Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XGSj1c3ofwT7yCDSJKT4YotSs1c.roa
File: XGSj1c3ofwT7yCDSJKT4YotSs1c.roa (raw, json)
Hash identifier: f//Tz8nlCMFC4wNGSHP4dqASIDcOti2WHMnjQdwAXQM=
Subject key identifier: 5C:64:A3:D5:CD:E8:7F:04:FB:C8:20:D2:24:A4:F8:62:8B:52:B3:57
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 05D8B2C2
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XGSj1c3ofwT7yCDSJKT4YotSs1c.roa
Signing time: Wed 11 May 2022 10:11:20 +0000
ROA not before: Wed 11 May 2022 10:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213220
IP address blocks: 194.113.233.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98087618 (0x5d8b2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: May 11 10:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c64a3d5cde87f04fbc820d224a4f8628b52b357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:d1:16:bb:6e:28:bb:d5:1f:72:aa:9d:7f:
7d:1a:e8:f8:71:af:84:5a:ff:71:11:e5:67:55:18:
04:fc:06:56:eb:b4:1c:eb:14:68:df:cb:76:69:f2:
a0:ac:14:56:c3:96:4e:90:f3:68:30:4c:2f:ef:69:
e4:6e:18:cb:c8:1e:6f:bc:7a:74:b9:77:1e:ee:81:
4a:70:82:4f:50:c8:40:65:4b:0b:50:cc:37:1f:85:
2a:cb:46:8e:08:ed:cc:ea:26:8e:17:8b:1b:3c:d4:
59:a4:26:a0:45:79:b9:5a:0e:40:72:15:75:39:59:
08:06:6e:2f:8e:50:50:96:ca:9b:b6:0d:3b:bb:cb:
3b:f3:35:3a:25:58:35:50:e1:82:db:cd:c7:72:69:
50:a7:b8:d2:2a:75:ff:4d:74:50:1f:14:16:bc:3c:
7a:1e:42:2a:0a:a4:be:d2:a2:8c:66:3f:57:f4:2c:
cb:6a:83:35:e4:28:23:ee:6c:cd:b8:1e:9e:95:cf:
9f:1a:79:82:aa:83:56:8b:5d:2a:fb:5e:c0:52:a3:
3d:0f:fc:b6:15:9f:16:6a:16:4c:76:18:92:88:be:
d2:d4:05:8f:40:d5:97:9f:3d:e9:da:6b:38:2d:61:
a8:e9:09:4d:c0:ec:5d:7b:a1:09:3d:15:6b:92:84:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:64:A3:D5:CD:E8:7F:04:FB:C8:20:D2:24:A4:F8:62:8B:52:B3:57
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XGSj1c3ofwT7yCDSJKT4YotSs1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.71.0/24
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4e:0f:77:f6:ea:dc:e8:79:fb:13:a9:f0:c4:48:9d:9a:72:
ca:bb:4d:b5:29:7b:aa:42:bd:a2:9a:1d:2d:e0:73:e3:70:3d:
32:7c:3e:b8:19:15:22:07:21:85:a2:63:3b:ea:c6:5f:d5:28:
4c:28:5c:08:b5:48:fb:a2:99:4c:a2:26:f2:86:de:dc:e3:c0:
53:8c:1e:c9:f4:9d:5f:b1:7d:1f:92:9f:c2:d5:c6:b0:86:ee:
b9:18:b1:39:f0:9f:64:c8:bd:8c:f6:24:06:20:05:b7:f4:68:
ac:71:5d:4d:03:bc:65:d7:6b:d8:da:c0:f3:c4:7c:9d:bd:74:
ca:1d:5b:ee:a5:e3:42:4b:e5:49:52:5a:69:79:73:59:8d:37:
ba:1e:7e:25:f8:eb:78:ff:21:02:66:3b:7b:f4:bb:02:2c:91:
78:a6:90:5d:3d:4a:0f:c6:3e:ac:1a:ae:52:59:39:be:00:9d:
e3:b5:36:b7:56:50:94:21:0e:09:7e:ef:5f:8f:9b:e2:59:2b:
38:1d:b2:65:62:7a:84:93:51:1c:34:d6:e7:b6:c3:61:ce:17:
0a:9e:f3:4f:ae:f2:fc:c0:42:2f:b5:c3:62:9b:65:ef:c8:0a:
42:4b:d8:f1:71:c3:e6:54:e3:dc:64:74:62:61:73:8d:58:c8:
8c:cc:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org