Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/B23cGbJtJmXgqLxZsCTND5Chg94.roa
File: B23cGbJtJmXgqLxZsCTND5Chg94.roa (raw, json)
Hash identifier: 7669ztyhyZN7dTo4CszZYo7wfY4vK0/WFzZxAbfMaYI=
Subject key identifier: 07:6D:DC:19:B2:6D:26:65:E0:A8:BC:59:B0:24:CD:0F:90:A1:83:DE
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38903AC1
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/B23cGbJtJmXgqLxZsCTND5Chg94.roa
Signing time: Tue 17 May 2022 05:11:31 +0000
ROA not before: Tue 17 May 2022 05:11:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24964
IP address blocks: 195.34.123.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
89.253.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948976321 (0x38903ac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:11:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=076ddc19b26d2665e0a8bc59b024cd0f90a183de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:76:a1:79:0c:08:02:3d:78:ee:74:6d:63:
ae:57:88:9a:3f:47:94:d8:84:85:c7:0d:0d:51:f5:
01:83:20:ec:b2:41:f0:3c:cd:1c:34:b1:0f:03:47:
4c:cf:bf:be:69:b3:f2:61:6b:a5:9b:6d:27:33:94:
fd:30:bd:2e:e1:f4:ba:b6:12:31:cc:35:06:9b:18:
66:3e:d7:06:f2:c9:a1:a2:ad:17:3f:16:95:85:1e:
7f:29:3c:ea:80:61:7b:0c:7a:31:18:fb:d2:c7:a8:
08:5f:f1:9d:c2:e4:0c:9a:19:cf:1d:bd:a1:14:1a:
5b:75:bd:13:a6:d0:3b:49:06:bf:11:48:81:d5:88:
6e:48:8f:f2:b7:9a:7f:74:b3:0a:08:5e:d9:49:dd:
b8:e6:c5:69:8b:03:33:42:5a:24:f1:72:7c:8f:ce:
72:d6:0e:4c:29:38:f5:59:26:6c:b4:b1:65:fd:c5:
2f:39:f1:8c:ba:9f:c1:81:fe:31:a7:fe:7f:96:50:
8a:c9:21:82:d2:e7:8f:31:63:36:0d:85:ea:47:04:
f0:26:0c:ee:c3:ef:76:f2:1d:b1:17:59:86:a4:64:
dc:71:c1:94:65:fa:ff:09:fe:6e:63:56:ad:3a:7b:
2f:4c:8b:de:b7:9f:72:ed:cb:09:0c:fe:5d:9b:13:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:DC:19:B2:6D:26:65:E0:A8:BC:59:B0:24:CD:0F:90:A1:83:DE
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/B23cGbJtJmXgqLxZsCTND5Chg94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.132.0/24
89.253.163.0/24
195.34.123.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3f:59:2f:0a:2b:5e:51:20:37:72:ce:3e:f7:e1:ab:a5:c2:
73:e9:c5:12:63:a2:86:9e:0f:71:76:a1:20:0c:da:2a:e8:77:
9a:d1:57:d1:05:de:73:cf:f1:50:59:c8:24:91:d9:54:e8:05:
e3:f5:b3:32:d0:c7:71:91:6c:d0:23:87:04:cc:a9:a5:2a:80:
1d:0f:27:8d:2c:e5:a3:b2:10:16:91:ea:ad:49:05:65:64:d6:
aa:b8:7e:62:c1:5e:cd:14:7f:31:bf:cf:cd:49:2c:d8:21:ed:
a1:0b:6b:4a:e7:46:98:5a:59:0b:c3:d8:bc:33:4c:47:d5:56:
3c:1c:14:ae:82:36:f7:f9:fe:09:f6:b3:e8:cd:7f:b0:6a:a9:
1f:62:d4:1c:bd:43:de:bf:32:57:2e:43:54:87:c6:ed:3f:38:
d9:72:a3:31:9b:41:47:b4:bf:77:be:8f:ea:5d:f6:f0:70:a5:
ac:23:83:50:96:97:41:4c:bd:0d:99:82:a9:dc:51:7a:63:dd:
61:1b:d2:1f:b4:19:6e:52:46:89:f6:85:72:f3:0e:ca:39:72:
6d:3b:1f:aa:20:f6:85:d3:b7:7e:8f:7d:e4:63:12:aa:3f:bb:
33:1a:8e:bd:ba:9d:d4:15:90:d1:53:6e:10:85:c1:df:7a:2b:
64:1e:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:18 2023 by rpki-client on console-fra.rpki-client.org