Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/aR1mVFsd3Zpv8BJRvLw-sB2CuLI.roa
File: aR1mVFsd3Zpv8BJRvLw-sB2CuLI.roa (raw, json)
Hash identifier: iPLImnAKwfVoQTPniC9w92C86e07jIHhL5rENylADoA=
Subject key identifier: 69:1D:66:54:5B:1D:DD:9A:6F:F0:12:51:BC:BC:3E:B0:1D:82:B8:B2
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C24A996
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/aR1mVFsd3Zpv8BJRvLw-sB2CuLI.roa
Signing time: Thu 10 Feb 2022 07:15:40 +0000
ROA not before: Thu 10 Feb 2022 07:15:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 194.163.91.0/24 maxlen: 24
194.233.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203729302 (0xc24a996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Feb 10 07:15:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=691d66545b1ddd9a6ff01251bcbc3eb01d82b8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:a1:c7:2a:71:b3:7c:02:d1:36:32:3b:f8:
3a:e2:77:71:81:34:25:1c:05:04:05:03:a5:74:4a:
77:ef:e9:19:3d:a9:d3:1b:dd:5a:bf:5b:b4:4d:6a:
83:3d:4a:cc:80:64:12:5c:2d:aa:d7:c0:43:ea:b5:
a5:e1:f1:8e:ee:64:5b:c9:4f:fd:c0:1a:06:71:a8:
34:99:80:97:08:73:33:ba:db:d9:8d:31:48:4c:e1:
da:0f:33:13:f7:32:77:d1:dc:05:69:04:32:b2:d6:
46:9d:d9:af:65:84:5e:c2:96:ca:52:2b:f4:30:ae:
cb:31:64:86:e9:9d:fa:78:f9:ec:e1:18:ac:54:e1:
48:25:dd:3f:2c:b2:42:44:76:d8:3a:21:6d:f5:a8:
25:1f:a4:12:42:0c:55:db:5f:1b:8d:6a:ff:8d:a7:
63:84:0c:b5:b1:83:70:b6:4c:20:aa:12:99:de:b5:
3e:c5:a9:50:f0:40:86:cf:78:da:b4:d8:53:36:3c:
5d:cf:62:ee:b6:d2:3a:6c:6a:5b:fd:b9:24:34:b9:
67:70:5d:d9:ab:96:d6:4c:f5:3d:30:36:11:a0:72:
cc:64:28:ea:99:85:d9:34:8a:b2:2c:90:8a:81:c4:
eb:6c:be:39:6b:fa:6b:ab:8e:cd:e4:78:7f:ba:2e:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1D:66:54:5B:1D:DD:9A:6F:F0:12:51:BC:BC:3E:B0:1D:82:B8:B2
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/aR1mVFsd3Zpv8BJRvLw-sB2CuLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.91.0/24
194.233.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e0:2e:9c:68:3f:62:68:9f:a4:4a:29:92:31:3b:af:65:a0:
b0:e4:fe:c0:f3:5f:af:cd:4e:e1:99:2e:e5:0b:e5:1e:df:40:
64:23:30:c8:51:fc:9d:32:46:0c:69:de:aa:c2:5e:8d:b0:36:
f4:f4:3a:8c:68:fb:55:cc:db:2d:77:7b:18:58:40:42:6b:ff:
4f:ac:b0:bf:74:d3:9b:b0:f4:f8:89:3c:6d:10:cd:13:ff:1f:
df:02:67:a8:8f:9f:4a:a1:fa:f5:b8:20:ae:af:01:b5:29:e9:
7e:10:d9:a2:e7:c5:20:2a:64:b8:bb:a2:78:06:31:c3:b1:4c:
a6:e4:0f:36:07:6e:2f:2f:f2:43:f8:34:ba:02:1c:4e:2b:1d:
b1:99:32:d3:8f:fa:c7:95:df:6c:e4:47:6e:0b:b1:8f:4f:00:
8e:f1:19:19:4a:34:29:86:a8:ba:10:d1:18:04:44:12:b7:26:
4c:88:4b:ec:8b:d1:b9:6f:0b:4f:c5:71:5c:4f:22:28:05:d4:
13:1b:17:90:8d:cc:91:96:33:f7:c8:09:1c:a0:70:48:66:b3:
68:57:c7:04:61:f4:7c:7d:b1:ad:ca:d6:49:0d:6b:f8:99:eb:
2e:3a:ae:88:e9:c0:b0:8f:7b:1d:34:87:a8:48:aa:28:05:01:
81:9e:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org