Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/55hsHBe4LTS7iDd5rSArri5oCYo.roa
File: 55hsHBe4LTS7iDd5rSArri5oCYo.roa (raw, json)
Hash identifier: LW3zs0Jn+qgQMsOsz/XXtNkm3W3uKFtHJX0lr0sqYag=
Subject key identifier: E7:98:6C:1C:17:B8:2D:34:BB:88:37:79:AD:20:2B:AE:2E:68:09:8A
Certificate issuer: /CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Certificate serial: 06471E77
Authority key identifier: 7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/55hsHBe4LTS7iDd5rSArri5oCYo.roa
Signing time: Tue 03 May 2022 09:41:18 +0000
ROA not before: Tue 03 May 2022 09:41:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 193.104.197.0/24 maxlen: 24
193.104.198.0/24 maxlen: 24
2a0f:9340:10::/48 maxlen: 48
2a0f:9340::/48 maxlen: 48
2a0f:9340:33::/48 maxlen: 48
2a0f:9340:11::/48 maxlen: 48
2a0f:9340:34::/48 maxlen: 48
2a0f:9340:1a::/48 maxlen: 48
2a0f:9340:32::/48 maxlen: 48
2a0f:9340:3d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105324151 (0x6471e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Validity
Not Before: May 3 09:41:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7986c1c17b82d34bb883779ad202bae2e68098a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:9c:87:9d:7d:05:1d:15:16:37:9a:40:75:
46:c7:f2:1d:bb:1e:73:19:32:e7:a6:59:ab:7f:50:
08:e1:30:6d:53:29:31:af:bf:fb:83:9d:2c:ac:59:
4d:3f:44:ac:ae:16:5c:61:1c:92:34:3a:fd:b1:19:
ff:7b:d2:30:be:0d:6f:05:70:ec:af:a2:3b:0c:11:
2e:6a:5a:37:b6:50:45:9c:7c:86:d7:cc:e2:39:c3:
2f:bf:af:38:28:c3:7c:55:b1:7e:97:37:71:d4:45:
9d:be:81:fe:09:74:2d:cb:8b:f6:ba:76:4d:8c:57:
32:bf:f0:c9:79:21:34:19:f8:20:d4:55:d4:e7:35:
52:64:6a:e2:e8:2a:3a:1d:9e:65:13:0e:bb:ee:8b:
0f:20:c0:5c:17:9e:66:d5:ec:cc:ab:4e:1f:45:0a:
c8:28:da:b8:66:c2:88:3c:52:c3:12:39:de:71:d6:
cf:dc:a1:cf:6e:17:4f:c1:76:9c:2b:42:ac:06:23:
57:9c:58:77:10:c7:b5:8e:12:71:6f:93:f4:cf:48:
8c:2d:b6:1e:94:ac:ec:8b:5a:54:2a:84:e0:c1:95:
af:0e:4e:a4:af:12:f0:12:d8:55:d6:ac:3d:84:a7:
0e:7f:74:a4:8a:83:bd:24:1a:14:8c:b0:7b:56:5e:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:98:6C:1C:17:B8:2D:34:BB:88:37:79:AD:20:2B:AE:2E:68:09:8A
X509v3 Authority Key Identifier:
keyid:7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/55hsHBe4LTS7iDd5rSArri5oCYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.197.0-193.104.198.255
IPv6:
2a0f:9340::/48
2a0f:9340:10::/47
2a0f:9340:1a::/48
2a0f:9340:32::-2a0f:9340:34:ffff:ffff:ffff:ffff:ffff
2a0f:9340:3d::/48
Signature Algorithm: sha256WithRSAEncryption
97:fd:a4:01:03:bf:19:0a:42:ba:01:03:80:2b:96:4a:e6:78:
6d:0c:b6:18:9b:cc:20:64:7a:0e:77:d4:38:3e:83:21:ac:17:
3b:bc:83:4d:d9:69:ff:9b:b4:91:48:f0:c4:f5:65:be:bf:2c:
2f:2d:3c:23:6d:4f:e8:90:ae:ab:3e:3d:d5:26:28:42:39:bb:
5f:6c:df:38:53:90:e8:32:99:d2:88:f1:ec:a9:30:a2:9b:59:
dd:95:c3:b3:4d:c1:fc:30:09:37:ce:b6:28:4c:98:43:2c:b1:
3b:c2:64:88:29:16:dc:c5:bc:3b:d8:b7:b3:f4:98:a8:42:4c:
94:1d:59:f7:a4:fb:2f:41:b8:a3:ae:da:e8:ce:03:4b:25:79:
59:b0:ce:06:29:59:51:92:36:9e:f4:89:0a:e8:28:b0:6f:c1:
9e:f3:8a:78:32:5f:bd:80:16:4e:08:0a:7f:99:fa:70:e1:ac:
d1:ca:a2:cb:c0:dc:bc:b8:bd:86:b5:94:2c:21:de:32:c6:9e:
15:e7:90:1c:d8:a2:b6:ad:c2:bf:cf:06:fc:65:fb:11:d4:7b:
f9:5e:5b:47:50:8d:eb:03:fe:49:23:a6:7b:07:f8:33:5e:1b:
81:38:0f:9b:e0:f7:2f:0c:46:88:65:e3:c6:0f:30:bb:67:14:
bf:71:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:00 2024 by rpki-client on console-fra.rpki-client.org