Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/ou5DPtO0JZaPzLy4D9LOSqTk1HM.roa
File: ou5DPtO0JZaPzLy4D9LOSqTk1HM.roa (raw, json)
Hash identifier: MqRQQ5+dYC46qc4ynncTDdgeyaU2bcAKeBe/jcLCqxQ=
Subject key identifier: A2:EE:43:3E:D3:B4:25:96:8F:CC:BC:B8:0F:D2:CE:4A:A4:E4:D4:73
Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial: 051A1562
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/ou5DPtO0JZaPzLy4D9LOSqTk1HM.roa
Signing time: Sat 01 Jan 2022 05:05:49 +0000
ROA not before: Sat 01 Jan 2022 05:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208060
IP address blocks: 193.43.30.0/23 maxlen: 24
193.43.32.0/23 maxlen: 24
2a0f:b880::/29 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85595490 (0x51a1562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Validity
Not Before: Jan 1 05:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2ee433ed3b425968fccbcb80fd2ce4aa4e4d473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:26:f8:47:35:96:7f:16:16:62:d6:10:be:
49:d6:8f:19:ca:56:c8:7b:5e:a9:36:3a:ca:6d:b2:
1f:48:bf:33:cd:38:bc:77:06:e8:ca:73:9a:05:14:
21:6d:f1:78:09:82:a6:9e:91:36:3e:b4:ba:c9:01:
59:13:34:52:66:c3:73:22:67:37:e5:12:2f:70:df:
ee:ce:92:6c:08:6a:c8:37:a3:8d:10:3a:5e:db:3e:
c5:3d:57:2e:c9:8c:37:cf:26:06:9a:c8:c4:c2:c8:
e4:ce:c3:2c:3f:24:83:bb:60:e2:90:17:fb:80:2f:
0e:22:ea:0d:ae:bc:8e:fa:df:a6:e5:2f:d1:40:86:
4e:c1:01:31:56:88:50:d0:f2:4d:46:8f:4a:a2:5c:
38:16:ca:d7:20:9c:73:d8:be:4e:1c:e7:c6:f9:be:
9b:b5:2f:d8:ed:db:ed:84:25:ff:c2:d9:d1:3e:f8:
03:9c:56:fe:bd:b3:16:db:01:c6:3a:e9:14:80:b8:
dc:60:7f:2c:d3:f1:47:29:c9:ff:88:89:81:11:db:
fe:04:84:44:4d:ff:a6:6f:2d:05:d0:c8:67:35:a9:
15:01:76:fc:1f:db:cd:30:18:fe:d9:ba:7e:59:5e:
f2:57:38:3c:73:9e:6f:4e:6a:a6:a9:92:a0:bc:1a:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EE:43:3E:D3:B4:25:96:8F:CC:BC:B8:0F:D2:CE:4A:A4:E4:D4:73
X509v3 Authority Key Identifier:
keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/ou5DPtO0JZaPzLy4D9LOSqTk1HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.30.0-193.43.33.255
IPv6:
2a0f:b880::/29
Signature Algorithm: sha256WithRSAEncryption
6b:df:32:c8:5a:9b:02:7f:b4:22:94:a3:0d:ae:17:5c:ec:99:
dd:4f:6a:02:b2:f2:6a:c8:64:1a:c7:3b:56:20:07:ff:13:51:
c9:5c:b6:33:b9:c7:fe:b8:87:bf:8d:78:0e:a7:e1:56:de:d5:
cd:93:9f:df:f5:8e:d0:cd:d7:83:e9:3a:f5:fe:14:78:e2:92:
81:37:16:37:c0:03:c7:cb:36:df:1d:77:db:89:70:36:82:92:
80:ee:51:47:b9:a2:a6:2d:a8:0a:3c:df:12:8f:eb:9e:91:9e:
1a:1e:ea:20:66:46:64:9c:9f:4c:12:76:fb:59:83:18:e3:fd:
1e:57:18:5d:97:45:9a:fd:02:a3:ef:89:cd:ea:16:2d:6a:13:
4c:9e:b5:45:b5:0b:5b:e5:86:be:2c:62:21:85:b6:84:81:f8:
86:16:56:b7:81:db:4e:5a:68:fd:5c:63:43:30:75:a8:7b:48:
e2:a6:9b:3e:b5:49:a1:78:b5:bd:16:92:f9:5e:66:7a:b7:40:
68:fd:11:81:1a:6c:83:2f:d7:13:66:e5:f0:61:16:e2:a9:ba:
f4:f3:39:8f:bc:40:d0:82:d6:d0:8d:9b:20:82:fd:8f:35:f6:
96:d4:38:ee:90:ef:af:2b:80:e8:7a:e9:fa:11:8a:42:50:0c:
1c:66:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:47 2023 by rpki-client on console-ams.rpki-client.org