Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/kvMI48sfn6svWLu4PGE2BJj84UY.roa
File: kvMI48sfn6svWLu4PGE2BJj84UY.roa (raw, json)
Hash identifier: bodPCrn2NHDruBhyOyHg/VcrooVIVG8SIUuiyfQTJrU=
Subject key identifier: 92:F3:08:E3:CB:1F:9F:AB:2F:58:BB:B8:3C:61:36:04:98:FC:E1:46
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 012D3B
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/kvMI48sfn6svWLu4PGE2BJj84UY.roa
Signing time: Tue 26 Apr 2022 15:25:19 +0000
ROA not before: Tue 26 Apr 2022 15:25:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206225
IP address blocks: 193.247.48.0/21 maxlen: 24
193.247.56.0/23 maxlen: 23
193.247.62.0/23 maxlen: 23
193.247.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77115 (0x12d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Apr 26 15:25:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92f308e3cb1f9fab2f58bbb83c61360498fce146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:86:03:e9:d5:ee:fe:e4:30:ef:65:cd:fd:
b0:52:52:fe:69:05:f0:c0:f6:f8:c4:43:44:2d:17:
48:79:41:21:1e:2f:29:0b:5a:f4:f2:8c:70:d6:94:
6c:90:f3:2c:2e:2f:ec:aa:97:ef:73:35:dd:ba:a3:
f4:f4:76:43:76:c5:36:bd:44:2a:dd:b2:87:11:93:
e2:c5:c4:d9:ba:90:5e:bb:af:bd:2d:4c:68:67:f8:
29:fc:71:6f:bc:90:8f:52:a7:c1:f8:12:ea:ec:cd:
c2:45:d8:21:2b:90:43:f9:7a:5c:06:3d:43:04:62:
b2:52:c8:d0:81:e8:b7:6a:09:b4:d5:70:6e:41:39:
21:eb:28:15:5f:ec:8f:9b:0c:3f:60:8e:8a:48:2c:
19:a5:71:db:1b:f7:06:d7:c3:50:ce:6f:30:fe:63:
f4:48:16:e0:02:22:13:ce:9d:f6:98:b4:6b:a8:23:
9e:5c:2e:16:21:9a:11:b2:fc:db:ba:f6:49:1a:e1:
ff:6c:a3:44:33:0e:0f:1d:7a:7f:17:d5:0f:c2:8f:
1a:af:a1:44:a7:1a:54:f0:bf:f6:0d:88:70:9d:c8:
58:6f:08:55:a6:27:61:3b:91:01:ac:73:df:01:13:
b9:3e:68:fd:de:15:3d:63:4f:d1:90:f7:cf:e8:f6:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:08:E3:CB:1F:9F:AB:2F:58:BB:B8:3C:61:36:04:98:FC:E1:46
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/kvMI48sfn6svWLu4PGE2BJj84UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.48.0-193.247.57.255
193.247.59.0/24
193.247.62.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:47:8d:46:cc:dc:3e:2f:31:36:0e:4f:55:d2:0d:66:6c:db:
97:fe:ac:f9:80:e8:f4:e9:17:a1:30:61:1d:f8:a8:4c:77:a3:
48:66:8a:9a:86:69:bd:a3:68:17:8f:f8:25:1d:ac:e6:9f:52:
0b:d2:66:15:88:fe:1a:02:2f:b9:b0:2a:eb:4d:38:16:99:3d:
ee:35:f5:40:5d:28:4c:d1:e7:86:d4:fe:7a:02:9e:40:ac:41:
af:59:48:fa:0a:da:cf:ec:f4:03:11:23:7f:4c:8c:ca:83:c3:
43:44:a0:ea:c9:a5:d4:76:9b:e9:69:bf:f6:46:cf:49:76:b1:
b9:d8:c9:51:22:c0:52:e4:2d:ec:f6:f2:5a:99:fb:01:cb:14:
3d:3c:34:88:aa:8b:a6:aa:ab:77:8d:d5:41:cb:ba:19:fd:4a:
9f:64:75:3a:f8:19:82:ff:63:7f:89:26:03:96:e4:28:7e:ea:
67:f2:29:f7:60:e2:fb:00:3a:9b:6f:49:e4:bb:d0:c5:17:ca:
4c:13:ff:fb:44:68:7c:bb:15:40:ba:15:14:8e:ea:2f:21:15:
15:70:0f:7a:8a:bb:42:04:33:1f:70:d0:f1:17:13:82:38:fe:
32:80:e8:88:56:1b:a2:d8:cb:f8:7a:77:5a:e9:aa:da:4a:04:
1d:19:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:10 2024 by rpki-client on console-ams.rpki-client.org