Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/iXkLlSp6VPWxQd85umvDPLQIsRw.roa
File: iXkLlSp6VPWxQd85umvDPLQIsRw.roa (raw, json)
Hash identifier: KpZV9YEyM1z8pQO5IJGRWcz+CoB4S+36JhXxr/3tkAQ=
Subject key identifier: 89:79:0B:95:2A:7A:54:F5:B1:41:DF:39:BA:6B:C3:3C:B4:08:B1:1C
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 33DF1525
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/iXkLlSp6VPWxQd85umvDPLQIsRw.roa
Signing time: Sat 01 Jan 2022 04:55:32 +0000
ROA not before: Sat 01 Jan 2022 04:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24922
IP address blocks: 193.140.216.0/21 maxlen: 21
193.140.224.0/20 maxlen: 20
194.27.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870257957 (0x33df1525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89790b952a7a54f5b141df39ba6bc33cb408b11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:63:b0:f9:b6:a8:cc:b7:bc:3d:9c:22:30:
6f:f5:2c:0c:9a:3b:73:e9:76:58:6d:a8:80:8e:f4:
60:88:5f:bf:7a:77:02:c9:32:bc:0a:38:f1:97:bd:
fb:fe:1e:1f:03:87:85:2f:27:31:4f:f9:6a:db:3e:
d9:61:98:ff:4a:3c:1e:3c:36:52:db:b9:71:13:6e:
f5:a0:d7:a3:46:d4:2a:2b:d7:43:9b:0a:77:b8:c8:
85:bd:ea:15:c7:5a:3c:d0:68:a7:d0:49:78:8f:0a:
2e:d5:08:cb:1e:52:dd:70:3e:7e:a8:c4:d1:3e:27:
06:19:8d:45:12:79:c9:7b:62:69:10:17:a9:04:fe:
60:d3:e2:f5:40:7c:a8:a1:b3:1f:5e:74:98:53:54:
4f:e4:8d:f6:d5:a1:7b:ac:d7:e7:8f:5c:ed:1f:cb:
07:68:54:c8:17:20:41:86:db:a8:87:79:22:8e:8a:
20:1f:ec:c6:21:97:76:1c:55:1b:81:be:ee:e2:b8:
2f:d4:a7:f9:1d:d2:2e:3c:02:ef:ba:41:ed:d7:f7:
a4:74:48:30:2d:16:85:f0:f8:f9:13:ae:88:26:32:
db:a9:a5:76:16:11:aa:df:8d:20:41:c3:40:a2:1b:
50:c7:10:90:6a:bf:2c:fc:5f:c2:e5:38:89:2d:10:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:79:0B:95:2A:7A:54:F5:B1:41:DF:39:BA:6B:C3:3C:B4:08:B1:1C
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/iXkLlSp6VPWxQd85umvDPLQIsRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.216.0-193.140.239.255
194.27.160.0/21
Signature Algorithm: sha256WithRSAEncryption
27:0c:47:25:18:36:f5:ee:b5:e2:25:8e:ea:c5:80:35:b2:cf:
51:29:ac:47:4f:ea:48:4e:a0:77:5e:fd:13:e5:f4:95:84:a9:
ae:fe:69:d7:b2:75:86:61:7f:b5:e7:5b:c6:f6:a3:56:73:0e:
94:9d:b0:5f:49:03:9a:92:1b:eb:db:44:95:66:4f:76:6f:56:
f6:7f:6d:46:e6:28:6b:f1:69:f2:bb:d3:d0:11:43:1a:1f:3e:
13:1a:b1:fd:1a:fe:be:ee:4d:26:29:e3:8c:07:db:86:6a:00:
ae:70:dc:0c:c8:c0:69:e6:67:c0:11:92:b7:b8:99:01:6a:73:
28:7a:41:51:1a:0c:70:ec:88:13:3e:2d:a6:a9:7b:e3:61:27:
1e:3d:fa:50:9c:32:62:2f:02:97:ed:53:a2:41:2c:d4:08:6a:
bf:32:2f:c0:31:c7:f2:f1:67:7f:2e:0d:2f:c2:b7:51:9e:28:
a4:06:87:7b:83:b5:6d:d7:78:d0:9d:8f:0b:66:90:fa:02:f9:
14:aa:63:39:62:c5:c3:0d:ce:55:33:97:d5:55:d8:2e:17:45:
ba:db:61:47:ed:68:87:4d:fd:c3:a4:27:a8:a8:e2:80:8d:d5:
69:6e:64:c5:24:b8:12:b5:4f:d8:19:26:75:d8:54:fb:51:e4:
95:06:d3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:39 2024 by rpki-client on console-fra.rpki-client.org