Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nJgIH1BVEYKNUQV7JGa0jbjMty0.roa
File: nJgIH1BVEYKNUQV7JGa0jbjMty0.roa (raw, json)
Hash identifier: TGm+7vz6Vkb9InRQNGgzPE1BVBc5trMb6yJQ0axDdDQ=
Subject key identifier: 9C:98:08:1F:50:55:11:82:8D:51:05:7B:24:66:B4:8D:B8:CC:B7:2D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1A9660DC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nJgIH1BVEYKNUQV7JGa0jbjMty0.roa
Signing time: Fri 15 Apr 2022 12:25:09 +0000
ROA not before: Fri 15 Apr 2022 12:25:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 193.231.227.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.187.0/24 maxlen: 24
193.231.188.0/24 maxlen: 24
193.231.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446062812 (0x1a9660dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 15 12:25:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c98081f505511828d51057b2466b48db8ccb72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:c5:12:86:ef:17:9b:a2:38:f7:44:d7:40:
fa:32:07:d8:c6:18:d9:a8:a6:24:de:fa:15:80:58:
c6:63:02:6c:08:60:7f:da:61:dc:e9:88:3a:29:78:
43:c7:bc:79:1b:d1:77:12:22:85:98:29:63:00:65:
bb:30:82:17:a4:f1:d1:78:25:b7:20:5d:f1:a6:c3:
a5:8f:28:78:86:c2:6c:35:72:9d:5c:dc:9b:c7:61:
0a:1e:c8:b6:8b:27:73:7d:ff:65:9d:6b:fe:de:f2:
e9:9d:76:eb:c7:21:d9:44:ca:e2:4e:d1:2a:47:47:
ea:9a:1d:6e:d6:a7:ee:3a:1e:d7:2c:de:2f:2c:ba:
2a:60:e5:53:4d:43:e1:ed:0e:8e:6f:f9:c6:41:84:
09:f3:d4:7a:7c:53:03:93:3a:f9:82:1f:0e:2f:61:
f5:6f:84:ec:3c:e1:c4:c6:2a:14:b8:b9:02:8c:68:
09:a3:50:bb:f3:2d:50:90:a2:6c:50:c4:02:aa:69:
2d:2f:09:47:eb:66:11:86:a7:f9:c7:f1:48:f0:7f:
33:2e:59:84:ec:88:f3:94:d0:45:8f:17:d9:5e:a5:
4c:63:dc:e3:af:c3:97:72:81:26:05:61:c3:1a:14:
79:49:f9:76:4f:cb:39:9d:ec:4e:0e:b1:5e:01:d4:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:98:08:1F:50:55:11:82:8D:51:05:7B:24:66:B4:8D:B8:CC:B7:2D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nJgIH1BVEYKNUQV7JGa0jbjMty0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.184.0/24
193.231.187.0-193.231.189.255
193.231.227.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
Signature Algorithm: sha256WithRSAEncryption
47:42:a8:fa:42:f4:48:01:56:06:49:76:16:fc:e8:d2:56:91:
30:69:88:72:d7:c7:ca:35:78:de:a5:cc:5b:35:e1:75:39:8e:
bc:cf:8a:aa:27:c8:7b:8f:98:42:57:6a:54:0d:76:32:d6:0b:
3d:53:f2:8a:30:cb:f2:25:39:66:17:5e:56:17:66:8e:38:df:
7a:d8:07:dc:a8:48:b1:8f:f2:b8:e9:e4:a4:38:cd:ff:97:f3:
82:a7:99:4a:06:5e:39:09:42:95:43:39:bb:f7:75:6d:e6:d6:
39:1e:49:f6:a9:c5:4e:37:fb:5b:95:3a:13:e8:b4:27:b1:1c:
f9:c8:7e:84:82:f2:8c:6c:b3:a1:cc:7a:26:cc:9e:59:88:e5:
c4:01:b8:85:f7:f1:42:4c:19:69:ea:58:6c:90:70:ce:0a:45:
93:37:a5:e1:07:af:df:45:0e:4f:a7:7d:fb:c7:d8:8a:40:33:
85:1c:a3:b0:67:6b:70:17:73:94:fb:43:ab:e3:9c:d3:f1:fe:
23:1b:40:7d:3a:2e:09:89:2c:2d:74:b9:d1:f6:96:6d:66:ce:
f2:a8:d0:89:86:69:0a:34:c7:52:5b:f5:6d:65:cc:62:1c:9f:
c6:c2:82:67:47:c9:c7:d5:22:1d:1e:59:0f:cf:16:f6:11:9a:
3a:12:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org