Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/CKo__--FMCDmTWJM6G5o4z-SXtw.roa
File: CKo__--FMCDmTWJM6G5o4z-SXtw.roa (raw, json)
Hash identifier: eANeWjNKbAj/QVGuvWbkgyt6vjDM77MENX3Kzh+505I=
Subject key identifier: 08:AA:3F:FF:EF:85:30:20:E6:4D:62:4C:E8:6E:68:E3:3F:92:5E:DC
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 0182C4D5B8EB0634E8CD2C3E0103DC5BF89B
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/CKo__--FMCDmTWJM6G5o4z-SXtw.roa
Signing time: Mon 22 Aug 2022 09:15:16 +0000
ROA not before: Mon 22 Aug 2022 09:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139659
IP address blocks: 193.134.209.0/24 maxlen: 24
193.134.210.0/24 maxlen: 24
193.134.211.0/24 maxlen: 24
193.134.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:d5:b8:eb:06:34:e8:cd:2c:3e:01:03:dc:5b:f8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Aug 22 09:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08aa3fffef853020e64d624ce86e68e33f925edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:a9:9d:0f:c0:51:68:b5:df:6b:a2:78:6d:
17:78:86:46:68:05:3b:4b:76:6f:9a:e2:45:36:62:
91:f5:db:50:a9:d0:5e:de:88:4b:e9:22:04:05:c5:
82:24:ec:10:16:f9:ea:01:71:8a:9b:9e:ca:ea:38:
57:42:6a:00:80:da:61:fe:04:c6:f9:7d:f3:86:ca:
24:f5:68:39:9a:bb:cd:29:d6:c0:42:40:d4:ae:9a:
64:ba:3a:2e:e7:05:00:77:ab:96:bd:b1:b5:74:62:
9a:97:92:cf:f6:bf:58:e4:ad:0e:68:c6:a2:ac:a8:
89:68:0b:52:a5:7e:4f:11:9f:2e:75:24:b7:9a:9f:
3a:2b:72:36:71:f9:38:4c:b3:76:35:f8:cb:2e:41:
4c:1e:78:06:b1:1a:74:99:6b:f6:ba:64:fe:11:f4:
c8:7e:93:93:90:27:69:3f:da:f5:1c:a7:be:d6:fe:
65:86:5b:40:5c:f3:fe:f7:6e:8c:2b:d5:34:87:e0:
89:0c:7c:6c:22:33:ee:72:fa:bb:79:09:d2:92:67:
f3:61:25:56:87:bf:46:09:98:c9:bb:6b:8b:58:dd:
5a:71:e7:e5:a1:ed:2d:48:96:b6:ba:21:b1:1a:fd:
20:9b:42:cc:b1:c4:93:2f:f2:06:72:80:d9:d2:97:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AA:3F:FF:EF:85:30:20:E6:4D:62:4C:E8:6E:68:E3:3F:92:5E:DC
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/CKo__--FMCDmTWJM6G5o4z-SXtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.208.0/22
Signature Algorithm: sha256WithRSAEncryption
28:24:22:78:31:b7:a2:65:09:33:2c:84:49:eb:7c:9f:d9:81:
36:7e:51:c3:fd:26:f0:fb:79:3c:76:cd:59:c5:96:72:e6:91:
56:f4:78:55:fb:c6:64:21:3e:14:10:43:2a:d2:72:6a:7d:94:
df:70:78:22:c4:a4:26:f3:dd:8f:fd:97:fb:a9:c1:97:f7:1b:
57:ed:99:2f:27:fe:61:68:13:04:ba:59:57:1b:d6:d1:ca:3b:
6d:e2:a3:70:fd:cb:b4:f5:0e:e3:ce:91:16:ce:59:fe:d4:0b:
f7:6f:4e:ad:8b:ed:ab:8c:2a:82:ac:eb:fe:15:1c:7e:96:2c:
30:4d:3c:bd:50:c8:4d:5e:4f:7b:a8:87:86:b3:0b:c9:21:f1:
8b:c8:fc:b2:bc:88:b3:ed:d7:35:e6:03:77:45:18:f0:60:ad:
7c:59:57:34:f7:89:33:fc:ef:3c:95:92:40:14:b0:13:cc:13:
a6:93:2a:39:50:d7:49:ba:05:5f:6b:e4:05:88:a1:05:64:b4:
8b:38:a7:ab:71:dc:68:5c:12:d0:b4:46:a3:69:44:fd:9d:c6:
ca:67:14:05:0f:59:3c:d9:8a:59:53:3f:c7:33:48:d0:38:fe:
62:00:44:d3:d2:18:17:c1:b5:2d:55:0a:1b:fe:87:10:22:8c:
e7:f5:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:22 2024 by rpki-client on console-ams.rpki-client.org