Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/IxEk1kzV4c5bKVEHldlhI9_SBdA.roa
File: IxEk1kzV4c5bKVEHldlhI9_SBdA.roa (raw, json)
Hash identifier: XWQx1wmSYP7tITdBmfihW/GtBGcfQdJgBInoKbfvp/U=
Subject key identifier: 23:11:24:D6:4C:D5:E1:CE:5B:29:51:07:95:D9:61:23:DF:D2:05:D0
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 111C2F5D
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/IxEk1kzV4c5bKVEHldlhI9_SBdA.roa
Signing time: Sat 01 Jan 2022 16:05:41 +0000
ROA not before: Sat 01 Jan 2022 16:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41296
IP address blocks: 193.32.57.0/24 maxlen: 24
194.24.168.0/23 maxlen: 24
5.159.252.0/24 maxlen: 24
5.159.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287059805 (0x111c2f5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Jan 1 16:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=231124d64cd5e1ce5b29510795d96123dfd205d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:8a:ac:ad:75:87:6c:f1:a0:88:b0:ce:16:
36:95:01:e7:6b:ef:1a:79:16:b6:80:8a:d4:76:c2:
15:35:b4:5e:e1:dc:05:0a:a5:39:aa:99:7f:0f:35:
7f:a0:97:db:92:0b:a0:b6:83:39:90:67:2e:31:5d:
7a:93:71:3b:86:20:68:87:c6:e6:b4:11:e5:79:54:
fe:b6:83:2a:02:17:b4:f1:74:9c:09:52:e4:92:d2:
97:44:96:cc:8f:0f:71:4a:c4:1d:e5:b5:28:05:80:
6a:ac:dc:b5:5e:52:77:de:62:b0:ae:d6:e7:6f:d1:
ca:c7:4c:8f:a9:0c:e8:f7:c7:41:1f:de:2a:10:b4:
69:f3:bc:08:32:e2:a5:60:33:72:95:a0:3e:39:a5:
15:d6:8f:48:27:ae:b7:fd:7d:77:bf:ee:11:34:8d:
ea:00:62:2d:d5:85:96:3e:9d:53:17:74:ec:bb:ac:
92:43:35:5a:c4:45:a8:13:56:b4:e4:b1:12:11:bc:
6d:75:e2:43:47:94:5c:8d:e3:7f:69:2f:63:9e:a0:
a4:98:72:bf:86:34:f3:4e:3d:e0:ab:37:b3:28:c9:
0b:06:f2:d5:9b:ba:6d:e1:bf:3c:7e:3a:33:d4:50:
e3:c1:00:58:ee:7b:6b:15:23:0e:63:16:ca:12:20:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:24:D6:4C:D5:E1:CE:5B:29:51:07:95:D9:61:23:DF:D2:05:D0
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/IxEk1kzV4c5bKVEHldlhI9_SBdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.248.0/21
193.32.57.0/24
194.24.168.0/23
Signature Algorithm: sha256WithRSAEncryption
91:d5:fa:e2:d5:51:6a:cd:7d:dc:3e:41:a4:8c:42:34:8c:5a:
2c:dc:96:95:5c:cf:57:64:d2:dd:e0:92:e0:74:15:ec:94:b1:
9f:d9:62:ec:90:88:d5:38:36:a4:b5:2c:cd:68:b7:2b:b9:47:
fc:b0:0d:b2:f1:4e:e7:cf:9b:6a:31:84:ab:1e:72:3f:61:8d:
f3:92:0a:3b:ca:0f:15:f5:f2:ed:14:8c:1a:c7:7b:17:de:d1:
07:6d:93:0d:0c:5d:3c:14:b7:85:bc:8a:a4:ec:19:d0:74:28:
45:fc:ea:3e:bb:6a:4b:60:46:0d:b8:4d:d1:20:a1:af:6c:8f:
68:18:1d:4f:9c:3a:6b:70:86:95:9b:2a:77:1e:a9:62:87:28:
07:be:11:94:09:7f:64:aa:19:03:18:1c:4a:05:67:a1:70:a9:
db:2b:81:27:ff:24:0a:c5:d8:db:bb:87:59:79:51:0c:d6:ed:
52:6e:ee:0a:73:67:ad:63:b4:f8:a2:1b:77:64:6b:c0:77:2d:
f0:15:aa:0d:90:c4:59:81:89:c4:aa:9c:ba:74:ed:b0:fa:01:
e7:0d:4b:54:bb:c9:d8:35:6c:0f:f2:4a:25:9e:74:1f:43:65:
cd:dc:ee:df:f5:61:b9:01:ae:55:00:2b:11:99:a9:66:ed:cb:
a3:87:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org