Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/ogLEj8WR4ueaYYrXZUUTBSdIfiU.roa
File: ogLEj8WR4ueaYYrXZUUTBSdIfiU.roa (raw, json)
Hash identifier: h9cJxFsT/LDrUJnKG4Xpm93gwonJAfzTFnyzhMZiELs=
Subject key identifier: A2:02:C4:8F:C5:91:E2:E7:9A:61:8A:D7:65:45:13:05:27:48:7E:25
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 040DD664
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/ogLEj8WR4ueaYYrXZUUTBSdIfiU.roa
Signing time: Sat 01 Jan 2022 11:54:57 +0000
ROA not before: Sat 01 Jan 2022 11:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49945
IP address blocks: 193.33.130.0/24 maxlen: 24
193.33.131.0/24 maxlen: 24
193.33.130.0/23 maxlen: 23
193.33.137.0/24 maxlen: 24
193.33.136.0/23 maxlen: 23
193.33.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68015716 (0x40dd664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jan 1 11:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a202c48fc591e2e79a618ad76545130527487e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:03:c7:22:75:18:44:46:e2:09:b6:ab:d6:
e7:5f:66:2a:7a:72:8e:57:05:7f:63:2a:d8:33:96:
8a:5f:5a:68:9d:c3:fe:a3:6a:bd:cc:28:43:c5:08:
7a:c8:48:cd:f4:fd:c7:68:ad:a2:6f:90:38:f2:05:
7b:00:e0:25:d9:36:82:d0:88:d9:99:e4:4e:ae:e2:
3b:0c:b5:08:c8:cc:68:f0:a4:59:69:0d:a2:0e:0d:
cd:e7:91:88:b9:ff:bb:cc:09:bc:d3:47:e3:29:99:
67:12:8c:8f:be:e0:7c:42:60:87:a0:6f:c3:9f:8a:
d6:56:ad:59:d1:b1:39:4f:64:19:14:d2:05:c9:69:
be:71:3d:8b:8c:70:09:0b:5b:12:60:f8:55:8d:e4:
a8:2c:c6:50:41:fb:96:84:d6:e2:d4:d8:96:f6:41:
4c:bd:49:83:7e:6f:0e:79:1c:0e:b4:58:fe:e5:98:
0c:b5:6c:63:03:18:8d:de:c2:2e:3c:9a:dc:e9:b2:
36:f9:bc:93:26:2a:34:96:86:07:3d:f5:cd:3b:99:
90:9b:bf:bb:14:fc:f7:bc:4a:b2:33:9c:9e:9d:3e:
be:a1:e9:f3:6a:21:a3:54:03:b8:a5:69:4f:c1:8c:
ad:fc:80:3e:33:13:ea:fb:c5:f8:8a:b1:79:ea:02:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:C4:8F:C5:91:E2:E7:9A:61:8A:D7:65:45:13:05:27:48:7E:25
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/ogLEj8WR4ueaYYrXZUUTBSdIfiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.130.0/23
193.33.136.0/23
Signature Algorithm: sha256WithRSAEncryption
07:5f:72:7a:00:f7:6b:27:da:f0:38:7e:f6:31:66:ba:1a:2e:
80:c5:a0:c3:86:b2:05:32:a3:33:b1:a1:2c:ee:48:61:0b:b5:
32:07:64:54:10:28:bd:de:09:80:84:62:14:5d:3a:c5:db:fe:
48:3f:16:3c:d9:6d:78:67:94:96:b3:64:7f:95:21:2d:55:9e:
30:d1:f8:33:3c:01:a5:dc:be:6f:9d:fd:d4:ed:e6:47:9e:c0:
10:53:46:56:45:7e:e2:ff:40:09:70:e3:d6:7c:ca:77:f6:bb:
c2:44:57:d5:13:27:37:4e:92:40:32:f8:14:9d:11:66:83:6a:
d8:28:78:cb:fc:b7:1e:a9:8b:1a:6d:d6:6b:e0:1a:b7:84:a9:
1e:ce:71:b3:04:96:e7:29:22:56:e3:f6:0b:8a:91:76:20:f0:
f3:6d:1f:69:9c:e9:6b:8a:db:2e:ce:f2:fb:82:29:de:8c:52:
b2:b8:fa:1c:fa:c4:2c:ff:1f:5e:d9:e9:ec:92:8f:9d:33:07:
59:3f:05:3e:3a:e1:d5:b1:38:84:ac:91:31:12:fa:b6:e8:b5:
c1:32:b7:63:38:87:07:7f:b7:18:8a:81:b2:f6:6f:75:c8:5e:
6c:23:1d:97:95:2f:a1:10:96:b0:0a:3a:db:04:02:e5:94:d2:
93:79:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:41 2024 by rpki-client on console-fra.rpki-client.org