Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/coLA2Habt7zpQOLxjE9yQXCcijM.roa
File: coLA2Habt7zpQOLxjE9yQXCcijM.roa (raw, json)
Hash identifier: i/p1R/15Pu6o8nDUtl2SPq5rMVQYkGsJ34zKkYsztIc=
Subject key identifier: 72:82:C0:D8:76:9B:B7:BC:E9:40:E2:F1:8C:4F:72:41:70:9C:8A:33
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09582E52
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/coLA2Habt7zpQOLxjE9yQXCcijM.roa
Signing time: Tue 11 Jan 2022 11:11:36 +0000
ROA not before: Tue 11 Jan 2022 11:11:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206446
IP address blocks: 193.31.29.0/24 maxlen: 24
194.56.227.0/24 maxlen: 24
185.186.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156773970 (0x9582e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 11 11:11:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7282c0d8769bb7bce940e2f18c4f7241709c8a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:78:02:69:8b:3a:17:a6:6e:ce:b0:15:df:
87:68:69:af:6a:41:89:33:6c:75:c7:d6:f0:af:77:
f4:b9:f3:41:e2:16:d4:a5:b1:6e:4e:06:19:db:09:
d1:c1:ee:d2:0a:67:1e:44:06:5c:ac:01:6c:de:43:
f4:bf:15:66:a0:84:13:ab:88:d1:ea:87:ec:d9:e9:
be:5d:e9:42:aa:d9:8e:f5:43:29:72:02:35:ea:d5:
e5:cf:6c:ce:6a:2c:af:d1:37:7b:db:dc:86:f6:06:
c0:a8:75:99:9b:7c:9e:a2:ed:b9:ee:c6:3c:e0:05:
11:35:c7:f1:17:0d:e7:db:f7:23:0f:71:d0:ad:31:
0a:a6:e5:6e:37:68:ea:b2:f9:a2:03:36:56:0b:77:
4d:a0:d7:ee:f0:9f:2d:eb:da:30:8f:22:20:c7:36:
75:57:f5:e8:02:2d:6e:21:58:56:bc:d8:38:c0:12:
de:48:08:43:60:40:69:53:26:1b:55:0b:c4:d4:16:
05:23:95:d7:55:1c:04:d8:6b:5f:1d:60:7e:99:16:
87:1d:0b:90:28:6a:a5:0e:9c:f6:98:68:4f:9a:52:
38:ff:51:7d:c9:9c:a8:20:44:7c:33:ce:46:0c:0f:
7c:40:27:61:b7:b2:c8:6f:6c:12:66:f9:2e:8f:6a:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:C0:D8:76:9B:B7:BC:E9:40:E2:F1:8C:4F:72:41:70:9C:8A:33
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/coLA2Habt7zpQOLxjE9yQXCcijM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.66.0/24
193.31.29.0/24
194.56.227.0/24
Signature Algorithm: sha256WithRSAEncryption
af:45:8d:9f:29:cc:0e:8b:7a:4a:42:34:7a:63:6e:e8:f4:a4:
22:ad:6d:15:5b:3b:2c:ab:30:bb:af:96:65:21:f0:63:47:87:
91:be:13:5c:55:a7:9b:c4:ff:45:db:cd:be:a1:5f:ad:84:88:
24:9c:93:b5:64:54:35:37:cf:18:cb:94:9b:bc:fc:fb:26:ed:
18:91:50:98:f3:61:42:67:17:17:df:51:ce:a5:0e:31:56:31:
92:54:9f:1b:f4:fd:cf:2a:2d:3d:8e:df:29:a2:74:bf:2f:bf:
c9:f2:97:f9:36:ac:92:05:ed:f4:f6:f2:41:8f:3a:69:35:33:
8b:e3:24:4f:ab:ab:ab:f3:66:08:d0:58:6f:88:cf:37:8c:fe:
06:d5:90:3d:d0:bb:9a:b3:0b:f1:06:f7:41:ce:03:b6:7b:7c:
d4:67:b6:62:c6:0a:b4:fa:c5:4b:54:ad:02:c0:78:90:5e:17:
46:23:5b:8c:38:d8:54:e0:55:83:e7:ed:70:89:b9:5b:97:09:
f7:8f:2d:49:9a:17:a9:3e:ba:1d:ca:c1:c9:e2:c9:9f:b9:83:
5f:32:6a:51:dc:49:62:cc:5a:11:06:df:c8:18:f1:62:6c:c3:
5e:5d:0e:24:b5:08:44:4c:95:88:1a:ea:d0:b8:6e:a7:18:46:
cc:df:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org