Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/TMRQIE7uJ_nz0CXpw9G8SjU2NeI.roa
File: TMRQIE7uJ_nz0CXpw9G8SjU2NeI.roa (raw, json)
Hash identifier: Go60rtZDA1zLC6dbLQrJlhbZwR2jYJG0Ik7UhPvWgy0=
Subject key identifier: 4C:C4:50:20:4E:EE:27:F9:F3:D0:25:E9:C3:D1:BC:4A:35:36:35:E2
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 447B5367
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/TMRQIE7uJ_nz0CXpw9G8SjU2NeI.roa
Signing time: Sat 01 Jan 2022 03:58:27 +0000
ROA not before: Sat 01 Jan 2022 03:58:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24600
IP address blocks: 193.252.117.0/24 maxlen: 24
193.252.118.0/24 maxlen: 24
193.252.123.0/24 maxlen: 24
193.252.121.0/24 maxlen: 24
193.252.122.0/24 maxlen: 24
2a01:c9c0:b0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148932967 (0x447b5367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cc450204eee27f9f3d025e9c3d1bc4a353635e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:8b:21:ce:a2:81:63:3c:a2:0c:25:4b:00:
93:de:42:5a:76:82:6d:d3:91:99:6a:3c:e2:9b:67:
7f:ab:16:54:5f:61:ac:8d:01:45:ce:c4:45:c6:5f:
ac:9a:77:f7:98:f2:44:5c:7c:41:12:0c:1f:63:9a:
24:da:1c:c1:63:41:0b:80:59:64:2f:bf:b4:44:20:
d3:3e:ce:06:f2:c9:7c:86:fb:2f:f6:3e:43:4c:86:
0d:e7:17:a3:dc:b7:28:e2:d2:f6:95:e9:c0:63:b4:
c6:8c:92:ac:c9:33:e1:c6:6f:a9:2c:68:85:5c:09:
bf:33:6b:e6:07:1a:10:50:77:26:a7:4a:2f:a6:de:
01:80:43:ec:45:51:9b:78:c9:e1:d6:2a:da:18:b4:
45:0d:34:81:cb:18:56:6b:aa:4f:18:10:4c:07:f1:
eb:b1:93:a5:3e:f5:fa:df:2c:4a:76:f4:ed:f0:66:
fe:10:1d:06:7d:d1:e5:a4:b2:7f:55:bc:13:03:67:
98:8d:5b:14:1d:cd:30:31:c0:8c:ee:a7:34:fc:92:
2c:4e:6d:88:26:80:73:8f:79:24:83:56:b1:bc:f0:
b0:b3:4f:5f:57:a4:71:ac:ce:3d:f2:00:60:65:e5:
7b:46:e0:83:24:cc:d0:a8:bb:9f:5b:14:c5:70:26:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:50:20:4E:EE:27:F9:F3:D0:25:E9:C3:D1:BC:4A:35:36:35:E2
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/TMRQIE7uJ_nz0CXpw9G8SjU2NeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.252.117.0-193.252.118.255
193.252.121.0-193.252.123.255
IPv6:
2a01:c9c0:b0::/44
Signature Algorithm: sha256WithRSAEncryption
09:1d:e1:28:54:3a:6a:4a:36:75:3c:3b:63:de:47:de:aa:18:
66:36:4e:f7:52:ba:d4:06:27:71:df:ae:b9:1d:61:f1:d3:9b:
0c:ea:7b:58:df:7b:db:06:97:26:79:d0:ae:13:03:0e:c2:ca:
6c:68:52:64:34:c1:67:05:0f:64:83:36:f6:05:e3:88:7c:99:
09:ec:19:48:54:88:0b:44:5d:cf:6d:df:37:6c:32:cf:fa:19:
e0:68:a4:56:d7:57:df:3b:19:b2:39:d7:27:32:93:f4:9c:64:
12:a6:32:5a:ad:c8:b7:38:78:54:27:60:15:a5:b2:29:d6:bb:
40:84:83:27:0f:9f:5c:0a:98:39:2b:89:e2:06:c8:4f:10:0c:
fa:75:a9:91:9b:20:b0:9a:8e:94:68:18:cd:7c:e5:05:f6:8c:
dd:25:0d:a5:fc:db:34:bf:fc:c1:ac:14:a8:e3:0f:bc:cc:a7:
43:c6:3a:23:55:4a:d8:9c:51:c6:e9:67:ef:2e:64:50:83:39:
64:de:71:9c:e1:ed:de:78:9a:73:1f:3d:33:28:4f:7b:3a:be:
35:a2:45:88:68:80:b9:0a:02:16:a0:1a:b8:08:6d:eb:db:7d:
67:31:fa:5c:e3:7c:2d:66:a8:94:73:94:22:08:89:ea:d0:24:
fb:b5:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org