Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9dwAqXfqWI-S7ZO8nJbYbDjZTt4.roa
File: 9dwAqXfqWI-S7ZO8nJbYbDjZTt4.roa (raw, json)
Hash identifier: RsWljv9+T2/JlBO0YJ7x9Iv+zG7Njl1q/MhM7sQRmzo=
Subject key identifier: F5:DC:00:A9:77:EA:58:8F:92:ED:93:BC:9C:96:D8:6C:38:D9:4E:DE
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0BE42F66
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9dwAqXfqWI-S7ZO8nJbYbDjZTt4.roa
Signing time: Mon 24 Jan 2022 07:20:09 +0000
ROA not before: Mon 24 Jan 2022 07:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 194.233.30.0/24 maxlen: 24
194.233.150.0/24 maxlen: 24
194.163.95.0/24 maxlen: 24
194.163.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199503718 (0xbe42f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 24 07:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5dc00a977ea588f92ed93bc9c96d86c38d94ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:dd:43:32:de:4e:6d:9b:38:e8:09:a9:e8:
af:18:02:e2:11:6b:fb:0f:56:54:e3:bd:89:78:2f:
73:9d:b6:7b:4b:fe:f7:d5:85:03:2e:c9:31:6e:b3:
2f:13:80:5f:f5:f2:c1:d2:d0:65:ac:b6:f4:25:39:
d8:80:3a:c8:48:c7:37:8a:14:7a:d8:38:fc:16:60:
c1:bf:1c:8f:86:05:23:ec:74:30:65:78:14:57:00:
c3:24:16:d0:f6:32:49:78:e1:c6:8e:be:69:fe:2a:
4b:43:0b:46:9a:46:a9:29:9a:37:9b:77:37:92:3b:
51:71:98:4f:59:7a:2c:79:d1:d8:7f:e5:1a:91:e1:
d0:07:a7:31:39:2e:39:75:31:89:61:4f:41:72:7d:
43:85:e9:24:d3:8a:9c:d5:9f:47:83:07:b5:b4:29:
28:f4:82:e8:40:48:36:57:1e:ff:c4:93:66:d6:bc:
64:73:13:6c:16:3d:fe:a6:e3:1f:d6:e8:18:dc:e8:
9b:83:82:f0:45:d3:89:1a:df:a1:99:c4:c1:63:9f:
60:11:af:9c:52:a1:80:30:11:f2:34:e1:3e:67:cb:
ff:39:9b:b5:4a:75:39:4e:07:1e:e5:b5:a2:1b:20:
d7:cd:cb:07:1b:ad:75:13:13:a1:c8:3c:d1:57:bd:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:00:A9:77:EA:58:8F:92:ED:93:BC:9C:96:D8:6C:38:D9:4E:DE
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9dwAqXfqWI-S7ZO8nJbYbDjZTt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.94.0/23
194.233.30.0/24
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
04:71:10:97:fa:e6:93:97:c2:0a:2f:8e:7c:aa:0e:4e:da:d6:
0d:ea:83:62:2f:6c:b3:66:1c:a3:8f:f5:65:6d:e8:1c:94:50:
b7:4b:ba:66:cb:90:8f:d7:7b:64:65:5e:51:8f:08:8f:27:f9:
0a:5f:4d:08:46:e9:2f:6d:83:90:b3:91:02:d8:81:9a:64:8a:
98:2f:4a:82:17:fb:2f:e9:9b:9a:45:83:7f:ca:d7:01:32:5c:
83:59:e7:32:bf:da:c8:ed:20:1c:68:b1:b4:0d:9b:ab:ec:ae:
0a:c7:d8:18:1c:c1:a7:3f:69:b1:41:77:85:66:5c:ce:a0:96:
ce:ce:45:bf:ad:30:f1:91:c2:b8:3d:c1:96:93:40:a0:74:54:
17:2f:65:f1:03:3e:80:b9:31:15:f2:14:76:16:6e:13:6e:05:
89:69:27:e2:43:d1:82:33:18:74:05:78:54:f7:0c:6e:fc:dd:
4c:b8:9a:30:a3:9b:e1:fe:14:a7:43:01:20:31:d1:e9:a0:65:
6d:06:a6:cc:36:e7:85:d3:8b:89:dc:46:27:8c:49:99:82:71:
5e:18:b3:f4:8d:f2:09:87:8e:a7:22:11:cd:f8:2a:b9:ff:00:
f7:36:84:81:62:35:69:f6:7b:ec:07:9f:78:4f:42:d5:c1:5d:
dc:d2:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org