Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/o0Wq00s13-0HAaOB7Y1XPFGQHd4.roa
File: o0Wq00s13-0HAaOB7Y1XPFGQHd4.roa (raw, json)
Hash identifier: wy3Qk6iLZFdPvw7JgjppZcXRlbcxhz9UC/XAIQTEmJw=
Subject key identifier: A3:45:AA:D3:4B:35:DF:ED:07:01:A3:81:ED:8D:57:3C:51:90:1D:DE
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 067C5B6A
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/o0Wq00s13-0HAaOB7Y1XPFGQHd4.roa
Signing time: Sat 01 Jan 2022 07:00:53 +0000
ROA not before: Sat 01 Jan 2022 07:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 188.209.128.0/22 maxlen: 24
188.209.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108813162 (0x67c5b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 07:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a345aad34b35dfed0701a381ed8d573c51901dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:45:1c:e5:4f:8c:8f:89:0f:04:03:a9:4e:
dc:76:56:25:51:91:8e:e5:08:8f:cf:34:a9:6f:b4:
5b:5c:d0:fe:be:76:be:3d:d6:6c:0e:02:ce:84:c6:
ea:38:91:f6:d6:a1:4b:51:50:67:be:e3:0b:e1:88:
07:b4:c9:c5:bd:25:79:6f:f5:0f:00:a1:1c:b4:c0:
68:32:86:73:a4:ca:dc:44:ec:8f:53:ca:58:9f:bf:
24:e5:25:09:38:b6:2d:b7:9b:cd:65:e1:f8:02:ae:
ac:cf:0b:c8:25:c4:71:9f:ca:fb:59:03:0c:25:c6:
20:dc:90:f2:bd:14:bc:40:00:be:98:da:2b:aa:5a:
f9:bb:83:f4:32:71:8b:f0:71:04:37:b6:f6:98:51:
cb:6b:7f:e1:bb:f8:ee:8f:0f:b6:99:d5:a8:0a:cd:
9b:dc:3e:48:c7:4d:c0:3a:c2:c2:2d:ad:48:5c:63:
cd:00:04:05:b9:20:b6:8d:70:4d:64:40:80:ea:20:
89:44:30:78:c9:38:01:11:73:00:70:40:f7:78:bd:
d3:a2:fc:8c:8e:80:33:b0:d6:bc:c1:25:3f:14:40:
f6:6f:dd:b1:09:ac:b4:97:7e:9f:fa:06:86:f5:35:
13:e2:11:60:0f:bd:d5:d7:50:22:a9:f8:4f:4a:93:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:45:AA:D3:4B:35:DF:ED:07:01:A3:81:ED:8D:57:3C:51:90:1D:DE
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/o0Wq00s13-0HAaOB7Y1XPFGQHd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/22
188.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
43:37:c7:b8:27:46:be:44:95:9f:88:87:78:4f:5f:66:24:b1:
23:88:32:1d:57:b2:70:29:fb:10:4c:66:e4:d2:62:d1:67:14:
b1:48:8e:3f:1e:21:db:81:64:2b:9c:50:68:20:50:bb:40:3f:
bd:23:63:d1:b1:f2:eb:e0:a9:13:38:99:e2:97:d4:a8:e5:89:
0c:00:44:da:fa:c7:30:4f:d6:cd:a6:bf:4d:a9:91:2a:ca:5e:
da:56:4c:11:f3:f6:90:67:c8:e3:9d:af:02:db:54:c6:0a:31:
67:e3:f0:d3:23:d6:1e:11:15:ea:88:60:72:d8:04:23:fe:fc:
d5:c2:18:d6:92:e0:ae:59:5f:1c:3f:40:87:e2:64:fc:99:9b:
a1:be:ae:e3:dc:b2:c1:63:12:b5:1c:19:5f:e1:d6:95:a3:10:
1e:ac:67:02:c2:e1:2a:1d:db:52:39:5c:2a:51:32:57:94:84:
03:84:24:4a:d8:83:50:f0:90:3d:53:13:67:69:df:46:ea:a9:
d5:f2:1c:37:90:53:d6:29:40:1e:74:9d:22:cb:fb:bd:e7:7a:
26:e5:97:76:d8:8d:86:2d:1d:bd:71:09:fc:f8:ce:65:ce:96:
b5:f9:5f:4c:fa:ed:4d:04:78:37:05:05:f7:8f:44:0c:e0:25:
13:6b:ce:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org