Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/71S2hgLmfJzJ86ddXhc9MI-MDbs.roa
File: 71S2hgLmfJzJ86ddXhc9MI-MDbs.roa (raw, json)
Hash identifier: kubFGWImtgVdc/yp79OTvr+WGya/EtQP07wnHH7n6z4=
Subject key identifier: EF:54:B6:86:02:E6:7C:9C:C9:F3:A7:5D:5E:17:3D:30:8F:8C:0D:BB
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 111C4687
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/71S2hgLmfJzJ86ddXhc9MI-MDbs.roa
Signing time: Sat 01 Jan 2022 12:54:26 +0000
ROA not before: Sat 01 Jan 2022 12:54:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 194.146.135.0/24 maxlen: 24
194.146.133.0/24 maxlen: 24
93.157.24.0/22 maxlen: 22
93.157.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287065735 (0x111c4687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Jan 1 12:54:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef54b68602e67c9cc9f3a75d5e173d308f8c0dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:59:b2:fb:f7:11:2e:df:db:20:87:28:8d:
10:67:fd:25:d0:43:06:d3:ab:e1:77:78:d2:8a:89:
d4:99:5b:10:df:fc:23:af:a8:48:58:bf:34:4f:ca:
24:12:b9:f5:00:56:88:4b:8a:a7:62:07:7a:32:b8:
36:b7:cd:72:5a:2d:17:fb:ff:e9:5c:a6:6c:a8:66:
a9:b6:e9:ec:ef:ee:70:ac:3a:af:06:8a:7b:5e:70:
60:1a:0b:0a:6b:d7:c2:56:06:b2:95:de:76:ee:e1:
ef:8c:63:29:bd:2b:b7:ca:3f:cd:df:9b:6d:bb:0a:
18:2c:83:60:64:e6:b9:02:e6:81:2b:d1:14:b7:67:
88:2b:d2:a6:58:35:12:f6:dd:a4:13:06:b4:c1:6a:
8c:8c:38:69:d1:dc:2c:13:34:ca:4b:fe:ff:0e:bb:
5a:c4:80:72:6f:c8:7e:1f:be:f6:95:da:bc:e5:d0:
f8:eb:56:d8:e9:dd:91:17:25:72:a9:94:e1:43:62:
0a:27:b3:0b:df:98:53:a0:60:5b:bf:31:2f:fd:c0:
51:45:c5:58:61:1a:dd:09:0f:76:7b:11:dd:fd:46:
0b:49:ed:db:01:f4:2a:36:4c:87:75:b7:8e:95:a0:
c5:fd:af:e3:8a:f6:f5:f6:f2:46:dd:c8:f0:53:1f:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:B6:86:02:E6:7C:9C:C9:F3:A7:5D:5E:17:3D:30:8F:8C:0D:BB
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/71S2hgLmfJzJ86ddXhc9MI-MDbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.24.0/21
194.146.133.0/24
194.146.135.0/24
Signature Algorithm: sha256WithRSAEncryption
99:92:da:51:52:43:b7:a8:61:28:fe:73:1f:d1:9f:3c:cd:1f:
c4:23:75:6a:15:ae:15:c9:85:44:92:fa:b8:94:08:0f:32:24:
b2:5b:9b:71:29:c5:7b:23:c2:d1:a5:c6:30:ad:6a:f2:81:3f:
7e:88:b1:cb:c6:9a:cc:11:ae:5b:82:06:d8:cb:1a:57:2a:95:
29:0d:31:0f:33:79:1a:28:fc:3c:4e:ac:55:77:7a:85:8d:32:
02:84:32:e8:a0:8a:80:97:c0:2a:2c:63:6a:d0:92:ce:35:62:
f1:f9:fb:d3:dd:e5:2f:4e:d3:c1:1f:88:57:8f:30:d7:ce:01:
9b:28:03:f8:24:09:bc:08:db:74:0b:53:e4:e1:ab:62:a9:b5:
af:17:6c:de:dd:aa:44:be:23:bb:18:ef:b8:10:c5:78:39:25:
18:c7:ee:96:96:24:f3:5c:5e:48:73:01:28:48:cb:61:79:03:
34:ea:4b:50:80:72:d7:a6:be:cf:bd:2d:80:ac:34:b4:49:97:
85:3e:2d:d1:35:ca:d7:b3:4e:cc:6b:a1:58:91:0b:25:d9:e1:
d7:0b:f2:68:59:46:35:6f:43:9e:95:39:2e:aa:ee:91:bd:df:
f4:2c:ca:bd:32:7f:1c:25:07:2e:85:bb:69:ce:87:00:a2:b7:
90:e8:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:29 2023 by rpki-client on console-fra.rpki-client.org