Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/S83dNY_QVCQwJZUbQ2vpHuhcLlw.roa
File: S83dNY_QVCQwJZUbQ2vpHuhcLlw.roa (raw, json)
Hash identifier: IRs4HdyuIBD2qf3DYTUJMG9YMys0k9oB6xsZ3SsjU8c=
Subject key identifier: 4B:CD:DD:35:8F:D0:54:24:30:25:95:1B:43:6B:E9:1E:E8:5C:2E:5C
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 0181EDBE26B2E1E769D331A4FD23D9871492
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/S83dNY_QVCQwJZUbQ2vpHuhcLlw.roa
Signing time: Mon 11 Jul 2022 14:51:10 +0000
ROA not before: Mon 11 Jul 2022 14:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8405
IP address blocks: 193.36.3.0/24 maxlen: 24
193.36.42.0/24 maxlen: 24
193.35.216.0/24 maxlen: 24
193.36.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:be:26:b2:e1:e7:69:d3:31:a4:fd:23:d9:87:14:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Jul 11 14:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bcddd358fd054243025951b436be91ee85c2e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:ea:21:ba:0b:c4:e7:d1:42:e3:c8:e3:e8:
91:03:5e:35:31:5c:1c:81:9b:ec:00:a3:15:40:e4:
c1:75:4a:41:e6:0b:79:9f:fb:4d:02:55:d3:9b:b4:
b8:c1:5c:15:54:07:7a:26:63:31:5c:41:c4:26:f2:
1c:07:03:1b:89:4a:a3:1f:e0:b6:d9:a5:77:f0:d9:
b9:77:6a:af:de:e6:18:9d:11:21:19:d0:e8:6e:d6:
7f:0c:01:21:91:b9:bc:21:d8:ac:7c:7f:5d:bb:c9:
6c:fe:99:0d:26:a3:1e:6a:d8:58:84:18:45:dc:26:
cc:a5:48:59:6b:dd:1f:e8:24:82:53:70:b7:06:69:
3e:e7:6f:24:45:cf:4a:64:fa:4a:d3:06:15:3c:29:
a7:60:5e:02:f6:eb:98:df:af:d5:c1:de:ce:81:35:
a1:71:e8:42:c7:f7:d1:11:4f:2b:14:b8:b0:95:d5:
5d:42:d3:a4:db:25:fa:cb:39:76:c2:c7:0e:72:3d:
b4:9e:fc:75:44:aa:aa:b3:dc:3e:59:8f:b5:f8:1f:
2d:77:d4:68:a1:f5:19:61:f2:b4:55:d6:db:da:5d:
70:55:0e:e2:c2:8e:03:b6:76:b2:b2:04:93:0d:2e:
16:0a:2a:8b:a4:f5:03:19:41:7d:60:99:f0:4d:0a:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:DD:35:8F:D0:54:24:30:25:95:1B:43:6B:E9:1E:E8:5C:2E:5C
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/S83dNY_QVCQwJZUbQ2vpHuhcLlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.216.0/24
193.36.3.0/24
193.36.42.0/24
193.36.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ae:ef:aa:ce:98:36:de:67:d0:ec:69:d5:78:e7:6b:45:d6:
a2:be:07:c7:e6:f9:3f:99:f5:86:6b:8a:cf:87:c9:d5:85:c2:
32:73:62:87:d9:d1:cf:8c:ef:b2:da:a0:30:ad:3b:ce:87:07:
75:91:43:15:dc:16:f5:f1:63:d3:05:fc:71:7e:20:cd:41:8d:
c0:8a:b1:d4:1a:0c:08:50:53:b4:b8:5b:47:43:3c:f0:bc:a2:
3e:9d:e3:05:be:70:31:fd:1a:83:0f:e5:8f:af:17:e9:df:3d:
77:b6:33:c4:fb:b7:03:74:cb:3c:95:28:37:68:df:3f:5b:41:
a1:62:dd:12:43:42:9c:df:ea:40:91:fb:60:1f:8b:44:a1:79:
16:63:4b:d1:d2:14:62:a8:f1:a8:ee:98:a9:96:7f:3e:c8:5f:
f3:98:da:ba:07:70:88:11:c6:cf:fb:17:54:b2:1d:cd:56:a3:
fc:66:d7:1d:94:a7:62:d0:71:df:d0:0e:92:93:50:81:4c:07:
f9:28:35:31:4c:c3:ec:b3:7c:57:71:8f:85:df:5e:0b:10:69:
5d:c0:82:49:5a:a1:4e:f6:21:18:15:17:27:3e:3b:35:2b:0c:
13:dd:9e:d2:d7:2c:de:63:68:60:93:ea:df:ef:46:91:a9:63:
06:e5:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:59 2024 by rpki-client on console-ams.rpki-client.org