Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/wY433cLrMbKEKy_8dMgcBGJNGys.roa
File: wY433cLrMbKEKy_8dMgcBGJNGys.roa (raw, json)
Hash identifier: zX3kvfr6OsQ4SEFefGHtNmmvfIY36oqZam9MKsPbLjw=
Subject key identifier: C1:8E:37:DD:C2:EB:31:B2:84:2B:2F:FC:74:C8:1C:04:62:4D:1B:2B
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 018389848B6F8FC7E407F2D357E04A1470E0
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/wY433cLrMbKEKy_8dMgcBGJNGys.roa
Signing time: Thu 29 Sep 2022 13:51:48 +0000
ROA not before: Thu 29 Sep 2022 13:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212910
IP address blocks: 193.226.198.0/24 maxlen: 24
193.226.210.0/23 maxlen: 23
193.226.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:84:8b:6f:8f:c7:e4:07:f2:d3:57:e0:4a:14:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Sep 29 13:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c18e37ddc2eb31b2842b2ffc74c81c04624d1b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:e4:79:33:20:e8:be:8a:08:f7:19:27:6e:
3d:14:20:70:50:4c:66:a3:f1:96:cd:81:e8:fb:52:
f7:56:d0:bb:db:ea:17:5b:70:91:78:99:48:28:6b:
d7:9d:16:56:14:98:b6:5e:e7:9c:23:36:6a:f9:0d:
b1:6d:33:f3:34:29:75:0b:ac:20:26:8e:1e:39:ae:
a6:89:94:3c:58:b7:b1:42:77:9d:c4:92:fe:69:72:
5f:73:e7:78:73:e9:f0:0c:28:e2:a5:e5:19:5f:ac:
a4:0e:0a:cd:02:b2:4f:0b:eb:03:82:00:36:04:e4:
74:42:91:88:c8:d0:54:d6:2c:b8:78:49:a9:64:ba:
78:4c:60:31:4f:aa:8e:fb:fb:a9:06:13:32:59:ce:
94:dd:cb:98:5a:d9:c8:a7:38:f2:9f:87:67:0c:ae:
3f:32:b5:aa:07:45:14:f2:c7:a5:cf:df:31:1d:c4:
28:ce:b6:21:cf:3a:62:5b:90:63:39:56:1b:fa:e0:
c0:e6:73:28:53:42:a6:44:21:e1:7f:73:9d:6d:d3:
ef:72:0a:5d:5e:15:70:d1:3a:67:72:84:a5:dd:af:
2d:eb:2a:d3:d3:da:0b:f9:fe:13:7b:7b:b4:41:e3:
06:d8:a4:44:9a:1d:f7:31:be:ad:50:df:0d:bc:e0:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:37:DD:C2:EB:31:B2:84:2B:2F:FC:74:C8:1C:04:62:4D:1B:2B
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/wY433cLrMbKEKy_8dMgcBGJNGys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.198.0/24
193.226.210.0/23
193.226.216.0/24
Signature Algorithm: sha256WithRSAEncryption
40:93:1b:41:1c:6e:b2:41:16:db:e1:73:b5:b2:de:74:f5:b4:
35:4e:5d:d6:cc:49:42:7f:26:fb:4a:f3:12:ad:59:c7:5c:c1:
dd:0c:f6:e1:a5:57:c5:d7:ca:ca:5c:9d:1c:d1:d1:04:66:3a:
78:16:2a:49:71:90:73:75:4c:79:6b:31:58:0e:1a:01:97:8f:
bc:80:f5:65:50:7b:a7:f3:25:84:09:10:e9:9e:5e:11:de:14:
52:dd:d3:31:3a:f2:52:66:31:1d:a2:06:9a:40:8f:c1:83:f1:
d7:38:40:f8:59:99:92:e6:18:4d:a8:5e:e8:e1:24:3a:c1:f0:
49:c9:b0:21:53:d6:5a:67:d7:37:e6:50:9a:33:d0:8c:8c:69:
88:4b:2d:f4:eb:fa:8b:58:ee:de:33:d0:90:48:02:2b:0c:6e:
2e:b7:66:19:3d:57:61:21:a3:63:2c:2d:a4:64:8e:a0:24:5c:
fd:61:30:5c:c3:3f:20:55:d4:26:74:61:89:95:25:e1:5a:47:
af:33:4a:f4:2a:be:d1:07:fb:d6:87:78:59:e1:34:95:97:2a:
53:03:c4:12:6e:90:f2:f9:24:31:ae:19:e1:e2:81:74:92:3b:
0c:91:f7:88:94:6e:8d:d0:2d:a3:4b:ec:03:d9:50:d9:37:78:
d7:2e:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org