Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/thbxCjQ5fZQc7u2VRRr4_lwtBX0.roa
File: thbxCjQ5fZQc7u2VRRr4_lwtBX0.roa (raw, json)
Hash identifier: OV//Qpu0mZ0nGIfLcjDNwJcJBeI4FsC9jiWs9J+8srU=
Subject key identifier: B6:16:F1:0A:34:39:7D:94:1C:EE:ED:95:45:1A:F8:FE:5C:2D:05:7D
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01841329779DB7310A540D7A9843C93B3A20
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/thbxCjQ5fZQc7u2VRRr4_lwtBX0.roa
Signing time: Wed 26 Oct 2022 07:19:55 +0000
ROA not before: Wed 26 Oct 2022 07:19:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.254.52.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:29:77:9d:b7:31:0a:54:0d:7a:98:43:c9:3b:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 26 07:19:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b616f10a34397d941ceeed95451af8fe5c2d057d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:e0:af:19:aa:8b:02:e3:a0:ff:c3:02:6d:
dc:45:b9:7c:73:97:55:08:60:22:9a:6a:5c:58:3d:
b9:f2:3a:21:d9:12:be:1b:a3:b2:cd:79:f8:0f:fb:
84:23:fd:87:bd:1e:98:49:d4:e4:f0:8c:a5:61:45:
04:98:a1:43:c9:5d:ac:b6:24:b8:28:f3:9a:21:98:
a5:51:36:fa:1b:ad:28:0c:74:26:d9:7d:8c:50:04:
2b:5b:71:7a:f6:8f:20:aa:e3:a2:d7:56:92:b1:3b:
ed:1e:c7:09:97:71:49:22:eb:c3:6a:76:6e:d6:88:
d3:bc:12:9a:b9:c4:60:36:53:ff:32:84:1d:7c:87:
66:c5:0c:3d:bf:ab:a3:35:bf:33:57:30:9f:6b:80:
ed:49:a7:27:05:3a:97:dc:e2:47:e1:d9:d0:84:b9:
55:ae:4f:e6:c2:8f:09:a4:df:19:d0:85:1e:4e:b8:
4a:ab:bf:c9:3c:5e:85:99:51:26:75:3f:83:94:93:
50:d7:a3:31:cc:bc:5a:cf:57:f9:25:2b:0f:f5:77:
03:c3:05:6b:08:73:20:fc:c2:04:ed:d1:25:bc:a2:
a3:fc:00:fb:9d:73:d1:39:47:16:b9:c8:c1:05:3a:
67:e7:9d:f9:7d:b0:ae:eb:68:46:88:e1:ce:8b:18:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:16:F1:0A:34:39:7D:94:1C:EE:ED:95:45:1A:F8:FE:5C:2D:05:7D
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/thbxCjQ5fZQc7u2VRRr4_lwtBX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/24
93.190.10.0/23
185.254.52.0/24
193.17.4.0/24
Signature Algorithm: sha256WithRSAEncryption
46:45:88:80:51:11:38:f3:68:cd:4f:c3:61:53:2b:d4:c5:2b:
47:7f:4c:6f:43:57:23:9f:c7:3e:89:f8:18:84:d8:72:07:5d:
aa:78:43:e5:3e:9b:8c:b1:70:bc:72:1e:a7:04:a0:f5:63:d2:
14:37:50:a6:a6:0c:1f:b5:9c:ee:a5:6d:b4:d9:6e:25:4c:df:
9d:78:8b:d4:c6:78:61:98:a3:69:2e:1d:45:d7:b3:00:76:10:
33:3e:cc:3e:74:ad:9b:3f:d0:46:77:eb:be:48:a5:1d:d4:64:
1f:02:a6:28:d8:51:67:51:1e:1a:87:3a:30:48:df:24:6a:a9:
84:c9:0c:1f:73:ae:e2:32:20:91:5a:7d:f2:40:2e:db:6b:79:
b8:1a:84:88:61:fa:1d:85:4f:e1:df:2d:3c:47:32:5f:61:e1:
6a:27:00:65:2d:c8:27:84:e1:f3:27:6c:9b:6f:cd:de:83:9e:
e8:a3:04:a7:ae:aa:02:65:fb:55:66:75:54:f9:01:aa:45:01:
9e:f7:4e:c8:8a:9c:62:59:b6:34:fd:6b:13:f6:fd:00:c5:79:
9d:00:d0:23:52:ed:d4:e9:3a:fc:1e:73:0f:6a:05:4d:8b:86:
ca:21:49:35:ed:55:2f:31:3d:f8:0a:89:a6:f6:a0:2f:e5:3a:
53:d3:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org