Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/kDAskESl5PVWmc0RLKhuT6-QD_0.roa
File: kDAskESl5PVWmc0RLKhuT6-QD_0.roa (raw, json)
Hash identifier: avqpo3q+n9/Bl88j3HAjsWP/iDhu2jcfpBiyQL13AeA=
Subject key identifier: 90:30:2C:90:44:A5:E4:F5:56:99:CD:11:2C:A8:6E:4F:AF:90:0F:FD
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 050E12
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/kDAskESl5PVWmc0RLKhuT6-QD_0.roa
Signing time: Tue 18 Jan 2022 13:19:25 +0000
ROA not before: Tue 18 Jan 2022 13:19:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212236
IP address blocks: 193.238.45.0/24 maxlen: 24
193.238.46.0/23 maxlen: 24
193.162.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331282 (0x50e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Jan 18 13:19:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90302c9044a5e4f55699cd112ca86e4faf900ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:26:1b:08:df:63:9b:d0:3e:fa:46:6c:cd:
fc:6e:fa:4f:ad:1e:ce:d9:8b:a3:ba:52:9c:33:e0:
da:c6:59:4e:f6:40:91:73:8c:55:21:19:2e:bc:ec:
87:6f:9a:47:c1:c7:ac:c2:55:73:0f:bb:9e:a2:66:
2e:18:5a:50:c1:f9:54:fd:38:29:e3:2d:6d:0c:c2:
b6:fc:98:25:0b:be:8f:c9:6f:9f:fd:12:e4:77:bc:
a1:5f:29:cb:e9:76:8d:5c:22:71:58:1c:d4:72:1e:
be:db:ca:b4:02:08:ea:99:65:7c:14:18:e2:36:6b:
b3:f5:ef:94:da:16:c0:7a:05:cc:55:5f:17:13:42:
1d:cb:00:15:51:0b:ed:5a:8b:ee:30:05:b1:47:49:
7f:e8:b3:ea:fb:c2:7d:db:eb:2b:0b:3d:b7:27:be:
4e:ee:4b:7b:0a:e8:9a:ca:a7:03:fb:7e:99:8b:92:
e7:2f:64:f2:e8:7c:70:1a:d3:67:0d:3d:35:e6:23:
b8:82:53:01:54:aa:dc:75:19:d8:4c:bb:a4:c5:4c:
a4:fd:07:27:36:44:42:34:37:32:ed:2b:6d:74:28:
94:7f:ff:cc:01:bc:6f:24:15:d0:37:15:0c:ed:75:
ac:c0:65:2a:88:66:c2:fe:dd:c5:70:93:e7:b1:28:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:2C:90:44:A5:E4:F5:56:99:CD:11:2C:A8:6E:4F:AF:90:0F:FD
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/kDAskESl5PVWmc0RLKhuT6-QD_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.139.0/24
193.238.45.0-193.238.47.255
Signature Algorithm: sha256WithRSAEncryption
7c:05:1a:d2:da:a9:54:72:5d:52:ab:08:ae:9c:83:00:0f:a0:
02:66:df:a3:6a:53:ce:92:3d:54:56:c5:1e:67:86:b9:9f:a3:
fe:ad:17:b5:8a:9c:ce:d0:63:8e:02:0c:1a:94:d3:e0:30:3b:
56:4a:32:f3:41:d3:ec:21:13:34:3f:a5:66:b9:17:ed:a8:56:
8e:4e:99:40:64:64:e6:f7:2f:74:38:63:6f:84:48:f5:6b:79:
e3:b5:90:89:cc:5b:37:2e:d5:9c:a7:75:35:aa:db:c8:d0:64:
3c:e1:36:cf:e4:42:84:f4:a8:69:e4:1b:26:ee:ca:13:ce:4b:
0f:00:cc:b1:32:1f:25:c8:7d:9f:a8:66:a1:ea:f1:b8:ca:eb:
af:78:fb:c9:44:e9:ab:18:9e:0c:f9:71:bb:25:35:b8:35:e8:
8f:89:de:f1:5b:ef:c3:42:6f:64:29:fc:68:3b:15:50:9b:64:
3c:d7:58:47:1c:15:3e:28:a0:7b:49:3e:84:34:53:6b:91:dd:
8a:33:59:2a:f9:3a:27:7f:d5:f5:1a:b3:73:53:4e:47:2c:1e:
b9:2e:9f:8f:68:d0:2b:ac:3a:16:91:9e:0a:c8:5d:3e:ab:7b:
24:6f:68:08:49:8e:53:e8:f6:24:cd:4d:c1:18:ee:75:91:5d:
96:fa:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:57 2024 by rpki-client on console-ams.rpki-client.org