Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/pVBDnNaOJXm02g-R0MGBhfAMpEA.roa
File: pVBDnNaOJXm02g-R0MGBhfAMpEA.roa (raw, json)
Hash identifier: L3DxTr12a8R0HMhEHavj0IenEweNrTkw2Vq48uQHrXI=
Subject key identifier: A5:50:43:9C:D6:8E:25:79:B4:DA:0F:91:D0:C1:81:85:F0:0C:A4:40
Certificate issuer: /CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
Certificate serial: 06AFA392
Authority key identifier: 2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/pVBDnNaOJXm02g-R0MGBhfAMpEA.roa
Signing time: Sat 01 Jan 2022 05:58:51 +0000
ROA not before: Sat 01 Jan 2022 05:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52052
IP address blocks: 193.37.224.0/24 maxlen: 24
193.37.229.0/24 maxlen: 24
193.37.134.0/24 maxlen: 24
193.37.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112173970 (0x6afa392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
Validity
Not Before: Jan 1 05:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a550439cd68e2579b4da0f91d0c18185f00ca440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:44:aa:ea:ca:17:53:2e:0f:53:7e:69:de:
6d:fa:6b:a5:69:84:e5:64:3d:3c:c3:bd:39:6e:9a:
ea:67:e1:04:39:00:24:77:82:69:79:90:c8:23:e7:
eb:24:58:99:f7:d3:38:21:4b:ea:2d:0a:90:78:e1:
af:ec:20:6d:58:f7:85:f8:82:40:f4:0b:03:a9:e7:
df:f1:84:a1:e7:ce:bd:bb:6a:c7:5d:90:d5:a9:ea:
e9:45:cf:be:f7:76:d0:13:0a:9e:e5:31:80:47:26:
ac:91:b7:8e:cb:13:a8:86:9c:8f:dc:69:8b:42:27:
b6:26:10:8c:70:74:a6:b2:e4:84:db:c7:ed:b2:0f:
48:11:3a:86:ac:7e:d9:dc:39:46:8f:c6:f9:c6:23:
21:d8:07:a2:36:79:5f:c2:da:1f:70:ad:6f:f7:9d:
c9:f5:b9:ff:20:9b:e2:f5:7b:35:06:77:8a:bb:76:
f8:60:ac:85:4e:f0:dc:bd:d8:f2:65:89:6e:6a:d3:
00:7c:39:1b:ef:1a:60:da:6a:11:6b:63:f6:ca:a1:
c5:2e:14:38:f9:7d:16:1e:00:79:ff:1a:7a:67:2a:
10:ef:7a:98:b0:af:3f:eb:05:68:dd:3d:47:cc:53:
cb:87:0a:82:83:8d:54:de:19:28:44:fd:a4:c5:a5:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:43:9C:D6:8E:25:79:B4:DA:0F:91:D0:C1:81:85:F0:0C:A4:40
X509v3 Authority Key Identifier:
keyid:2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/pVBDnNaOJXm02g-R0MGBhfAMpEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.134.0/24
193.37.155.0/24
193.37.224.0/24
193.37.229.0/24
Signature Algorithm: sha256WithRSAEncryption
50:59:fe:a6:db:31:cd:2c:40:6e:82:b6:1a:40:55:fc:c7:84:
e2:f7:24:83:e3:83:12:41:4d:29:57:d0:44:5f:f9:cf:36:14:
76:34:ed:e3:28:e9:74:3e:b9:d3:60:86:d3:3e:0e:77:25:71:
63:dc:08:fc:dd:f8:89:97:6f:df:4d:ca:8c:f7:8c:4d:a1:fd:
ed:07:f3:35:33:12:05:c6:dc:d9:6c:7b:65:54:9a:d3:33:fb:
ed:bb:41:70:97:cc:7c:9b:8e:ea:ff:8d:d8:b2:ce:18:2a:0b:
51:52:c6:c8:84:c6:32:96:9f:53:81:d9:f5:46:89:3f:29:72:
bd:8e:2e:40:42:6a:f5:0e:1a:93:c8:76:c6:6b:fe:2d:99:2b:
dc:0b:d4:7e:ae:d7:ea:b5:99:19:d9:59:13:05:1d:c8:9c:f9:
ff:23:b0:29:fe:15:31:5e:dd:57:d8:fb:ec:e4:11:48:3f:59:
93:e0:9d:a8:ce:f6:46:f0:45:22:9c:3a:94:f5:2c:44:a9:37:
7c:bf:29:ea:e0:b9:3e:99:4f:2b:d2:e2:dd:5a:7b:3f:69:fb:
2a:67:28:d6:e6:eb:e0:5b:a2:6a:ce:af:e3:10:a9:93:2b:52:
9f:32:e4:25:c7:19:57:4f:9b:6b:46:27:bb:49:01:d3:29:b0:
37:ef:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org