Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/BhSUfWCBsOk3p2NrocdDkmYe5Xs.roa
File: BhSUfWCBsOk3p2NrocdDkmYe5Xs.roa (raw, json)
Hash identifier: grDVmWoIP9UuPlnrnYOxtwLJnxPdK/azV1UwvrodYSA=
Subject key identifier: 06:14:94:7D:60:81:B0:E9:37:A7:63:6B:A1:C7:43:92:66:1E:E5:7B
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 057DBCBC
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/BhSUfWCBsOk3p2NrocdDkmYe5Xs.roa
Signing time: Sat 01 Jan 2022 12:59:45 +0000
ROA not before: Sat 01 Jan 2022 12:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3332
IP address blocks: 193.203.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92126396 (0x57dbcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Jan 1 12:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0614947d6081b0e937a7636ba1c74392661ee57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:0b:d5:a5:a5:cd:34:d8:71:70:5a:8b:f4:
df:36:04:93:c9:8c:3b:6e:e7:93:3d:f1:40:b6:c9:
d7:08:7e:66:d1:f3:cc:b5:17:1e:bf:0d:93:8f:aa:
24:5d:16:13:ae:d6:40:54:7a:c1:06:86:2a:ec:7f:
77:b2:91:da:db:20:79:f3:c3:3a:0a:d4:21:ef:e2:
51:a5:3d:26:74:f6:fb:23:a2:7f:34:53:c9:99:54:
26:77:af:cd:dc:c4:9d:c4:91:73:05:b3:98:c5:33:
75:20:8c:33:82:99:6c:3d:64:28:07:7c:d7:44:0c:
d3:b4:10:7a:6a:60:e1:60:2a:0f:0a:eb:9a:95:d3:
a7:bc:62:f1:1c:52:79:ec:b6:07:6a:53:66:89:3b:
95:bb:c9:8e:3b:47:fa:0d:b3:3a:11:c8:47:b6:9a:
c0:05:34:81:34:d6:c9:8d:3a:77:d1:cb:5c:1c:be:
61:a2:11:c2:82:5c:5a:2f:b7:6d:b9:ad:43:40:39:
9f:05:79:bc:92:ac:6b:09:e1:f5:2b:74:fe:e1:8e:
fe:b7:4a:a5:22:80:76:dc:71:4a:85:19:be:96:4b:
d8:05:97:cc:b5:0d:87:38:0f:72:e3:10:1a:ce:03:
d0:ca:0e:27:05:87:60:97:b1:0a:55:3b:27:e0:43:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:14:94:7D:60:81:B0:E9:37:A7:63:6B:A1:C7:43:92:66:1E:E5:7B
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/BhSUfWCBsOk3p2NrocdDkmYe5Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.196.0/23
Signature Algorithm: sha256WithRSAEncryption
40:e8:e5:03:02:9b:bf:a8:24:da:95:7b:0b:fa:71:ac:4b:24:
da:4e:87:6c:b6:38:3e:d6:fd:68:9f:d9:1e:a7:3e:bb:05:a8:
8c:3a:50:34:a0:96:77:68:ca:85:17:f2:9b:81:d3:ad:16:75:
3b:ec:56:2f:09:f8:9c:8a:27:08:5c:9f:bf:de:72:e6:ad:1f:
7f:f5:6c:e9:1c:38:55:94:dc:5b:ae:85:ce:c9:05:70:15:6e:
47:1e:12:9b:42:9d:22:01:ea:59:04:16:09:01:07:f0:3a:b8:
8d:ce:64:ec:58:1b:59:0b:95:4f:70:82:4d:96:07:0d:e3:24:
31:43:93:2d:56:3d:43:bb:cf:67:e7:8e:ce:71:e0:a1:77:3f:
ef:a2:31:5e:79:c5:e0:6c:49:b2:aa:0d:fd:3b:b2:88:00:cf:
ea:e6:e3:00:71:3e:71:80:73:06:8c:68:e1:de:c1:2d:a8:23:
9a:b1:7d:b1:f8:03:80:40:11:8e:cc:d2:7c:3d:ae:4f:01:16:
3e:df:fd:41:d0:32:17:50:1f:81:fd:b1:91:8a:e1:1f:62:10:
d3:34:75:75:74:e6:38:6e:cf:0f:44:5b:df:f3:65:ea:aa:fc:
d8:4b:82:03:53:6b:63:e6:a6:33:35:dd:57:19:f2:86:4c:60:
be:8f:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:45 2024 by rpki-client on console-ams.rpki-client.org