Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/yry6OkvFv-3orXorOagqoM1TsIw.roa
File: yry6OkvFv-3orXorOagqoM1TsIw.roa (raw, json)
Hash identifier: 17Gma+HfBZq38b/kav88+Rh9aQqF7srqY87tpZVq/hA=
Subject key identifier: CA:BC:BA:3A:4B:C5:BF:ED:E8:AD:7A:2B:39:A8:2A:A0:CD:53:B0:8C
Certificate issuer: /CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Certificate serial: 03883A18
Authority key identifier: 65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/yry6OkvFv-3orXorOagqoM1TsIw.roa
Signing time: Sat 01 Jan 2022 15:55:24 +0000
ROA not before: Sat 01 Jan 2022 15:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196864
IP address blocks: 193.93.169.0/24 maxlen: 24
193.93.168.0/22 maxlen: 22
193.93.168.0/24 maxlen: 24
193.93.171.0/24 maxlen: 24
193.93.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59259416 (0x3883a18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Validity
Not Before: Jan 1 15:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cabcba3a4bc5bfede8ad7a2b39a82aa0cd53b08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:a5:94:9f:ac:fc:af:84:47:2f:0f:a1:e5:
94:70:5f:2b:a3:d2:93:0d:88:62:74:1b:b8:4f:fd:
0f:74:97:33:c4:df:70:e2:b0:be:e3:bd:07:e0:06:
10:18:10:00:b3:49:05:a7:c0:55:c0:7e:ad:86:70:
51:3a:75:44:af:19:75:f2:90:f8:25:df:50:aa:9e:
29:24:c4:30:47:8c:48:df:5f:89:51:c0:5a:7b:f0:
0d:29:7a:70:6d:b2:42:b2:27:9e:88:55:dd:0b:1a:
ab:a6:ae:1e:58:ff:15:c6:95:a3:80:05:8c:3b:2f:
dc:09:9b:83:e3:c5:27:48:2e:0e:84:93:ca:5e:a6:
cf:3b:bf:9b:0a:28:16:be:25:e2:57:03:52:32:20:
94:2b:a2:2e:cd:23:29:6e:0e:74:92:80:aa:a5:9d:
82:c8:74:ef:a6:7a:b4:3c:37:5f:26:97:96:34:63:
d4:5a:5e:c7:dd:78:9b:84:e7:3e:cd:e6:70:eb:33:
2f:6a:b1:b2:29:9f:95:96:55:b1:23:2f:7c:7c:fb:
fc:57:46:7d:cc:f3:b5:32:da:91:74:d0:4f:2d:d6:
cb:28:ba:44:64:20:a1:85:94:89:de:77:e9:20:cf:
45:66:71:13:84:8a:e0:11:7f:a0:18:d7:4e:a5:3f:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:BA:3A:4B:C5:BF:ED:E8:AD:7A:2B:39:A8:2A:A0:CD:53:B0:8C
X509v3 Authority Key Identifier:
keyid:65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/yry6OkvFv-3orXorOagqoM1TsIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:c1:82:cb:43:78:bc:a4:ac:aa:0a:1b:66:01:db:7f:3c:e4:
51:dc:a9:5d:46:e5:1b:d4:41:73:01:bb:48:d5:ce:4b:e4:d6:
da:9c:ab:ae:83:46:2e:91:0b:f6:43:d8:6e:dc:8e:76:d5:1c:
63:d0:c1:85:f1:df:5a:26:56:f0:3b:3e:62:80:e9:25:aa:bb:
d8:79:98:eb:c1:c3:8d:09:9d:2e:89:77:e2:4f:2a:83:82:f0:
28:4f:24:db:55:71:ba:35:83:a1:16:3a:e8:76:9b:8a:e2:cf:
d3:b5:d4:2f:87:d2:b3:99:26:29:58:82:9e:d1:ae:67:de:84:
a4:49:4a:cf:ae:84:c8:2e:2b:8e:7c:7b:c6:f4:96:51:dc:e8:
fe:ec:04:b1:a0:c2:78:20:46:8c:8c:5f:48:1d:6c:88:f1:10:
dd:f3:96:79:0f:86:fa:98:e5:22:79:4d:00:ac:21:6e:42:54:
2a:af:6a:80:b2:fb:fb:1f:94:26:74:c4:5f:98:f1:1e:33:90:
f4:5b:d2:16:8d:86:52:bb:52:ff:4b:66:99:4b:45:bf:b0:c8:
e6:b1:05:a5:2b:89:a9:ba:bf:3f:c5:64:52:fc:a2:32:2a:3c:
b2:fe:89:76:e1:35:be:16:45:60:9d:d2:13:6e:f2:97:4b:da:
90:ea:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-fra.rpki-client.org