Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/I6Mt2pkdxcrq-Sjc_-r_pCk92Yo.roa
File: I6Mt2pkdxcrq-Sjc_-r_pCk92Yo.roa (raw, json)
Hash identifier: 63/gSBsxBAsqcisa8lKNHp/Yintq6yXw452p7dBw6gs=
Subject key identifier: 23:A3:2D:DA:99:1D:C5:CA:EA:F9:28:DC:FF:EA:FF:A4:29:3D:D9:8A
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 448536D1
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/I6Mt2pkdxcrq-Sjc_-r_pCk92Yo.roa
Signing time: Sat 01 Jan 2022 03:58:33 +0000
ROA not before: Sat 01 Jan 2022 03:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 37173
IP address blocks: 193.251.153.0/24 maxlen: 24
193.251.218.0/23 maxlen: 24
193.251.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149581009 (0x448536d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23a32dda991dc5caeaf928dcffeaffa4293dd98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:06:09:6d:4c:bc:bf:e0:fe:fe:59:e0:dd:
1d:26:d7:e5:97:58:ad:8b:9c:35:17:e4:9c:df:5f:
89:ef:6f:52:21:ce:96:83:ca:b7:34:fc:fe:4d:b5:
fa:82:83:b2:f3:c7:77:9a:d5:1b:2e:3e:03:53:cb:
ca:e7:33:70:42:ca:fe:70:79:73:d7:78:b1:4a:30:
e6:e3:aa:b1:d9:f9:e8:c7:60:15:a1:4f:3c:5b:3e:
0c:a2:63:1d:c0:0c:05:fb:f2:51:a0:1d:66:a8:ad:
3c:da:17:11:09:d4:8e:a3:d7:7b:3d:8d:58:c9:18:
4e:01:e7:7e:02:e1:81:04:0b:a1:02:a8:7c:5f:b7:
06:3b:ba:18:b3:23:16:5b:81:a8:28:b4:cc:bd:59:
3a:f8:09:59:67:90:a9:94:cf:31:8c:e0:3b:80:43:
69:1b:77:56:5f:e2:6c:48:17:87:b8:d7:c2:48:1f:
22:f5:38:85:40:54:fb:3a:a1:24:de:17:b8:a5:74:
f9:01:42:d0:02:eb:db:b3:72:0a:1a:b1:83:0b:ae:
5e:e3:28:0a:cc:72:44:ef:54:9f:e5:99:94:02:71:
2d:bf:82:3e:cd:5a:fe:95:51:54:47:18:71:c0:ec:
99:db:76:6f:26:ee:cb:93:08:46:6e:55:f6:0d:85:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:2D:DA:99:1D:C5:CA:EA:F9:28:DC:FF:EA:FF:A4:29:3D:D9:8A
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/I6Mt2pkdxcrq-Sjc_-r_pCk92Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.251.153.0/24
193.251.218.0/23
193.251.222.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:8b:02:0c:0b:b8:84:b1:1b:17:c0:49:50:b9:3e:79:61:5d:
79:5c:b6:58:cb:a2:95:04:df:8e:f8:8b:b7:b3:24:38:13:04:
53:cc:4a:47:06:22:db:aa:9c:1e:8e:23:a7:f4:3a:6b:04:6f:
99:0b:01:81:ce:3a:ad:49:e3:2b:91:56:be:19:19:0e:15:44:
99:57:37:06:32:a6:95:db:72:34:cb:58:81:da:c6:fc:6b:fe:
19:76:b7:92:45:05:40:57:29:23:76:61:4e:2c:c6:41:ad:a9:
e8:21:e3:60:d2:a3:e0:60:48:19:0e:e8:0d:30:c9:bc:a7:e6:
0e:c2:c3:88:80:50:46:0b:ec:1a:98:44:15:1e:91:4b:58:76:
e8:8b:b9:3f:3a:00:a9:5a:85:b9:52:eb:7a:83:4f:75:c5:4e:
91:bd:4a:73:38:82:d3:db:31:39:03:bb:65:0d:be:9c:21:7a:
38:de:bc:d5:66:ad:27:43:96:3f:38:47:8a:52:07:0a:0d:1d:
9a:a9:30:83:5b:13:71:6f:09:e7:7c:d3:f8:be:76:64:a2:06:
e8:60:d5:8a:23:41:0a:9d:85:aa:02:cb:1d:cc:1e:e8:67:fd:
99:85:0a:28:07:39:bd:4e:62:36:dc:b1:cd:cb:fa:0c:84:5a:
15:a7:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org