Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/RBGIiHc0GXAvAcoJrX6oYb-rmdk.roa
File: RBGIiHc0GXAvAcoJrX6oYb-rmdk.roa (raw, json)
Hash identifier: 1Hsaleh59wsm2crfJ5srPuyKdHQYaviOoQhoD0tebh8=
Subject key identifier: 44:11:88:88:77:34:19:70:2F:01:CA:09:AD:7E:A8:61:BF:AB:99:D9
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018479E8B408F2077ACD8EB74C2C2A25F182
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/RBGIiHc0GXAvAcoJrX6oYb-rmdk.roa
Signing time: Tue 15 Nov 2022 06:10:04 +0000
ROA not before: Tue 15 Nov 2022 06:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210993
IP address blocks: 193.232.65.0/24 maxlen: 24
62.76.141.0/24 maxlen: 24
194.226.42.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:79:e8:b4:08:f2:07:7a:cd:8e:b7:4c:2c:2a:25:f1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Nov 15 06:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44118888773419702f01ca09ad7ea861bfab99d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:59:04:f2:e5:32:fc:46:21:14:ad:48:4f:aa:
81:5b:3a:88:91:04:60:ad:72:30:1a:74:6f:2b:65:
75:79:9a:c4:f6:d6:9f:39:dd:1a:73:06:b0:d0:05:
35:74:c5:69:a3:81:1d:d0:19:d7:a1:9e:4b:6b:52:
22:6b:a3:a1:67:c1:9a:37:8a:92:a6:a8:5d:91:c1:
4a:6e:0d:66:db:9f:94:55:f1:50:de:91:94:9e:17:
bf:9c:46:ca:a4:52:ea:a3:4d:99:5e:fa:a7:32:0f:
a8:5d:9b:94:7c:99:a8:76:37:18:71:54:80:c3:2b:
b3:50:df:18:c1:62:80:70:d4:5b:bb:4e:42:a2:e9:
df:e8:61:5d:fc:4f:dc:2a:9e:f5:6d:74:75:a8:2c:
04:1c:1b:c7:d9:be:ac:52:a3:c2:b9:c1:ed:aa:70:
55:c4:18:ff:9e:e8:64:c6:ec:77:52:aa:59:49:88:
5c:e6:38:7d:cc:41:ce:2a:64:33:88:09:13:74:49:
4d:48:23:61:2c:64:df:cf:50:44:49:08:21:3c:76:
35:b0:db:b7:d3:a1:2e:f7:7f:79:3a:bf:10:af:9b:
8c:42:48:d6:85:24:eb:c5:11:fa:1d:6a:2a:96:a2:
6f:a0:af:22:7d:de:b9:41:5f:90:f8:3e:dd:23:55:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:11:88:88:77:34:19:70:2F:01:CA:09:AD:7E:A8:61:BF:AB:99:D9
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/RBGIiHc0GXAvAcoJrX6oYb-rmdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.141.0/24
193.232.65.0/24
194.226.42.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8d:20:7a:41:0a:dc:68:b2:65:3a:ad:0c:6c:6f:fe:45:a5:
07:38:1e:c7:5f:b7:97:96:38:95:b4:5a:8e:42:ca:1c:b8:27:
f0:ec:93:76:b0:32:bc:d4:58:75:b1:9e:c4:7f:41:c8:c9:49:
b4:c9:8a:43:0f:57:71:cc:d8:5b:23:e5:f0:ba:29:c6:60:b1:
22:e0:48:84:5c:ed:dc:2b:4d:0f:f4:3b:f2:4e:94:89:08:61:
bd:db:60:81:4c:45:e3:66:16:91:c5:4f:80:30:61:6f:90:ea:
49:20:86:17:6a:00:92:76:44:3d:d6:ef:74:5e:65:e1:02:9d:
1c:0f:94:42:56:b5:b2:9d:5f:77:6d:4b:26:66:f3:58:c1:72:
2f:5e:85:65:1a:fb:79:2e:cb:0d:1a:c6:e0:4d:79:96:d3:84:
5d:91:37:9b:00:d7:51:23:61:5c:80:3e:58:fe:36:ee:53:d1:
37:6c:14:e4:19:fe:cd:9a:cd:6e:49:d4:83:06:11:9a:59:2a:
c4:7c:93:fc:3f:6d:70:e5:bd:d4:08:64:9f:01:07:17:0e:8f:
3b:b3:40:e5:e4:1a:0b:97:16:e1:ec:1f:c8:a2:1c:8d:d7:21:
23:90:80:c9:98:f0:4a:d1:8c:fc:51:2c:32:40:4c:e7:5e:44:
12:e7:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org