Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/1Olh8aJkmiS-jK-St1DpxFiBDDc.roa
File: 1Olh8aJkmiS-jK-St1DpxFiBDDc.roa (raw, json)
Hash identifier: UZIHYGB8gl9SBDglwAPXIkTZEkeFJdOGEjglq8nhtbY=
Subject key identifier: D4:E9:61:F1:A2:64:9A:24:BE:8C:AF:92:B7:50:E9:C4:58:81:0C:37
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 0182883E5843EE1D56BD230AFF2FE403BB70
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/1Olh8aJkmiS-jK-St1DpxFiBDDc.roa
Signing time: Wed 10 Aug 2022 14:52:43 +0000
ROA not before: Wed 10 Aug 2022 14:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57707
IP address blocks: 193.34.80.0/24 maxlen: 24
2a10:d840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:3e:58:43:ee:1d:56:bd:23:0a:ff:2f:e4:03:bb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Aug 10 14:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4e961f1a2649a24be8caf92b750e9c458810c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:39:a6:19:a3:b3:d6:3d:89:7a:1a:71:e7:
8a:6b:b0:49:3f:1a:25:bf:31:d9:66:34:30:cb:1b:
97:09:70:3c:d7:b6:61:76:6c:b6:b0:a4:31:8c:f2:
b6:5e:86:b6:ea:22:5a:14:14:ab:07:7d:a2:d3:82:
54:11:5f:49:43:67:d1:ef:cf:59:27:48:2f:0d:1a:
5a:f2:7e:82:be:d2:0f:7e:13:6b:fd:b7:32:5e:c5:
d3:52:6c:d6:9a:24:d4:ed:85:17:c4:d2:82:6f:72:
96:b2:5a:61:4a:03:ec:a9:79:73:10:8e:d6:8b:1d:
b3:64:b9:96:fc:d1:d1:db:10:a3:25:28:3f:aa:13:
b7:9e:99:1d:b5:e5:99:f1:8e:38:e1:c4:cf:7b:f2:
c0:f4:11:e8:c8:12:74:23:cf:e6:0e:e8:9b:67:94:
67:65:fe:1d:d9:cb:ad:59:8e:7e:ba:56:c1:cf:64:
ac:4e:28:5c:22:5b:24:27:78:20:0e:76:a1:c0:83:
3e:d2:35:12:19:d3:a2:a9:8f:d7:a2:ab:90:f0:03:
9c:55:0b:6b:9b:0b:f7:a7:05:e1:e5:09:7d:b9:29:
7e:5e:63:15:5f:f5:d0:10:45:b5:78:49:45:bd:86:
c3:b8:69:b8:60:f5:67:d6:bc:93:9b:45:d2:85:71:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E9:61:F1:A2:64:9A:24:BE:8C:AF:92:B7:50:E9:C4:58:81:0C:37
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/1Olh8aJkmiS-jK-St1DpxFiBDDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.80.0/24
IPv6:
2a10:d840::/29
Signature Algorithm: sha256WithRSAEncryption
63:cf:14:20:38:19:31:2d:0f:a3:bd:f1:0f:e7:e5:49:b7:76:
2f:9b:c7:d5:74:d3:cb:10:44:d6:53:83:ed:ff:1f:b0:d4:8f:
28:43:d8:db:03:0f:ff:1f:7c:99:22:7c:2d:1b:7b:01:92:9e:
c5:fc:fa:97:4a:93:f8:fb:ff:0c:be:83:ec:c1:1c:c9:1d:d1:
d1:fb:7d:27:5a:23:bd:7c:1b:58:2c:5c:32:a0:e1:db:11:dd:
92:e1:73:d8:0f:a5:af:10:76:4b:fe:8c:2e:cd:c2:96:f7:0f:
bc:da:69:0c:13:e9:a0:e4:a9:69:f1:28:3f:57:10:20:76:26:
73:47:b6:c1:a5:54:62:1d:14:2a:96:b7:da:71:45:b9:3e:68:
cc:b0:bb:bb:82:40:4d:26:ab:e7:a2:2c:55:84:4c:49:07:b4:
be:5e:7e:e1:2f:29:94:5d:b0:ba:d0:e0:b2:b7:29:6a:8b:3f:
17:d6:67:29:bb:e2:89:b1:03:62:44:c2:4b:8c:f3:1e:79:29:
fe:e5:3e:f6:df:a1:de:c9:cc:8a:74:13:4b:45:91:66:e2:4d:
89:17:82:64:e4:18:fb:28:51:50:06:48:75:da:0d:09:9b:48:
fd:34:d5:12:0d:fc:64:d6:43:70:35:cc:dd:af:07:3c:05:54:
1b:f4:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:37 2024 by rpki-client on console-ams.rpki-client.org