Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/e2PoquWaPFLadaiekdhk0rFjbFc.roa
File: e2PoquWaPFLadaiekdhk0rFjbFc.roa (raw, json)
Hash identifier: WERoNXHGkXTaDt0Nl/n2Inpvr10rXnCXOWk4PN1yYbk=
Subject key identifier: 7B:63:E8:AA:E5:9A:3C:52:DA:75:A8:9E:91:D8:64:D2:B1:63:6C:57
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0184CC9CD498D018263E91086FB83F796215
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/e2PoquWaPFLadaiekdhk0rFjbFc.roa
Signing time: Thu 01 Dec 2022 07:35:40 +0000
ROA not before: Thu 01 Dec 2022 07:35:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.33.150.0/24 maxlen: 24
194.33.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:9c:d4:98:d0:18:26:3e:91:08:6f:b8:3f:79:62:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Dec 1 07:35:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b63e8aae59a3c52da75a89e91d864d2b1636c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5a:7c:57:50:9a:52:92:3f:02:8e:74:76:67:
4a:30:97:78:5f:c9:44:fa:fc:81:81:44:d9:15:87:
77:53:bd:8e:de:c4:f7:b5:93:16:dd:a2:f7:c7:6f:
03:aa:b0:d9:b8:df:69:e6:8a:b6:9f:b4:48:bb:50:
28:1f:9a:5f:b4:a4:1b:99:c0:c7:8f:68:a8:5f:d0:
79:b1:c5:a2:e5:e3:2d:75:70:d6:20:c9:aa:42:95:
27:77:6d:57:0f:01:5f:d2:9d:a2:a9:de:e7:f2:a2:
39:92:4c:bf:c1:2f:03:20:db:93:0a:77:aa:1b:9a:
77:9e:42:fc:cd:59:ba:76:bd:a6:e8:a5:de:82:a4:
c8:17:5c:31:6f:04:f3:34:c1:e4:d6:6c:0c:40:66:
2e:c4:33:03:c4:c6:ea:1d:c2:34:d1:13:07:fc:1f:
e5:60:9d:30:15:da:03:a2:3a:fb:e6:76:c1:28:e5:
db:58:88:d6:0c:a5:cc:b0:44:91:bf:53:35:63:aa:
bc:8d:9d:75:6a:69:da:68:fe:1c:58:c5:97:b7:99:
89:40:af:91:b4:a5:cc:dd:a9:89:af:53:89:59:47:
39:d9:aa:19:9c:a4:50:5e:f6:93:72:af:df:ed:83:
0f:14:8b:13:86:b3:d0:a9:61:e0:ed:cf:b3:18:34:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:63:E8:AA:E5:9A:3C:52:DA:75:A8:9E:91:D8:64:D2:B1:63:6C:57
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/e2PoquWaPFLadaiekdhk0rFjbFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.150.0/23
Signature Algorithm: sha256WithRSAEncryption
50:63:52:a6:76:d4:08:ae:12:b2:90:e4:25:3c:6c:2a:75:56:
1c:2b:56:c5:1b:e1:31:18:35:06:e7:65:3c:d4:42:7c:9a:30:
0a:ea:97:c6:30:90:fe:dd:f4:ec:05:a4:33:da:1d:13:97:8d:
b8:d6:33:0b:a1:8f:8d:bb:34:aa:38:4a:e9:84:3a:40:48:e1:
0d:9f:2c:3f:4c:75:39:6c:a1:8a:55:30:0f:27:20:e0:0b:5e:
d0:ba:f5:f5:57:e7:e6:64:18:31:b0:17:6b:aa:df:57:be:82:
53:01:14:b4:d8:47:ae:d9:de:55:11:ae:cc:ec:e3:e8:12:40:
81:51:52:15:f3:7a:d3:68:97:26:00:19:d8:d8:e5:82:5f:b7:
ba:e8:dc:e1:7d:bd:11:1d:89:4c:f7:2a:95:a5:10:fc:87:8e:
03:f0:f5:72:de:8f:62:82:39:ca:04:e6:48:40:b9:43:2f:55:
4f:fc:09:c4:43:ba:9a:97:a7:23:22:b3:23:4a:5c:4a:c3:65:
e6:ed:a0:1e:6a:86:e3:8d:bd:e5:7c:92:6b:c6:9b:0c:90:95:
ff:dc:b1:d9:49:79:fb:80:53:bd:8c:69:7e:fd:96:d0:ab:bf:
27:2a:a3:7f:68:86:76:f7:44:8e:c1:32:d5:57:6b:9a:91:90:
6d:9c:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org