cf:38:24:34:1b:9d:2d:65:eb:c6:f8:30:2a:
83:5f:71:0e:7c:39:ff:31:36:58:05:8a:4d:e8:b8:9c:56:79:
b1:17:f5:14:eb:7b:b0:63:e0:fd:04:34:cb:38:91:f1:81:5b:
0f:6c:eb:a8:0c:93:62:5a:d1:96:50:a2:d6:5b:5b:fe:16:37:
ef:08:f6:f3:56:42:2e:00:42:c7:c5:14:4a:9e:81:b3:17:e0:
03:e6:af:27:5c:58:91:4a:da:80:e9:44:a9:c3:fd:ab:d0:3b:
45:ea:1e:00:24:9a:52:e4:be:cf:1c:7a:e1:f9:bb:1d:13:fc:
04:53:5c:0a:6e:a8:ec:4d:95:86:87:e4:be:10:34:31:a0:2f:
75:33:41:07:dd:03:b1:45:12:45:3e:e4:89:a9:43:74:99:48:
98:02:0d:4a:24:a3:d8:f7:98:80:f8:ed:d3:2c:ca:c8:32:8e:
2e:2e:72:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net