Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/m3E3ZEI2mmYfbLSQJWsRyD0Vl4M.roa
File: m3E3ZEI2mmYfbLSQJWsRyD0Vl4M.roa (raw, json)
Hash identifier: BFaeVsFDaQykadOlnLrkpafvNHbGOfUz73ENJtlEpvg=
Subject key identifier: 9B:71:37:64:42:36:9A:66:1F:6C:B4:90:25:6B:11:C8:3D:15:97:83
Certificate issuer: /CN=7ef532ebb07ea8506b653430c046ec8d402f968b
Certificate serial: 06962133
Authority key identifier: 7E:F5:32:EB:B0:7E:A8:50:6B:65:34:30:C0:46:EC:8D:40:2F:96:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/m3E3ZEI2mmYfbLSQJWsRyD0Vl4M.roa
Signing time: Sat 01 Jan 2022 11:53:38 +0000
ROA not before: Sat 01 Jan 2022 11:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202050
IP address blocks: 193.108.215.0/24 maxlen: 24
193.108.219.0/24 maxlen: 24
193.109.94.0/24 maxlen: 24
193.109.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110502195 (0x6962133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef532ebb07ea8506b653430c046ec8d402f968b
Validity
Not Before: Jan 1 11:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b71376442369a661f6cb490256b11c83d159783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:4a:5b:de:ec:5c:e5:e8:1f:25:76:54:f8:
7b:18:9e:3a:9e:2c:4c:02:8c:00:86:b2:6c:a6:e1:
a0:e5:92:f6:22:e0:4a:ab:8d:af:62:5c:5e:05:b3:
7e:eb:8d:69:f5:c8:4f:15:44:95:10:0b:e5:d0:b1:
a8:0a:89:01:db:91:ea:d2:4e:7b:68:60:db:2d:b7:
d9:42:65:d0:f7:2a:32:72:96:33:18:bd:47:76:19:
72:a2:0c:1f:d8:c0:b8:8d:08:f3:f1:3a:71:2c:ae:
19:b2:fd:bf:c8:4c:38:ca:28:b7:9f:b9:4e:dc:b7:
b8:f2:f0:2c:61:8c:92:b1:6a:f1:77:ab:b6:6e:2f:
7e:9c:2a:f1:18:d4:65:ef:01:63:85:37:28:bb:c1:
42:4a:28:31:22:eb:a8:37:13:8e:6e:57:18:1e:17:
72:19:90:1b:43:6e:d7:93:37:e9:1d:ee:07:b5:c5:
54:53:e9:bd:85:52:f5:27:da:77:9d:8e:bd:f5:22:
9e:36:42:0d:13:7f:3b:26:8a:4b:3d:7c:5b:65:21:
6a:bd:3c:b5:ce:49:98:04:0a:c1:40:81:f5:46:fa:
d2:e7:e3:7e:91:26:24:59:0b:66:b5:b4:62:99:2c:
46:d1:5d:83:30:74:d3:d0:37:31:aa:b3:2e:e9:7c:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:37:64:42:36:9A:66:1F:6C:B4:90:25:6B:11:C8:3D:15:97:83
X509v3 Authority Key Identifier:
keyid:7E:F5:32:EB:B0:7E:A8:50:6B:65:34:30:C0:46:EC:8D:40:2F:96:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/m3E3ZEI2mmYfbLSQJWsRyD0Vl4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.215.0/24
193.108.219.0/24
193.109.92.0/24
193.109.94.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f3:92:b7:69:2d:3e:c1:2a:d6:3e:df:8c:7b:3b:95:fb:06:
58:d4:8e:40:23:e6:5c:39:5c:ef:15:77:d9:68:03:09:2f:55:
74:9c:d1:f4:10:aa:25:00:0c:37:6c:6c:46:9b:72:1a:c6:64:
a8:48:fe:b2:2c:2b:87:82:90:15:11:42:42:18:e8:76:9f:bd:
05:c1:8a:2f:ea:87:7a:2c:c5:0e:2e:9d:db:b3:ab:a8:8d:70:
d2:30:0b:c8:d6:e6:92:39:7d:49:9c:b9:29:be:c5:98:ae:a8:
12:ee:be:3d:dd:82:00:ad:cd:be:12:b2:56:f2:ac:19:81:38:
ee:6c:9b:27:66:0b:54:55:4a:90:6c:cd:3f:53:2a:60:e3:e9:
95:95:d1:40:9c:7d:c2:b5:c1:cf:a1:ef:86:b2:ec:d3:7c:68:
00:27:15:10:b4:e9:e6:b8:75:85:b6:62:14:6d:bb:f1:44:62:
f6:d3:67:09:d6:14:b5:d3:7c:51:19:1d:9d:82:52:f9:4b:18:
15:01:55:01:8a:62:30:33:35:9e:4c:53:13:6b:72:7f:e0:2d:
fd:38:a7:45:0a:87:92:22:f0:26:de:4e:94:d4:7e:a7:af:03:
88:14:2c:0e:6a:8f:21:d1:93:bd:35:24:60:d7:63:54:d2:3f:
ed:30:84:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:02 2024 by rpki-client on console-ams.rpki-client.org