Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/51n9hnd7IbvoNoPhAyvkGbzkgU0.roa
File: 51n9hnd7IbvoNoPhAyvkGbzkgU0.roa (raw, json)
Hash identifier: 2DMOuGoE7pv3EtZ+EvFPD7Z6yhc6/3cYaBSb3E9OLjU=
Subject key identifier: E7:59:FD:86:77:7B:21:BB:E8:36:83:E1:03:2B:E4:19:BC:E4:81:4D
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 111D20EF
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/51n9hnd7IbvoNoPhAyvkGbzkgU0.roa
Signing time: Sat 01 Jan 2022 12:54:27 +0000
ROA not before: Sat 01 Jan 2022 12:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29576
IP address blocks: 194.146.132.0/22 maxlen: 22
194.146.133.0/24 maxlen: 24
194.146.135.0/24 maxlen: 24
93.157.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287121647 (0x111d20ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Jan 1 12:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e759fd86777b21bbe83683e1032be419bce4814d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:65:8c:21:a6:2b:6c:89:b8:63:d1:8b:af:
97:9c:81:52:96:d8:79:a8:2e:76:dc:c5:2c:21:d9:
91:fe:8b:e1:24:a8:6b:91:ba:77:31:5c:3e:dc:b9:
53:36:c4:16:66:b1:ed:cc:6c:58:5b:25:cb:43:f5:
0a:50:16:66:40:65:3e:6b:e0:cb:d3:97:a6:5d:88:
33:3c:b6:50:68:58:e9:9b:fd:85:94:c8:0b:56:e1:
38:d2:e3:39:37:35:82:40:aa:f5:fa:3c:b8:6f:4d:
5a:67:75:eb:7a:ac:99:85:4a:6b:86:79:ea:41:55:
f2:33:f7:83:84:f7:33:e9:91:0e:95:8d:cf:97:38:
21:ab:73:e4:99:0e:79:0d:1a:94:e6:56:d1:57:f1:
39:c4:d9:27:b5:5a:48:c5:dd:4b:cb:b2:41:dc:3b:
19:01:e4:6e:fb:9f:87:2b:76:88:6d:7f:45:9d:26:
7b:04:1f:85:e8:12:31:51:25:b8:02:c5:82:b4:e5:
ee:cc:9e:d6:3f:68:05:b1:0d:bd:90:e4:a6:2c:33:
f7:2c:b5:11:19:cc:54:af:7d:db:26:2a:52:55:ee:
97:86:e1:0d:98:fd:38:d2:21:3a:58:17:b2:a8:0b:
70:d6:7e:81:a4:65:42:56:f5:33:3a:8d:c3:c7:ac:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:59:FD:86:77:7B:21:BB:E8:36:83:E1:03:2B:E4:19:BC:E4:81:4D
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/51n9hnd7IbvoNoPhAyvkGbzkgU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.24.0/21
194.146.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:cf:86:4c:cf:03:3f:02:85:3d:9c:99:a4:ec:57:47:fd:3a:
b3:7c:c2:31:ec:0a:39:cd:24:64:a0:87:52:fe:e4:42:f7:91:
01:b1:c7:12:20:e4:53:4c:66:55:e1:23:c8:42:4b:c2:03:e2:
30:11:c2:42:1f:4a:7b:62:b0:89:0e:27:ef:9a:f8:24:6b:7b:
a4:94:2e:d4:c5:80:8b:40:1a:96:fa:68:62:a3:1d:64:a9:83:
db:7e:05:83:6f:9d:3f:be:b6:2f:e0:41:ad:6a:37:94:fe:d2:
95:26:6e:fc:3d:42:66:91:1f:3e:56:d3:67:91:15:c0:ad:e6:
88:b7:7b:78:34:23:cc:04:8b:a5:61:19:c7:7c:d0:d7:d1:89:
7a:a9:83:b9:08:c6:b9:30:f9:f2:d9:5c:fd:23:e2:d6:d8:b8:
b9:4b:58:ac:ee:c6:d2:c4:e3:fe:91:91:68:44:a5:33:2a:ca:
10:66:d0:e3:11:04:4c:2d:9f:7f:96:d8:f8:e2:36:a5:29:f0:
fa:b1:31:7d:f6:c6:bf:7f:e3:58:66:34:9b:94:d9:2e:ba:81:
d1:5d:08:da:5c:93:ad:dd:c8:dc:c7:1d:10:88:06:27:93:c7:
61:3e:da:fb:37:31:cb:cd:b1:eb:cd:28:01:fc:ad:bf:b1:6d:
39:2a:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:11 2023 by rpki-client on console-ams.rpki-client.org