Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/bNFoZz3Sag3W-2eXeK8o2VwDBMw.roa
File: bNFoZz3Sag3W-2eXeK8o2VwDBMw.roa (raw, json)
Hash identifier: 22T1+2e1SPwe98p6gUjGZV+8Fnuih6ibxnyV7BS48qE=
Subject key identifier: 6C:D1:68:67:3D:D2:6A:0D:D6:FB:67:97:78:AF:28:D9:5C:03:04:CC
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 1185EA
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/bNFoZz3Sag3W-2eXeK8o2VwDBMw.roa
Signing time: Fri 07 Jan 2022 14:50:36 +0000
ROA not before: Fri 07 Jan 2022 14:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.239.162.0/24 maxlen: 24
193.239.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148394 (0x1185ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 7 14:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cd168673dd26a0dd6fb679778af28d95c0304cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:1b:1c:dd:f4:9c:9c:82:93:30:a6:5c:fb:
5c:9f:85:12:bf:8b:f8:e8:91:1d:ec:2c:19:16:da:
7a:91:48:d1:2c:e8:a8:9d:82:61:f0:bb:ec:00:6d:
65:a4:11:fd:e9:37:d5:1c:af:7d:4d:55:4b:5a:cb:
33:06:7f:7f:f4:7a:bf:d1:6c:4e:09:94:6c:8c:14:
e8:ac:56:0d:c5:d1:9c:89:f6:e0:ac:cf:14:71:72:
a8:9e:8a:6c:f5:56:1b:02:b3:d7:c4:aa:ba:4f:99:
ad:b2:34:a0:f4:d3:3a:4f:2c:22:97:47:12:82:f7:
1c:dc:3f:f8:d1:2f:1d:e5:2c:3c:dd:08:63:8c:25:
e5:d1:a4:8b:8b:95:84:a9:43:a5:8a:cf:2b:07:7b:
1a:36:3b:1e:a1:b8:43:88:c8:2b:b7:eb:f5:25:32:
70:7d:35:e6:52:5e:9a:a5:b8:80:85:0f:a1:f4:6c:
c7:35:d5:bd:30:9b:55:1c:a5:21:78:b3:a8:57:21:
4d:5d:76:fb:b5:9d:09:e2:f1:43:56:96:d2:74:91:
0d:9c:50:6f:70:13:d5:19:31:94:38:ce:cc:44:12:
29:c0:90:cb:2b:46:ed:a5:b1:e6:16:7a:da:ee:d5:
ef:cc:98:a5:8e:4e:f9:47:b8:50:31:97:f4:48:dc:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D1:68:67:3D:D2:6A:0D:D6:FB:67:97:78:AF:28:D9:5C:03:04:CC
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/bNFoZz3Sag3W-2eXeK8o2VwDBMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
51:17:f0:7c:51:46:3e:a7:28:f4:b5:e9:90:9e:c4:75:b6:59:
ba:02:1a:9a:b9:7b:d2:33:06:27:cf:41:c4:0e:15:08:38:f0:
da:0a:d3:a7:5f:b8:9a:2f:50:d8:01:32:4f:93:c6:48:e2:6f:
37:1e:6f:1d:f2:50:94:c5:58:c9:9e:a8:23:fd:4c:3c:64:d9:
4a:49:dc:14:23:f6:17:ca:ef:2d:b4:c0:47:65:6c:ea:75:4f:
ce:e5:55:7b:67:46:36:0d:17:10:c3:af:b6:f5:5c:52:07:50:
ad:71:30:c0:d9:4c:3a:c4:8a:d1:c7:37:12:11:0c:94:8f:ca:
a8:d2:cc:dc:73:21:64:0a:f3:85:83:2f:ce:33:de:4c:50:4d:
7f:d0:67:7f:11:c4:a5:b5:77:44:9e:c2:fd:c7:06:97:e8:f3:
50:2c:33:31:01:2a:62:7a:9f:6f:2b:7f:cb:15:26:aa:3e:c9:
07:ec:d7:a6:30:09:05:70:c5:5e:3c:cc:25:6f:98:3f:5f:2b:
92:b5:1d:b0:84:25:13:e8:c2:c1:b1:b7:23:cf:9b:72:d8:26:
a6:89:cb:0b:ce:05:f6:46:98:f1:83:9d:59:d1:18:86:70:99:
aa:4d:2c:8d:71:d7:39:c8:2e:d6:47:75:45:08:1b:d5:9c:24:
fe:c1:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:41 2024 by rpki-client on console-fra.rpki-client.org