Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/z7av6xNL9fTcaQ7mxwF_qAvdoGk.roa
File: z7av6xNL9fTcaQ7mxwF_qAvdoGk.roa (raw, json)
Hash identifier: QC8/n97vPp6kLs3VFe/pI2KKlCmFmxNEvGjxU24HZBg=
Subject key identifier: CF:B6:AF:EB:13:4B:F5:F4:DC:69:0E:E6:C7:01:7F:A8:0B:DD:A0:69
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 1059CEDB
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/z7av6xNL9fTcaQ7mxwF_qAvdoGk.roa
Signing time: Fri 25 Mar 2022 15:05:44 +0000
ROA not before: Fri 25 Mar 2022 15:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43832
IP address blocks: 193.232.160.0/24 maxlen: 24
193.232.177.0/24 maxlen: 24
2a0c:a9c7:160::/48 maxlen: 48
2a0c:a9c7:177::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274321115 (0x1059cedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Mar 25 15:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfb6afeb134bf5f4dc690ee6c7017fa80bdda069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:c2:ad:91:a1:3d:b3:89:e6:c8:c0:15:cf:
44:51:84:4d:59:86:b6:51:3c:ab:8c:1f:a0:d9:ab:
b3:8c:f6:82:ba:6f:7e:1e:5e:ed:fe:cf:ee:7b:64:
11:6c:86:48:3f:f7:58:1f:12:19:3a:0f:cd:67:bd:
ed:a9:99:97:1f:1f:4d:4e:12:87:3b:af:8f:a4:42:
a6:32:a7:12:c5:d3:a8:aa:5e:35:fb:ba:08:46:b5:
ad:fb:5e:a7:c2:6d:46:39:e0:4c:26:50:0b:20:9b:
63:44:65:d2:bf:39:f9:f6:47:20:a1:0d:d5:07:90:
10:d8:d2:2b:aa:66:74:cc:c0:89:10:c9:fe:e3:72:
4d:9d:7d:84:03:eb:12:1d:00:de:58:37:47:1a:e8:
7c:89:45:80:14:9f:91:fd:96:01:02:21:c1:27:bc:
10:46:47:d4:c9:90:2a:b3:e2:19:75:19:0d:91:08:
50:ca:f2:27:bf:fb:ed:41:e0:56:6b:40:06:36:5e:
54:50:d4:f2:16:26:b5:92:bf:d7:cc:3a:3d:de:b1:
7a:22:71:35:65:3b:7f:1f:aa:76:3c:ea:eb:2b:b3:
b8:50:a9:80:04:30:7b:28:4c:31:b4:c8:32:47:e7:
55:24:09:1a:cd:59:26:cd:93:7f:e9:62:13:c0:42:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:AF:EB:13:4B:F5:F4:DC:69:0E:E6:C7:01:7F:A8:0B:DD:A0:69
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/z7av6xNL9fTcaQ7mxwF_qAvdoGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.160.0/24
193.232.177.0/24
IPv6:
2a0c:a9c7:160::/48
2a0c:a9c7:177::/48
Signature Algorithm: sha256WithRSAEncryption
a2:0a:d2:1b:5f:6a:3d:e7:1d:76:fb:14:82:6a:71:78:b5:3a:
4f:1d:98:83:8a:fc:12:77:52:bc:ff:53:32:60:22:5e:a5:9a:
cb:27:78:e9:1a:2a:a2:62:3f:e7:7b:e4:27:72:04:25:b0:82:
63:b3:5c:31:4a:ca:47:ab:fc:a1:0c:88:45:41:06:45:d4:c3:
16:fb:47:a3:1e:18:63:54:1c:cc:58:8c:c5:c9:af:81:24:d9:
9a:3c:28:69:1d:75:d6:0b:26:a9:86:8c:22:4b:e2:25:ce:e4:
7d:6b:fd:49:fc:11:65:d9:bb:47:3b:43:11:ea:6a:58:a3:77:
41:9e:59:eb:17:d4:6d:08:0a:37:29:f1:9d:3d:eb:8c:37:69:
14:50:bd:04:ca:9d:df:f2:77:0f:d9:23:c9:bc:62:43:6a:64:
e9:5b:8c:60:f5:c2:86:87:b9:a4:7c:f8:0e:07:94:ab:3c:8c:
fe:02:a5:43:87:3f:70:bf:09:c8:8a:7a:e0:c2:92:0c:4a:33:
b0:f5:39:21:3e:48:62:a4:75:4c:21:fa:b1:34:0f:e6:ef:6a:
ce:3c:59:89:08:a3:b5:32:86:9a:14:2b:9a:9e:2a:2a:e4:40:
39:58:ab:91:fc:1d:09:32:74:fe:44:5b:be:ea:96:25:eb:aa:
a8:8d:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org