Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/CDLkOvBmgYIXffuST404BYDOdgY.roa
File: CDLkOvBmgYIXffuST404BYDOdgY.roa (raw, json)
Hash identifier: oS2uEHPgussVOcUwbf52ccK0ucS9Wi9fLGVWufVBKBk=
Subject key identifier: 08:32:E4:3A:F0:66:81:82:17:7D:FB:92:4F:8D:38:05:80:CE:76:06
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 061DB880
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/CDLkOvBmgYIXffuST404BYDOdgY.roa
Signing time: Sat 01 Jan 2022 05:05:15 +0000
ROA not before: Sat 01 Jan 2022 05:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 193.0.184.0/24 maxlen: 24
193.0.212.0/24 maxlen: 24
193.0.129.0/24 maxlen: 24
192.251.230.0/24 maxlen: 24
2a0f:7ac0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102611072 (0x61db880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jan 1 05:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0832e43af0668182177dfb924f8d380580ce7606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:a5:0e:49:81:a7:7f:d6:3f:56:0e:c9:86:
d1:49:f1:d5:86:a3:39:08:fe:1d:2d:d2:84:2d:04:
35:07:f1:da:97:c1:c8:e0:e9:95:c6:39:e3:69:53:
59:f0:93:0f:71:68:51:62:65:71:60:ca:11:d1:14:
c5:cb:76:e6:5d:4d:8f:54:51:cb:bd:b4:0b:fb:03:
34:05:d7:d1:d6:51:4b:0c:06:08:f4:82:2e:0b:0e:
2e:99:aa:c1:ec:80:51:83:7b:c4:c1:51:fc:df:e4:
b6:91:e1:2e:d6:42:d3:45:cd:e8:fb:05:1c:73:cd:
d3:1c:ff:d4:77:36:dc:e9:0c:7d:1e:25:00:14:a1:
43:0f:6b:92:f8:0c:0c:2f:9e:66:3c:8e:4e:8d:dc:
54:5a:9f:61:b8:45:5e:30:c5:36:05:bb:af:1a:fd:
ea:3a:26:b3:0c:2b:eb:15:21:00:f2:c0:62:81:92:
13:21:d0:7d:37:9e:5a:2b:86:7c:d5:f3:d4:ac:3b:
48:d3:f8:1b:54:66:7f:69:df:c6:2a:9e:d7:66:2f:
c6:61:37:31:3f:fd:f8:88:4a:41:89:05:6c:6f:e3:
fd:9c:90:93:68:54:09:3f:5c:63:b1:cf:37:51:d4:
af:c2:87:e3:bb:49:3a:b0:44:c8:e1:80:b3:a7:56:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:32:E4:3A:F0:66:81:82:17:7D:FB:92:4F:8D:38:05:80:CE:76:06
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/CDLkOvBmgYIXffuST404BYDOdgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.251.230.0/24
193.0.129.0/24
193.0.184.0/24
193.0.212.0/24
IPv6:
2a0f:7ac0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:09:72:a0:33:9e:cc:bb:9d:09:54:ca:bc:e4:4b:57:06:3b:
ef:d6:d8:13:b5:13:3b:cb:fc:2c:96:8b:f0:d2:6a:93:38:20:
c4:2c:98:47:98:96:64:32:42:78:40:b4:ba:64:4a:92:07:ce:
53:27:f3:54:ae:52:4e:c3:d0:eb:4b:b1:4c:b6:48:62:cc:9d:
58:29:db:62:07:be:ee:e9:0d:66:60:10:30:87:73:34:81:41:
28:ef:7b:c9:6d:b6:fa:6e:13:1f:29:0a:7f:4c:e5:87:fc:fb:
6e:1a:41:b7:38:9c:51:e1:56:06:32:7a:0a:a8:18:0f:15:c6:
d0:aa:0e:73:f0:16:52:91:75:20:4b:68:73:b7:97:d1:34:f6:
1e:0c:2b:25:6a:65:11:d0:92:16:ce:60:84:30:1b:c3:39:c0:
1e:3a:a1:27:35:24:95:83:17:4c:f8:b4:ef:86:1d:ef:5d:0b:
72:fa:74:4a:3a:75:53:6e:d3:54:9c:02:fd:90:04:5d:3e:33:
cf:56:00:c3:7f:cc:d5:ea:cd:f4:56:10:10:d2:e8:93:b3:f5:
9d:86:79:92:3d:ca:3e:3a:f2:1e:09:a6:ca:69:1c:12:72:3b:
f8:6c:5a:4f:9f:c3:7b:51:c9:61:01:ab:63:6c:3a:43:05:3d:
71:80:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:55 2024 by rpki-client on console-ams.rpki-client.org