Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/79ms1Fzwyv63VO6C9bkiUAbQ0to.roa
File: 79ms1Fzwyv63VO6C9bkiUAbQ0to.roa (raw, json)
Hash identifier: QRVdkI4znHndrC9tSiS91yUE9bGlhUh+6Awe/sCRztA=
Subject key identifier: EF:D9:AC:D4:5C:F0:CA:FE:B7:54:EE:82:F5:B9:22:50:06:D0:D2:DA
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 1138299D
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/79ms1Fzwyv63VO6C9bkiUAbQ0to.roa
Signing time: Sat 01 Jan 2022 08:56:58 +0000
ROA not before: Sat 01 Jan 2022 08:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 193.17.185.0/24 maxlen: 24
193.17.186.0/24 maxlen: 24
195.234.152.0/24 maxlen: 24
2001:67c:1514::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288893341 (0x1138299d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Jan 1 08:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efd9acd45cf0cafeb754ee82f5b9225006d0d2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:86:39:f4:5e:79:86:88:13:ff:10:3d:75:
f4:9f:5c:56:90:b7:c5:52:43:6c:b0:ed:95:0a:7e:
83:b7:dc:0c:1e:23:f1:0b:88:6a:5c:4b:74:eb:a0:
5f:ac:a7:d5:91:c6:eb:4e:da:5c:1a:92:e9:0d:19:
ff:f4:ab:41:4b:b3:a1:47:2a:83:3e:40:94:33:73:
29:ad:9d:7f:27:36:6e:5c:c4:b4:e6:49:af:ae:93:
b5:91:90:6d:ab:74:17:30:8a:62:42:a9:ad:27:6d:
10:9a:3b:ab:51:57:37:1a:08:77:5e:6f:4b:89:c8:
7f:a7:63:25:e0:af:78:69:c5:92:8e:1f:08:ae:1c:
cc:fb:91:84:8e:f4:a2:64:a3:a0:63:da:06:cd:f9:
ff:d1:52:d4:4e:6d:a2:03:5e:92:b7:e7:d8:91:8d:
02:11:0e:0e:ed:eb:5f:3d:f6:42:08:66:45:04:2b:
54:a8:44:49:84:e8:b9:72:29:e8:c4:3e:5b:d7:f6:
bc:4a:80:4e:91:fa:7c:bc:d4:9c:45:9d:e5:0a:57:
24:f3:6e:a0:39:51:4a:67:f8:3d:61:f3:11:5a:13:
24:7d:47:76:96:d8:73:87:63:e3:f0:71:1f:46:3f:
68:5b:77:78:59:eb:2e:6b:a1:d4:20:ec:b1:75:aa:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:AC:D4:5C:F0:CA:FE:B7:54:EE:82:F5:B9:22:50:06:D0:D2:DA
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/79ms1Fzwyv63VO6C9bkiUAbQ0to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.185.0-193.17.186.255
195.234.152.0/24
IPv6:
2001:67c:1514::/48
Signature Algorithm: sha256WithRSAEncryption
7e:64:f3:a2:1e:be:58:ee:42:4b:92:f6:d8:e4:74:56:12:21:
a6:4d:a0:09:af:f9:d5:08:87:f4:b0:38:7a:fc:8f:e6:b3:75:
f7:77:59:ca:76:8e:a4:ac:de:6e:28:db:c3:5e:88:f0:9b:91:
d0:28:d1:ce:cc:45:5a:84:92:88:8e:ad:2a:46:13:9f:e7:42:
1c:87:fc:ca:b3:1b:cb:b7:ef:64:8b:e6:d5:18:d5:be:b5:d3:
4e:9b:6a:27:2a:cd:7c:fe:52:54:2d:df:6d:1d:8e:43:ec:76:
d7:26:43:86:0c:19:08:96:e0:c7:37:ac:f4:87:58:9c:64:c7:
59:00:72:27:4b:1c:e1:27:23:4a:72:5c:dc:a8:fd:fe:5e:df:
72:23:f0:e0:d8:1f:06:e7:a9:b1:d3:83:2c:b6:5c:b8:8b:ca:
e6:08:4a:35:8a:fb:43:8c:65:a8:a0:c2:cd:5c:6f:e9:81:5e:
83:a1:1e:81:f9:b8:62:f8:76:e7:74:20:27:85:0d:e8:9c:07:
ff:16:97:f2:e6:14:56:53:66:15:17:8b:2c:62:7e:09:0a:83:
4a:4d:32:d5:11:70:c8:fb:f5:7f:4b:d9:8e:7e:88:6e:d5:52:
21:d7:c0:97:2a:9f:07:47:75:db:a5:66:3b:24:41:7d:41:2d:
67:f7:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:46 2024 by rpki-client on console-fra.rpki-client.org