Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/b6mdEqgFJSbxNguM5NeylE-JlVw.roa
File: b6mdEqgFJSbxNguM5NeylE-JlVw.roa (raw, json)
Hash identifier: TU6ZB03GrrRNJKSC4gjvDWmfk1fhPk0CJcQBkLNKpzc=
Subject key identifier: 6F:A9:9D:12:A8:05:25:26:F1:36:0B:8C:E4:D7:B2:94:4F:89:95:5C
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 03199660
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/b6mdEqgFJSbxNguM5NeylE-JlVw.roa
Signing time: Sat 01 Jan 2022 02:52:18 +0000
ROA not before: Sat 01 Jan 2022 02:52:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12941
IP address blocks: 193.141.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52008544 (0x3199660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Jan 1 02:52:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fa99d12a8052526f1360b8ce4d7b2944f89955c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:1b:6d:0d:42:2b:2f:e8:1b:e6:c3:66:1d:
8c:08:54:90:03:02:19:83:f5:dc:3e:d2:f3:06:05:
54:82:9c:82:5b:38:33:94:cf:c3:7c:ed:58:a0:76:
32:7b:dc:55:cc:48:d6:a7:0e:b0:a0:6c:1a:fc:6d:
51:ee:4f:ac:3f:e3:5d:68:16:ba:26:a7:29:5b:b8:
6c:79:a8:af:09:af:a8:f2:51:7a:d8:20:e7:4e:44:
79:7e:d7:c3:15:ca:ce:cd:cf:3e:27:3c:d0:58:25:
ee:df:d5:02:49:82:c3:a3:43:88:4d:e7:93:4b:04:
46:47:8c:ac:da:7d:80:bf:b0:39:77:14:d7:40:d7:
08:56:3c:a1:c2:3f:36:bb:89:80:60:69:87:93:83:
ba:90:1e:24:cc:f5:38:30:b5:d7:fb:a3:2e:cf:13:
ee:b2:62:77:b6:8e:26:4c:ef:da:67:25:c1:2a:47:
b8:47:16:93:bc:88:2b:7e:e6:05:55:57:b1:8f:a6:
42:6d:3b:9f:15:5a:46:c7:74:f8:f7:4b:ac:7c:52:
1c:24:0b:10:e8:53:38:a7:68:dc:3c:75:ae:85:9f:
90:c2:ac:1f:a2:c4:be:a5:5e:7e:5e:40:d5:42:a4:
af:f9:bd:5b:0e:70:2a:38:56:e1:0b:19:4b:fb:a5:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A9:9D:12:A8:05:25:26:F1:36:0B:8C:E4:D7:B2:94:4F:89:95:5C
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/b6mdEqgFJSbxNguM5NeylE-JlVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.107.0/24
Signature Algorithm: sha256WithRSAEncryption
69:49:6e:4f:c3:e5:af:c6:57:dc:72:61:38:4a:75:94:75:41:
0b:de:7b:e9:0c:37:5f:e7:63:3a:41:62:f8:66:b0:47:ca:fe:
8c:52:df:88:b6:9b:7b:02:80:6a:e1:be:89:22:15:2d:3b:a6:
51:6a:d8:3e:f1:30:00:78:04:f4:4c:eb:dc:14:dc:18:d7:74:
83:ed:dd:c7:a5:c1:7c:b2:b4:1e:e8:f8:2d:77:31:86:10:e8:
cb:09:ba:46:7f:e1:02:cc:b6:fb:df:5a:0a:53:95:8a:dc:98:
95:53:46:ca:ce:bc:c7:e4:ce:38:85:cb:4c:68:ac:0a:c8:14:
91:2f:a4:8a:1a:40:70:d7:74:fc:57:8f:84:7d:00:e4:2d:3e:
07:89:f5:23:8c:15:74:c8:fa:1e:e0:5c:12:17:8e:c3:df:5b:
60:fb:80:06:6f:bb:b5:7c:26:98:80:7c:bf:8e:ad:61:79:cf:
ca:f3:d3:f8:5e:55:9e:0f:6a:a0:f8:96:b4:a3:9d:45:91:4b:
84:bb:43:78:22:a6:2c:d6:f6:6e:b6:eb:66:e2:f1:88:59:aa:
ec:57:f5:94:a8:aa:f3:21:f5:79:9d:09:cd:44:4b:a2:12:e3:
00:35:d6:5d:b6:2e:8d:92:af:0a:a6:61:6b:71:e9:7c:2a:3a:
2b:34:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org