Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/cQ5pMn9bH-oUcNbpaiXi_tgNSs0.roa
File: cQ5pMn9bH-oUcNbpaiXi_tgNSs0.roa (raw, json)
Hash identifier: ZmpUuOGTEEejbNMxSdkvx8wj7sDeNyyzi3SLysojoQI=
Subject key identifier: 71:0E:69:32:7F:5B:1F:EA:14:70:D6:E9:6A:25:E2:FE:D8:0D:4A:CD
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 0185624D274EA1FA2E506ADFF503583B7942
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/cQ5pMn9bH-oUcNbpaiXi_tgNSs0.roa
Signing time: Fri 30 Dec 2022 09:11:41 +0000
ROA not before: Fri 30 Dec 2022 09:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196722
IP address blocks: 193.5.181.0/24 maxlen: 24
193.5.185.0/24 maxlen: 24
193.5.182.0/24 maxlen: 24
193.5.186.0/24 maxlen: 24
193.5.180.0/24 maxlen: 24
193.5.188.0/24 maxlen: 24
193.5.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:4d:27:4e:a1:fa:2e:50:6a:df:f5:03:58:3b:79:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Dec 30 09:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=710e69327f5b1fea1470d6e96a25e2fed80d4acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:9f:59:92:55:cc:7a:4a:b9:ce:07:78:c0:
8e:f0:53:c6:7e:e5:fc:eb:5e:4d:05:b9:49:c3:17:
37:0c:96:2f:a2:44:ac:88:2e:87:04:35:5b:15:2a:
9b:c5:10:b0:e4:36:02:e1:c1:a5:ad:3b:16:06:87:
94:ed:66:83:40:f3:23:21:5a:8b:97:28:7f:f0:43:
66:89:05:ba:74:a5:62:72:6f:e5:f4:74:3c:af:e3:
41:fc:ee:cb:bf:e9:7d:ab:da:a8:b2:e6:f1:9e:77:
e2:3f:26:9e:69:ca:e9:70:dc:02:df:d8:42:a6:80:
9a:f4:61:b1:12:5e:37:ae:fe:3d:a8:d4:cb:de:0c:
26:c5:fa:1b:bd:cd:45:03:0a:f7:35:e4:cc:0c:a0:
e6:cf:e6:77:fa:a2:ec:da:8f:67:7e:fc:61:75:dc:
7e:e6:f6:8b:8f:9f:21:e5:f2:b8:50:95:82:39:87:
25:3b:60:36:da:c7:c9:aa:53:06:bd:33:4e:96:b3:
6d:0f:c9:b2:61:f5:70:19:b2:15:2f:41:59:8f:27:
28:e0:c3:33:5b:cf:0b:1c:35:6c:3a:c6:15:43:81:
4e:8c:2a:df:38:f2:eb:18:9a:58:37:69:ac:29:98:
4c:42:98:1d:7d:c3:4d:af:d5:3f:a9:65:b6:00:b4:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:69:32:7F:5B:1F:EA:14:70:D6:E9:6A:25:E2:FE:D8:0D:4A:CD
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/cQ5pMn9bH-oUcNbpaiXi_tgNSs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.180.0-193.5.182.255
193.5.185.0-193.5.188.255
Signature Algorithm: sha256WithRSAEncryption
65:5e:39:44:45:46:02:ad:35:29:04:b4:f5:af:48:94:5e:1d:
69:e2:a8:a0:3c:46:d4:29:6e:3b:a2:ad:28:11:25:b9:b4:fd:
17:87:09:87:f2:09:64:a7:43:66:49:70:ea:b1:db:3e:8b:47:
fd:7b:d2:dd:4e:3a:a2:70:04:35:53:18:2e:96:1f:8c:70:99:
74:55:95:ed:2d:c9:b5:f6:56:6d:35:34:f7:47:25:66:c6:3e:
c9:30:a1:a7:15:76:6e:48:2f:5e:6b:04:17:e5:55:81:fa:bd:
e9:42:fe:71:07:d5:b7:8b:a6:82:15:b7:0a:be:3a:44:50:3a:
53:55:ac:fd:ec:33:1e:91:73:04:91:a6:f6:1c:48:b0:99:c6:
2f:04:7f:63:8a:c4:21:09:d0:30:52:4b:d5:97:02:65:3c:2c:
96:d4:78:50:4c:6b:c9:28:4e:dc:60:06:84:6d:e0:86:26:ac:
31:13:6b:39:0a:d8:83:e7:0f:d4:09:ec:5e:10:04:ba:cc:0a:
d4:5f:bf:84:26:ca:9d:5a:95:54:eb:b3:b8:a6:91:6e:43:83:
00:22:fc:47:d8:59:04:fb:5c:6d:46:80:bf:45:ad:de:8e:79:
39:32:12:5c:99:0f:c5:a0:f3:a2:93:03:2d:84:18:5c:b6:70:
e1:ba:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:16 2023 by rpki-client on console-fra.rpki-client.org