Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/mS_sMuP7iKZGzAZmbGCzrk26BoM.roa
File: mS_sMuP7iKZGzAZmbGCzrk26BoM.roa (raw, json)
Hash identifier: yfJ/ETfqXEF8COfj6xiKclqtNb+mhiBc2u3zMyJXT+U=
Subject key identifier: 99:2F:EC:32:E3:FB:88:A6:46:CC:06:66:6C:60:B3:AE:4D:BA:06:83
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 0104B7AA
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/mS_sMuP7iKZGzAZmbGCzrk26BoM.roa
Signing time: Sat 01 Jan 2022 09:01:13 +0000
ROA not before: Sat 01 Jan 2022 09:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29186
IP address blocks: 195.85.219.0/24 maxlen: 24
193.104.16.0/24 maxlen: 24
2001:678:abc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17086378 (0x104b7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Jan 1 09:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=992fec32e3fb88a646cc06666c60b3ae4dba0683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:2d:a4:df:af:da:62:c2:75:6d:b5:8b:ae:
98:94:24:94:a0:f5:f8:d2:b3:42:55:2f:7f:1d:f8:
4d:8a:7b:16:24:ca:dd:36:a7:7c:8f:f7:37:2f:a6:
93:33:80:23:cc:87:4e:77:f8:aa:9b:d8:51:32:df:
58:ef:90:db:d5:05:9b:fc:88:b5:c6:56:5e:13:02:
ac:ca:73:33:e2:e8:ef:20:8e:67:37:b4:7e:70:d7:
92:1f:9a:1b:b7:de:f1:0d:5e:bc:44:d6:a5:dc:c3:
2f:f2:89:f3:3a:13:7c:47:bd:62:86:f5:34:9e:e1:
c9:ab:cc:dc:74:0a:ae:54:dc:b5:29:40:9a:1e:a8:
4a:ed:ff:f5:09:0d:49:cd:f7:13:6c:df:72:6f:54:
21:1f:2f:ca:12:ed:ff:07:12:3a:cb:31:1d:f9:e9:
3e:d9:7c:87:18:ba:a9:73:b1:ce:f1:6b:70:c4:2c:
46:27:78:22:7b:17:7e:9a:b9:6f:fc:35:db:74:ce:
92:92:13:48:c4:ab:3b:7d:33:1a:d8:54:df:9b:56:
bf:17:95:23:61:36:a5:ab:00:7d:bd:26:61:c6:cf:
25:ec:f8:fc:8b:83:d2:62:4f:37:13:c0:86:b3:e5:
e9:07:6a:3e:76:ed:70:c3:31:21:f1:b7:c7:34:5e:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:EC:32:E3:FB:88:A6:46:CC:06:66:6C:60:B3:AE:4D:BA:06:83
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/mS_sMuP7iKZGzAZmbGCzrk26BoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.16.0/24
195.85.219.0/24
IPv6:
2001:678:abc::/48
Signature Algorithm: sha256WithRSAEncryption
4d:cd:85:37:39:a8:3d:46:dd:8c:bb:90:db:58:e5:a1:8c:fb:
36:c5:98:b0:6b:9b:c2:b5:7d:34:3d:f8:c2:71:56:ab:fe:68:
e2:46:9c:6a:03:dc:bf:3e:ed:f4:a2:b4:01:6b:47:5b:c2:41:
aa:be:46:33:10:30:a2:d4:65:c8:6c:ea:46:00:05:65:9c:56:
c4:ab:a4:51:12:73:63:13:10:82:3e:fd:8c:26:1c:57:4a:fa:
17:8c:26:c8:17:d4:32:02:b7:15:a8:3c:ab:1e:6f:61:40:9c:
01:cc:bf:1f:58:e8:ee:d3:f3:65:eb:ff:b7:af:3a:8d:c5:c8:
3d:93:76:e8:c5:74:8e:69:68:fc:ff:1b:00:81:a0:0c:9d:78:
84:11:73:2c:fb:99:d3:75:2e:93:58:33:ae:95:29:1e:d8:50:
a8:df:29:44:e3:73:3a:89:ab:5c:56:04:94:e9:6b:cd:49:80:
cd:af:6a:3c:94:f6:ba:03:ca:6c:77:5e:fe:f8:dd:4e:78:03:
9b:28:26:c5:ef:46:27:00:4d:7e:37:41:b4:3b:b4:19:b4:13:
2d:42:7d:e0:4b:28:65:b3:76:eb:de:11:94:a1:91:b6:93:98:
cf:0d:0c:0c:59:30:c0:79:1d:ab:31:e4:53:57:6d:df:3d:66:
72:3b:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:14 2024 by rpki-client on console-ams.rpki-client.org