Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/MAZw_3N8DPmEHXO0jWfi9n-Ssi8.roa
File: MAZw_3N8DPmEHXO0jWfi9n-Ssi8.roa (raw, json)
Hash identifier: vDhZBTVJrZ95DOHhO2NbCT9zOIasH6DXr5L0c0hJWS4=
Subject key identifier: 30:06:70:FF:73:7C:0C:F9:84:1D:73:B4:8D:67:E2:F6:7F:92:B2:2F
Certificate issuer: /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial: 01832151A9EF0375B554EDF5EC1660912892
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/MAZw_3N8DPmEHXO0jWfi9n-Ssi8.roa
Signing time: Fri 09 Sep 2022 08:15:43 +0000
ROA not before: Fri 09 Sep 2022 08:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197353
IP address blocks: 193.33.126.0/23 maxlen: 23
193.33.127.0/24 maxlen: 24
193.33.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:51:a9:ef:03:75:b5:54:ed:f5:ec:16:60:91:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Validity
Not Before: Sep 9 08:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=300670ff737c0cf9841d73b48d67e2f67f92b22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:bc:f5:6a:9d:4d:2e:d1:17:23:fa:ee:93:
1b:7d:e4:54:70:51:a1:97:19:b4:ae:e3:ad:dc:ac:
44:b4:94:41:1b:73:91:be:68:a1:8a:54:0f:21:dd:
d1:1c:83:bc:73:e8:ac:8f:dc:a1:4c:d8:58:08:d7:
a4:23:ce:be:90:d3:50:2f:eb:6b:1e:d0:de:31:8a:
6f:aa:ae:87:41:94:03:a5:cc:c1:68:1c:a2:f9:fc:
28:53:c8:08:0b:88:21:51:80:eb:99:29:51:a6:13:
58:14:83:03:4f:4c:ef:bb:6d:41:af:2f:2c:26:e0:
8b:55:85:91:5a:cc:e8:d4:ed:ee:ac:a9:77:7d:31:
50:fd:30:92:65:f3:76:28:79:6c:c7:fc:8c:f0:7e:
41:20:25:7c:6a:7b:25:ab:02:1f:88:15:21:60:93:
ed:65:05:6e:9a:1e:55:4e:00:37:e8:52:2f:a2:51:
8b:24:47:7e:bb:17:e0:d4:7e:ae:6a:ae:d5:e6:84:
67:af:35:8c:85:4c:7a:4d:71:19:a4:1b:3a:b1:5f:
a8:4d:f3:fa:d8:fa:11:96:78:9c:fc:bb:e9:89:54:
dc:ea:34:f9:ee:63:d3:1a:80:5d:ff:7f:5d:4f:b5:
4f:72:41:57:80:63:e5:4b:f7:b5:76:0b:b6:e0:5b:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:06:70:FF:73:7C:0C:F9:84:1D:73:B4:8D:67:E2:F6:7F:92:B2:2F
X509v3 Authority Key Identifier:
keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/MAZw_3N8DPmEHXO0jWfi9n-Ssi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.126.0/23
Signature Algorithm: sha256WithRSAEncryption
78:29:65:16:25:55:bb:7c:00:2c:5e:12:b4:07:c2:9f:c8:f8:
00:cf:0d:99:f8:7a:41:95:14:dd:2d:dc:4b:8f:83:36:fb:5d:
8f:da:d1:e1:aa:b6:10:6b:d9:99:0c:20:22:0a:8c:64:eb:e3:
2f:6f:f8:e4:5d:08:5d:85:50:5a:52:e1:fc:79:8b:78:03:64:
f0:1c:a2:85:9c:39:8c:69:63:ee:64:af:3b:3f:a7:81:b7:d7:
eb:4d:0e:b2:64:e9:ab:97:5d:ea:9a:04:16:a2:59:11:c9:6f:
02:2b:94:e7:cb:48:97:55:12:29:0c:98:ba:97:89:72:cd:6c:
19:1a:32:ee:97:14:8b:b6:c3:3b:2e:4b:14:c4:b7:0a:19:4e:
e9:07:ea:e9:dc:ec:4e:7f:3d:a2:2a:7c:99:9d:78:ac:9a:e2:
de:df:52:55:1d:b7:53:e0:64:00:08:b5:6b:73:84:0b:ca:61:
bf:f6:cf:8d:ad:28:c5:93:02:4e:12:39:1d:b6:25:6e:34:54:
a1:4a:68:28:92:54:d4:ad:8d:33:82:a2:48:af:c9:2a:ef:48:
bd:55:f0:1f:73:56:91:85:5b:50:37:eb:a4:1d:ce:3b:ca:d6:
a5:3c:98:24:ca:3c:8a:54:51:21:30:fc:01:0c:27:35:3d:b1:
c5:3f:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:46 2024 by rpki-client on console-fra.rpki-client.org