Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2eofZErJuH-RKBKNUSsjIuSMLTY.roa
File: 2eofZErJuH-RKBKNUSsjIuSMLTY.roa (raw, json)
Hash identifier: j5Tds5f21A8d/Bg/wlOuATx72q0NXWVoyobZfH+5AFU=
Subject key identifier: D9:EA:1F:64:4A:C9:B8:7F:91:28:12:8D:51:2B:23:22:E4:8C:2D:36
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4881814A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2eofZErJuH-RKBKNUSsjIuSMLTY.roa
Signing time: Sat 01 Jan 2022 03:00:42 +0000
ROA not before: Sat 01 Jan 2022 03:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206485
IP address blocks: 193.93.192.0/24 maxlen: 24
193.93.194.0/24 maxlen: 24
193.93.193.0/24 maxlen: 24
193.93.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216446794 (0x4881814a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9ea1f644ac9b87f9128128d512b2322e48c2d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:95:a7:8d:cc:95:b4:ba:5e:25:c1:54:de:
7d:ae:77:16:da:5f:64:33:19:8f:5c:43:86:4e:16:
c2:5f:19:44:2b:95:5b:f0:b5:b2:b5:42:7e:dd:12:
ec:86:25:a1:e9:dd:4a:81:75:33:c5:5e:91:8e:d7:
01:7d:16:1c:f1:01:71:53:32:7f:50:2c:9e:0c:7a:
4a:69:7b:11:ea:b0:75:20:a9:81:a3:e9:c2:79:64:
86:a4:3e:cd:5b:93:11:a5:4d:83:51:40:a8:4c:99:
53:c5:24:96:0c:23:ab:c5:68:8e:b1:30:d2:e0:45:
74:6f:e1:f1:77:3c:c9:3c:a9:f5:b8:6e:02:05:0a:
13:1d:62:c2:fa:3b:42:a6:6d:6b:27:e0:66:12:57:
a3:4b:05:11:9c:d8:a0:9b:09:05:c6:1b:eb:40:0a:
79:1d:30:ee:c9:e4:b3:c6:5d:58:4b:17:3e:ef:1a:
44:f4:36:bc:1f:e5:58:12:a0:79:bf:c3:27:b1:70:
53:d9:44:f7:86:65:32:b8:6c:1d:00:c9:4e:dd:af:
db:82:c0:cf:3d:cf:12:88:43:fb:48:3e:5f:96:bc:
9c:d4:ce:c8:fe:94:93:c1:0b:33:9c:2f:6e:2c:9a:
61:ef:cf:87:ce:18:b9:62:5b:53:7c:c3:9e:b1:30:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:1F:64:4A:C9:B8:7F:91:28:12:8D:51:2B:23:22:E4:8C:2D:36
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2eofZErJuH-RKBKNUSsjIuSMLTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:35:85:7c:f0:30:48:c5:d2:67:d6:ac:31:e2:3f:16:57:09:
4c:b9:17:a3:34:a2:46:03:ff:ab:20:d3:e2:8d:87:46:21:ad:
4d:73:b3:56:10:68:8a:ce:a4:af:bd:c6:8f:a4:51:0a:d4:8e:
15:5d:e4:ba:7b:ae:82:5d:7f:71:2a:24:93:cd:2e:f2:3f:9f:
6f:8a:1f:de:76:ea:ba:ae:94:00:cd:80:49:d1:52:1b:d9:11:
d4:94:31:17:f1:de:fd:f1:e5:79:c7:9c:b0:2c:f2:d8:c0:ef:
e4:1d:c0:48:bf:ed:1d:5b:38:95:c7:09:d8:92:2e:59:2d:a5:
03:12:4f:ff:1f:bd:e5:0b:4f:de:3f:6a:41:a7:e0:98:9b:80:
50:20:c2:30:1b:cc:10:7f:44:1f:62:2a:4f:c6:60:c2:89:d3:
04:e0:6f:d7:2d:d4:9b:ee:ba:27:6c:fe:00:ab:f4:a3:cf:f4:
60:77:c8:47:fc:49:87:b7:a8:d4:cd:54:ba:db:cf:a0:10:1b:
71:93:c0:ad:12:b7:ec:5d:50:54:25:f1:b2:5b:36:8d:70:8c:
55:15:55:5a:a1:6b:68:fe:3b:78:61:f5:78:66:66:48:ca:ce:
69:68:4e:0e:f5:f3:5d:09:e9:5a:1d:26:53:7b:b5:62:dc:fe:
b6:2d:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org