Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0YroIvObTeVVtOocUwEgQihYjFg.roa
File: 0YroIvObTeVVtOocUwEgQihYjFg.roa (raw, json)
Hash identifier: pt8QIkmBuisNR5DJp9IOZ6qfLcEwOy2cbn2TAna1BrE=
Subject key identifier: D1:8A:E8:22:F3:9B:4D:E5:55:B4:EA:1C:53:01:20:42:28:58:8C:58
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0185053385A7B73A1534DC106FAF9172CBFF
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0YroIvObTeVVtOocUwEgQihYjFg.roa
Signing time: Mon 12 Dec 2022 07:19:00 +0000
ROA not before: Mon 12 Dec 2022 07:19:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48737
IP address blocks: 93.188.132.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.215.0/24 maxlen: 24
163.171.216.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:33:85:a7:b7:3a:15:34:dc:10:6f:af:91:72:cb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Dec 12 07:19:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d18ae822f39b4de555b4ea1c5301204228588c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:d9:78:1e:08:28:ed:a4:e4:4c:23:de:14:
0a:ef:d6:4f:d9:15:34:46:a9:60:f3:d5:ab:44:06:
b8:76:08:b4:5e:96:5c:99:d8:68:6f:88:59:d3:5a:
78:49:20:57:d4:af:e9:68:86:38:76:f2:38:d9:20:
4b:48:69:dd:f2:48:5a:cb:ea:44:fd:63:c8:5c:e3:
ef:49:14:b3:95:dc:d9:b4:a5:5f:dc:88:32:59:3c:
dd:75:e6:57:54:62:a0:5d:d8:49:07:0a:a6:42:92:
f2:01:7a:9b:49:6d:be:0e:0e:47:a4:f7:76:a7:52:
37:89:98:ea:6c:b8:ee:d9:0c:a1:a0:a7:55:f4:bf:
dc:a6:1b:23:7f:40:a5:9b:03:f3:aa:65:f0:9a:b9:
7a:c6:db:ea:b5:c4:37:d6:fb:cd:f7:ae:3a:a4:8a:
30:81:8d:48:e2:58:09:34:ac:54:42:cd:c7:c3:73:
15:ee:f3:51:30:47:fe:a0:bc:00:57:81:f0:5e:70:
c2:33:02:4c:db:59:a7:ff:e3:e2:d0:35:61:a9:7e:
c1:6c:88:32:74:47:48:be:dd:d7:3d:29:37:17:cf:
10:3b:f7:49:c5:14:0f:33:a1:9b:00:6e:ac:9b:e7:
a6:6b:c2:56:1e:fd:11:d2:8e:9f:61:f5:59:5e:28:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:E8:22:F3:9B:4D:E5:55:B4:EA:1C:53:01:20:42:28:58:8C:58
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0YroIvObTeVVtOocUwEgQihYjFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.132.0/24
93.188.135.0/24
163.171.215.0-163.171.216.255
163.171.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:62:77:d7:3b:ea:72:72:12:f4:44:70:85:e8:e8:0d:50:ee:
75:6b:93:26:d6:af:a6:98:d4:6d:05:ef:3a:14:4c:14:49:2b:
64:8a:de:01:b3:c0:68:b9:88:db:31:ec:e2:22:92:d8:33:75:
b0:fb:eb:bd:dd:98:9d:6d:47:86:b2:8e:d0:ba:3e:99:b8:cc:
69:a0:d0:7e:d9:3a:ee:63:5e:37:f9:61:84:a1:5e:55:70:38:
b5:82:37:ae:91:14:e3:08:28:f7:f4:24:56:da:dd:43:85:f5:
57:40:3c:a0:64:2b:a0:c0:cc:35:22:b1:d7:94:bd:5a:d6:c6:
38:e4:40:27:60:02:84:5e:db:c4:7d:52:ea:43:46:43:e3:68:
4f:39:8c:ac:fc:84:1a:53:85:3c:ed:9e:82:ce:5d:ec:75:1f:
63:70:eb:e5:bb:25:cf:06:dc:c6:aa:43:0c:f5:e5:0b:8e:48:
c2:9f:ed:43:20:14:8d:7f:f9:27:c3:d4:e2:61:6f:0c:f1:e4:
1a:cc:09:31:21:71:db:42:35:17:41:04:1c:77:69:f1:39:ed:
15:a4:80:bd:c9:30:a4:9b:19:f8:59:be:65:1b:b3:a7:d8:64:
27:af:2b:55:e7:ef:f5:d8:e6:18:87:a5:f4:8b:32:5f:96:50:
e5:e0:4f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org