Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/_ugO2eQrjeG21JA6FllslouCQe4.roa
File: _ugO2eQrjeG21JA6FllslouCQe4.roa (raw, json)
Hash identifier: gQUiWKwjSVDmeu7DaDqpLIsOOEFmKEpgItHZ89J63X0=
Subject key identifier: FE:E8:0E:D9:E4:2B:8D:E1:B6:D4:90:3A:16:59:6C:96:8B:82:41:EE
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 33293FAB
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/_ugO2eQrjeG21JA6FllslouCQe4.roa
Signing time: Sat 01 Jan 2022 10:59:11 +0000
ROA not before: Sat 01 Jan 2022 10:59:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200964
IP address blocks: 193.226.197.0/24 maxlen: 24
193.226.235.0/24 maxlen: 24
195.184.5.0/24 maxlen: 24
195.184.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858341291 (0x33293fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fee80ed9e42b8de1b6d4903a16596c968b8241ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:83:78:25:3c:d4:0d:83:3d:ff:11:87:56:
59:f6:51:0f:8a:fc:bd:fb:7f:ee:84:34:96:ca:49:
56:47:66:a9:e0:64:48:83:80:60:80:a2:11:00:14:
e3:ad:4f:a0:26:a0:c0:c7:5a:0c:f0:0f:63:25:0c:
71:02:06:49:68:01:e4:80:46:68:79:4a:6f:d8:02:
3e:33:5b:68:22:4f:39:88:d2:46:b1:be:35:92:36:
41:9f:90:b1:e1:13:b5:4b:e7:23:e6:37:3b:4f:a8:
23:e0:eb:c1:e6:f0:c3:91:ba:90:e1:57:9c:d8:8e:
f9:41:d0:d1:91:3a:24:c9:a2:09:68:9b:a0:a4:6f:
11:30:cf:00:18:17:96:e5:1a:7c:58:2e:01:d6:5e:
b1:3a:b4:ff:b4:cc:c1:0d:c6:65:7b:ca:b0:6e:98:
39:3c:13:9b:45:d6:c6:39:36:c5:93:a0:a5:cb:f1:
6b:7f:54:77:1c:3d:30:f9:ca:22:2e:1e:28:07:21:
d9:ab:c5:fb:53:03:4f:3f:e9:06:ab:1f:4a:15:b0:
ef:f4:4c:a9:5b:3b:6f:29:d8:75:68:2b:47:90:b3:
00:d3:62:63:89:ca:41:4a:a5:7c:7d:73:16:8e:62:
4e:d6:04:b6:5f:52:58:b3:0d:7e:fc:cd:0e:40:84:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E8:0E:D9:E4:2B:8D:E1:B6:D4:90:3A:16:59:6C:96:8B:82:41:EE
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/_ugO2eQrjeG21JA6FllslouCQe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.197.0/24
193.226.235.0/24
195.184.5.0/24
195.184.8.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9a:1b:5d:9c:74:c3:8b:83:a9:a5:42:e6:44:96:0b:5c:3e:
93:0b:10:2e:59:4d:1c:79:a6:4b:15:b9:f5:da:15:da:f0:a3:
1b:af:bf:dd:09:ce:ce:45:0c:52:17:64:5a:82:13:67:ed:6e:
6b:1d:6e:9c:f6:b5:21:ab:4d:25:75:d2:f4:4e:fc:76:16:17:
3a:bc:a0:ca:c3:fb:1e:ce:35:3e:eb:2b:86:aa:6d:28:c3:88:
0a:a0:36:b7:4e:db:45:91:f6:e1:c4:64:3a:75:92:f9:c9:1c:
c7:3f:4b:d5:10:50:5c:59:1a:99:79:ed:fa:f4:1d:d7:ca:24:
54:3d:9f:0b:ac:59:08:1a:85:05:f7:2e:5a:33:6f:56:98:e2:
51:b1:93:3e:3d:c5:78:49:3b:fe:f6:29:22:3a:3e:5e:d1:f7:
49:ba:45:eb:ca:f3:53:46:2a:ae:6b:b8:0b:63:85:54:9b:d1:
e9:66:0c:86:d6:df:11:10:dd:05:55:d1:0d:5b:e2:20:69:c2:
04:09:c0:fd:27:99:47:ee:86:bd:41:23:f4:a9:39:43:6f:0b:
ee:8c:a6:5b:18:fa:0a:d6:1d:a4:5d:3b:c7:41:02:47:e3:ef:
42:61:44:c5:db:72:41:60:c0:ce:92:1b:c0:ea:fa:38:f9:24:
71:c3:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org