Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/bGvCxTHpxd9iz570CmKDHyfV3uY.roa
File: bGvCxTHpxd9iz570CmKDHyfV3uY.roa (raw, json)
Hash identifier: la1fg3IGFE0S7yJO2zf+auxj7zQutlsRFKeBULaCf9A=
Subject key identifier: 6C:6B:C2:C5:31:E9:C5:DF:62:CF:9E:F4:0A:62:83:1F:27:D5:DE:E6
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 036DFA35
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/bGvCxTHpxd9iz570CmKDHyfV3uY.roa
Signing time: Sat 01 Jan 2022 11:54:09 +0000
ROA not before: Sat 01 Jan 2022 11:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212326
IP address blocks: 193.38.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57539125 (0x36dfa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 1 11:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c6bc2c531e9c5df62cf9ef40a62831f27d5dee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:df:a8:28:b8:b6:65:11:8f:97:07:1a:10:
27:94:91:b9:72:0a:8a:03:d8:e4:42:4f:d9:f0:b6:
d5:98:b4:1f:b3:17:d2:c8:0e:56:f1:e2:83:e3:ac:
dd:e0:86:08:6c:94:04:03:8a:1a:b3:0e:39:d2:74:
ea:4b:03:24:26:b4:4b:3f:47:d1:c4:be:2b:25:45:
16:b5:9d:7e:07:19:32:6e:f8:87:f1:24:6c:0c:89:
8b:ee:2d:0d:75:2e:3f:af:3a:81:95:51:42:d2:0f:
25:27:dc:b9:ca:ef:8d:ce:05:90:ca:4a:82:75:30:
43:40:cb:b6:2b:34:11:59:5d:02:4a:24:56:bc:25:
a0:e0:f4:80:6e:55:85:cc:fc:ee:22:cb:78:aa:9a:
70:f0:15:3d:0d:a1:b0:a8:6a:41:e8:19:20:5a:e3:
3f:6b:82:04:8b:d3:2c:1a:fd:6f:ad:ec:de:e7:ff:
46:75:49:78:99:33:9a:9d:6c:da:91:04:5f:d8:4a:
d7:9c:29:92:99:99:ed:22:8b:63:fc:29:6a:1d:e3:
e0:53:be:33:c5:63:27:05:8b:4b:cc:71:55:c5:21:
3b:cb:92:68:69:d7:5f:1d:05:30:9d:d3:9b:6f:81:
89:32:84:63:b0:1e:31:0b:89:bd:24:98:84:a3:46:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6B:C2:C5:31:E9:C5:DF:62:CF:9E:F4:0A:62:83:1F:27:D5:DE:E6
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/bGvCxTHpxd9iz570CmKDHyfV3uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.253.0/24
Signature Algorithm: sha256WithRSAEncryption
05:68:eb:07:20:87:8e:4f:07:03:b2:6a:97:c0:3c:f1:6d:e4:
94:0d:44:9c:51:8c:58:2c:95:8b:0d:33:6c:9a:6c:71:e5:83:
92:01:e9:b8:48:1a:9e:b9:80:52:90:ba:4d:15:fb:ec:75:88:
38:57:01:38:5e:c5:38:21:b7:33:4a:23:dc:6a:1e:f0:79:11:
60:d4:41:d9:6e:5f:7f:7e:66:2b:08:b5:ac:f7:9c:86:1b:33:
3a:03:fb:64:3b:41:9b:8a:01:74:b1:ad:14:f6:20:0d:f6:2f:
cf:3f:28:d6:7a:f4:65:27:f4:5c:b4:44:f2:8d:bc:80:a3:ab:
8c:ed:50:30:3b:9b:dc:9c:4f:c0:dc:6c:a2:db:cc:5d:b7:d9:
8d:6b:48:10:1d:4a:b8:f8:3c:d9:46:13:3a:db:88:e0:e5:d1:
76:87:a3:ae:35:18:6c:f0:40:55:92:4e:54:fc:39:4b:7f:f2:
b8:95:bb:ce:21:04:21:fd:e8:13:f7:5d:e2:69:f0:de:8d:05:
60:ce:e2:fd:4a:24:85:33:79:51:c9:b8:fd:7f:0f:97:80:9e:
4e:49:01:0e:01:fd:a4:15:a4:c5:41:ca:5a:bb:87:a7:b7:1b:
d4:0a:87:c1:ea:63:ce:87:89:b7:d0:e6:c2:bb:25:f6:ad:d5:
53:ec:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org