Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/i_bmGslCKmkqe7t58JEXKy8xWcY.roa
File: i_bmGslCKmkqe7t58JEXKy8xWcY.roa (raw, json)
Hash identifier: VgKLqjZxfI95nq0YLHTc7Y2rdPxfJPs9RAW39S08Tj4=
Subject key identifier: 8B:F6:E6:1A:C9:42:2A:69:2A:7B:BB:79:F0:91:17:2B:2F:31:59:C6
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 0603BA73
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/i_bmGslCKmkqe7t58JEXKy8xWcY.roa
Signing time: Sat 01 Jan 2022 16:05:26 +0000
ROA not before: Sat 01 Jan 2022 16:05:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60193
IP address blocks: 194.32.70.0/24 maxlen: 24
194.32.68.0/24 maxlen: 24
194.32.83.0/24 maxlen: 24
194.31.255.0/24 maxlen: 24
2a10:7f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100907635 (0x603ba73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Jan 1 16:05:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bf6e61ac9422a692a7bbb79f091172b2f3159c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:cc:db:a5:1b:b3:91:e0:f5:69:90:0b:87:
c9:1a:3a:e9:d0:be:42:30:dc:ca:4a:b6:02:cd:e0:
dd:f5:9c:df:cf:c4:18:9f:44:2a:4c:9c:83:8a:e9:
42:7a:fb:80:fc:ea:fa:a5:3f:ff:3e:fb:76:23:5d:
0d:39:54:26:74:ef:b5:d1:40:40:23:15:97:91:90:
d7:09:6b:a1:ba:c5:34:41:fe:8f:be:1f:4a:8e:87:
2d:63:af:d1:22:f7:86:93:5b:d9:2a:ab:23:f6:33:
b5:bf:07:87:70:2d:b0:71:1a:86:7d:08:d9:5f:f9:
70:8b:72:fc:63:8d:20:d1:c5:92:0b:8e:8d:96:80:
0c:16:f2:ce:93:30:0e:3e:f5:64:15:e2:83:58:12:
c9:70:f9:a9:ce:69:7a:a9:2b:f8:78:6e:70:2a:7b:
7b:31:ea:b8:8d:65:6c:0b:21:89:4b:ce:58:66:e0:
9f:8c:b6:08:38:2d:ad:62:22:13:60:ae:52:c2:11:
16:04:3d:70:76:2e:41:f7:11:54:8d:43:6d:a2:33:
4e:87:c2:b3:93:f2:99:4f:23:8c:42:f6:21:91:21:
de:69:f6:02:b3:1b:84:f0:80:3e:3a:1f:63:8b:83:
69:16:e8:62:c5:c8:00:88:64:3e:d0:e4:cf:73:a6:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F6:E6:1A:C9:42:2A:69:2A:7B:BB:79:F0:91:17:2B:2F:31:59:C6
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/i_bmGslCKmkqe7t58JEXKy8xWcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.255.0/24
194.32.68.0/24
194.32.70.0/24
194.32.83.0/24
IPv6:
2a10:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
5e:1d:b1:2a:15:cd:a6:81:62:48:25:c1:24:7e:fb:4d:9f:11:
ec:d0:19:55:8f:3a:66:cd:de:fc:a0:03:8d:b0:d8:bf:b5:0a:
a2:f0:13:88:e9:e5:b4:3c:ad:9a:73:7c:c9:3c:9b:86:ab:8e:
a6:7f:95:ea:a8:b0:94:61:c7:43:ab:fc:03:d2:f7:99:e0:bb:
09:a9:66:88:ab:d1:56:a6:b1:13:f4:3b:e5:9e:73:1e:e4:d9:
7c:db:0a:c4:a5:b2:48:07:be:21:3a:a4:9e:f4:81:25:47:99:
02:01:b8:60:be:38:36:cb:80:73:10:88:62:89:e8:47:3f:37:
79:4e:cc:40:fa:95:eb:22:74:0a:b1:e6:9b:63:55:b0:57:ce:
61:9a:27:61:3f:c7:95:8f:5e:86:f0:9c:05:9a:a6:d3:b5:52:
c5:78:fe:d3:f6:2a:84:ff:4e:46:0b:32:78:1c:8b:77:e8:6b:
d7:79:f8:6a:35:08:5f:20:d6:e0:2f:2d:dd:4c:8b:ba:64:33:
f0:ec:87:f3:fa:53:3b:86:65:d7:ea:d1:91:0e:fb:dc:ed:c4:
6e:2e:dc:e2:69:1e:8e:de:06:de:aa:ba:4d:bc:bd:2f:93:bd:
0f:2e:4d:b2:2f:0c:20:1d:6a:d8:ed:93:24:c9:11:92:b2:97:
2a:06:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:39 2024 by rpki-client on console-fra.rpki-client.org