Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/L7xzAiZ2cvBJCrTKqy7dV_Ri2Uo.roa
File: L7xzAiZ2cvBJCrTKqy7dV_Ri2Uo.roa (raw, json)
Hash identifier: eYsFrxppkbwJW3SKCqyTpsys2/oOEvwCRfoVodka6so=
Subject key identifier: 2F:BC:73:02:26:76:72:F0:49:0A:B4:CA:AB:2E:DD:57:F4:62:D9:4A
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 0D694A44
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/L7xzAiZ2cvBJCrTKqy7dV_Ri2Uo.roa
Signing time: Sat 01 Jan 2022 02:58:32 +0000
ROA not before: Sat 01 Jan 2022 02:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31554
IP address blocks: 194.42.102.0/23 maxlen: 23
193.200.126.0/23 maxlen: 23
194.9.92.0/23 maxlen: 23
194.116.200.0/23 maxlen: 23
193.239.194.0/23 maxlen: 23
2001:67c:115c::/48 maxlen: 48
2001:67c:1e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225004100 (0xd694a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Jan 1 02:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fbc7302267672f0490ab4caab2edd57f462d94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:11:3e:9b:3e:89:29:f6:24:c4:1c:b9:68:
95:34:18:f6:4e:80:f9:42:d1:71:77:03:0e:3e:fa:
4f:f0:f6:db:cf:dd:e3:3a:9a:16:14:94:09:aa:df:
88:a9:a0:2b:a1:59:aa:78:b8:68:0d:5a:7b:53:19:
fb:4f:f7:18:53:76:05:e8:0c:15:41:88:46:43:9a:
e1:3b:9b:e7:1b:89:09:6d:7e:8d:8c:79:1d:f2:7a:
3a:9b:d4:03:27:3b:a5:15:8e:3a:b2:c9:6a:d5:30:
af:a3:53:14:1b:fa:33:0a:f8:ed:3f:20:e8:9c:7d:
c1:8e:65:2f:48:f1:84:65:cd:83:a8:d3:87:9d:54:
7e:9f:78:5b:84:78:4b:8c:8a:41:f7:1a:3c:62:0d:
93:3d:2b:5f:84:d9:03:fd:c6:e0:54:81:16:ae:72:
15:53:e5:33:a9:0d:52:60:da:4a:da:79:69:15:d5:
e7:96:1a:99:2a:2b:bf:20:b5:fe:4a:54:25:d5:36:
26:d7:6a:11:d6:91:88:48:6e:a9:9d:60:1b:2c:b8:
7f:92:e7:1f:af:49:0d:4a:ad:28:21:06:ab:c7:0b:
7d:b2:2b:be:3c:27:33:0a:67:49:bd:26:68:a8:e1:
e6:e7:ea:94:40:a0:5d:4b:0d:52:62:88:e0:33:ad:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:73:02:26:76:72:F0:49:0A:B4:CA:AB:2E:DD:57:F4:62:D9:4A
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/L7xzAiZ2cvBJCrTKqy7dV_Ri2Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.126.0/23
193.239.194.0/23
194.9.92.0/23
194.42.102.0/23
194.116.200.0/23
IPv6:
2001:67c:1e0::/48
2001:67c:115c::/48
Signature Algorithm: sha256WithRSAEncryption
37:fc:22:99:e5:17:74:a7:ea:57:8f:eb:85:9d:a2:b2:b8:f5:
dc:bb:1a:ac:62:21:9e:67:24:a4:8b:43:50:94:cc:81:87:5a:
9f:4c:35:35:e0:36:8c:25:e7:2e:11:c8:ed:5c:63:b0:22:d4:
62:67:4a:bb:b8:13:39:3c:50:b2:d2:14:83:33:7f:e3:ef:f2:
ec:f1:d0:99:20:2b:3f:57:46:3d:85:3a:9f:bc:a9:90:22:04:
2c:64:2e:4f:17:53:be:38:9c:cf:7f:aa:57:92:aa:92:6c:dc:
c4:77:fc:89:78:a9:0a:37:8f:28:f0:38:d7:a1:b7:f5:9e:1a:
9c:f8:4f:09:61:dd:81:b3:bd:c9:0e:de:4e:8d:2b:e3:bd:46:
e0:c4:f7:d4:e2:57:b8:87:d0:eb:ee:c4:b3:81:c8:4b:99:4b:
19:e7:b2:26:71:61:2c:d2:3a:55:fa:62:d1:4f:75:d7:38:ac:
d6:3f:c1:1e:08:1a:9a:39:53:df:68:98:2f:e1:86:e1:fc:a8:
cd:34:da:a3:60:9f:c2:88:b0:9f:e9:a5:2e:f2:b5:ae:13:59:
6c:89:4a:61:bf:f6:77:29:cd:cb:a2:98:d3:4a:80:66:ff:e8:
95:9a:9e:dd:ba:d3:6d:65:ae:f9:23:f8:d8:26:54:ff:64:7e:
6c:98:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:12 2024 by rpki-client on console-ams.rpki-client.org