Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/35XeH-sDHuYxTWf1imUBbH6YW6k.roa
File: 35XeH-sDHuYxTWf1imUBbH6YW6k.roa (raw, json)
Hash identifier: vEh8llfzLFv75qAUgVxIH8DkYzS2/26jeeqrop87+oQ=
Subject key identifier: DF:95:DE:1F:EB:03:1E:E6:31:4D:67:F5:8A:65:01:6C:7E:98:5B:A9
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 06CCC920
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/35XeH-sDHuYxTWf1imUBbH6YW6k.roa
Signing time: Sat 01 Jan 2022 15:01:49 +0000
ROA not before: Sat 01 Jan 2022 15:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208065
IP address blocks: 193.8.40.0/22 maxlen: 22
193.8.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114084128 (0x6ccc920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jan 1 15:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df95de1feb031ee6314d67f58a65016c7e985ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:ac:8c:88:a1:b1:d6:e6:1e:45:b1:7e:98:
0f:b7:72:a8:4f:9e:57:98:e2:99:da:b8:ce:e7:d1:
37:61:c9:6b:a0:6c:b8:c3:d0:e9:66:88:b4:d2:6c:
3e:24:0d:ff:b8:56:c9:4f:14:5e:a4:77:13:46:f1:
36:6e:c4:80:ae:30:21:7f:e6:2b:71:c2:a5:44:9a:
41:3e:ae:29:dc:f9:07:c5:71:27:7f:0a:b0:82:1a:
f1:c2:6e:f4:be:7a:6f:d1:fe:7d:d6:28:c6:02:c8:
26:8b:89:30:02:0a:32:01:e5:5d:8f:39:45:64:d3:
38:0b:22:84:50:a5:86:62:3e:c2:d6:69:11:11:14:
d7:e8:fa:93:b9:a5:25:3f:f4:c7:0e:47:68:cd:08:
22:64:41:f4:e5:4b:1a:a8:dd:46:7b:51:0e:2e:71:
45:85:d8:99:d8:a1:0d:a1:37:3a:2f:06:0b:91:80:
2b:d3:c0:00:7c:ab:ba:13:4a:d7:c9:b2:50:ea:8e:
b3:e4:f0:b5:c0:9d:c7:17:40:02:23:cd:f4:d7:09:
b5:f7:ef:35:96:0a:ce:fb:40:e8:35:84:6d:7b:28:
32:3c:47:f8:44:61:02:76:47:62:a7:a1:70:c5:b3:
b2:41:e5:9f:75:c6:ef:bf:b7:6a:7f:a6:c5:42:b7:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:DE:1F:EB:03:1E:E6:31:4D:67:F5:8A:65:01:6C:7E:98:5B:A9
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/35XeH-sDHuYxTWf1imUBbH6YW6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.40.0-193.8.44.255
Signature Algorithm: sha256WithRSAEncryption
87:ca:83:40:62:55:10:05:a9:1a:a8:1c:a6:d6:28:c6:04:4d:
0e:e2:be:65:b3:66:45:f4:fc:8f:b2:40:8e:cd:7e:71:59:a5:
aa:9b:e3:01:0c:97:a7:7e:68:2e:3e:fa:b5:49:0d:2c:24:5f:
45:1a:5b:d1:82:91:01:37:32:f5:e5:2e:2e:0d:b4:75:54:f8:
a3:0b:5c:c4:73:40:57:b3:5c:01:bb:95:08:16:68:49:43:e3:
e1:1b:52:db:e7:94:ae:fc:e5:15:fa:ba:34:6a:2d:aa:e3:39:
9a:e9:54:15:74:41:68:93:e4:1a:a3:34:a9:98:98:e2:3a:e3:
c4:9e:73:89:45:0f:ad:78:af:c5:68:d3:e2:33:6a:bc:55:9c:
09:d4:77:ec:f0:16:5d:48:bd:b1:66:4b:d0:af:67:b8:4f:76:
9e:b0:7d:a7:e1:88:40:ed:cd:d5:f2:8b:37:b4:e3:a2:40:6c:
a4:d7:74:ea:63:eb:4e:ad:ee:c0:10:af:b1:ff:89:8b:8f:0c:
fc:74:d3:8b:2e:a4:8f:96:81:cd:6b:28:34:65:98:02:35:cc:
40:6c:38:c3:f2:28:c2:5e:ee:09:4d:08:3a:95:13:0d:a0:90:
a7:8e:72:08:8d:3c:eb:58:c9:f4:67:db:da:b6:e8:de:04:61:
ca:7e:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:19 2024 by rpki-client on console-ams.rpki-client.org