Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/unP-sPXuIMj1yRRe8OLpBOpKC50.roa
File: unP-sPXuIMj1yRRe8OLpBOpKC50.roa (raw, json)
Hash identifier: oRew4OFTqEfUAaYlBFHHcnxU0GpYny0T+QMZ56JsKlY=
Subject key identifier: BA:73:FE:B0:F5:EE:20:C8:F5:C9:14:5E:F0:E2:E9:04:EA:4A:0B:9D
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 0AC2DB30
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/unP-sPXuIMj1yRRe8OLpBOpKC50.roa
Signing time: Sat 01 Jan 2022 12:58:04 +0000
ROA not before: Sat 01 Jan 2022 12:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200342
IP address blocks: 194.39.203.0/24 maxlen: 24
194.39.200.0/24 maxlen: 24
194.39.200.0/22 maxlen: 22
194.39.202.0/24 maxlen: 24
194.39.201.0/24 maxlen: 24
2a0c:f0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180542256 (0xac2db30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Jan 1 12:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba73feb0f5ee20c8f5c9145ef0e2e904ea4a0b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:9b:5c:b0:66:64:af:f2:19:a9:5c:6f:a4:
cb:30:29:7e:04:66:c2:32:6b:3b:da:f2:6c:ee:4e:
52:5e:33:a8:ad:8c:bd:04:0f:d1:11:4f:b0:99:19:
c6:37:4a:24:02:9b:c7:fb:53:b6:b3:4a:9e:9e:5c:
a7:e6:de:ef:92:83:da:b6:d1:a5:ef:9f:93:de:71:
8a:d6:0e:9f:f9:46:74:72:41:58:5e:3c:cb:f2:a4:
c3:de:e0:c6:42:29:e3:0e:b0:76:86:90:c6:82:9b:
9f:a1:89:f0:86:3b:7e:68:59:c8:79:16:be:03:32:
9f:c9:4d:29:24:01:73:a9:8e:a3:0c:5b:bc:3a:09:
90:c9:fd:53:15:f7:cd:77:5f:f8:9f:3b:03:28:0a:
de:24:82:8a:67:85:b3:e2:6d:b8:2d:40:16:27:8c:
41:93:1f:63:5c:d9:50:97:83:e6:4d:5b:11:01:fe:
2b:b2:2e:c4:58:3e:ab:5a:f5:0a:31:8a:1e:9d:5b:
0e:eb:49:a3:13:d8:2a:8b:bc:52:91:a3:1b:84:bf:
58:09:fb:f0:b0:8d:e0:31:23:b5:d2:c7:b9:49:1f:
1d:14:94:a8:6a:61:8e:eb:40:d7:aa:fd:b7:e0:ea:
94:b9:fc:15:a7:33:27:c5:5e:0c:aa:18:59:80:9d:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:73:FE:B0:F5:EE:20:C8:F5:C9:14:5E:F0:E2:E9:04:EA:4A:0B:9D
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/unP-sPXuIMj1yRRe8OLpBOpKC50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.200.0/22
IPv6:
2a0c:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:28:96:53:38:fe:10:54:5c:ef:f7:5a:4d:97:29:c6:03:0a:
2d:f7:5c:4a:75:2e:1f:08:e5:ea:df:ea:23:7e:8f:31:82:03:
46:04:4f:82:c3:90:e5:10:f5:0a:a8:f7:9a:e5:20:0d:fd:91:
b9:cb:7a:f1:45:e3:81:bd:ea:ef:2a:9f:d3:f8:2a:09:fe:33:
01:0a:aa:5f:4c:c0:63:4e:3b:6b:94:67:d8:c7:3a:f2:6d:32:
d4:4a:f9:b9:9f:d2:2d:7d:b7:d9:a4:b4:cc:7a:27:3d:cc:7d:
83:57:c1:09:47:ff:d9:ed:c0:bf:74:de:9d:00:9e:c3:23:87:
96:76:1e:25:a1:d4:55:89:84:1f:99:be:01:05:2b:c8:16:b6:
2f:3f:6f:7a:bf:1b:53:1b:bf:52:1f:cc:0c:1d:f9:b5:6d:15:
5c:20:cd:43:98:26:65:bd:a2:d7:81:ee:36:c9:85:25:d8:0f:
97:ae:7f:36:44:e4:0e:8e:aa:1d:77:39:b6:0a:82:82:42:ba:
e6:d4:bc:1a:8f:02:76:c6:b5:1f:0a:b8:23:bc:99:2f:0f:58:
34:7b:25:2e:94:25:6e:74:79:48:f1:37:fc:86:18:9a:6b:58:
e6:bc:cf:de:7a:14:fd:89:33:36:2e:73:bf:1c:dc:3f:f4:a2:
aa:d6:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:29 2024 by rpki-client on console-fra.rpki-client.org