Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/2c2VxyUk81GKHnxFZ-_f9DbsLZc.roa
File: 2c2VxyUk81GKHnxFZ-_f9DbsLZc.roa (raw, json)
Hash identifier: P3oswYGJfj0ghbwDQAcVZV1a2dam+FLxFn/JvF7k06g=
Subject key identifier: D9:CD:95:C7:25:24:F3:51:8A:1E:7C:45:67:EF:DF:F4:36:EC:2D:97
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 0160F383
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/2c2VxyUk81GKHnxFZ-_f9DbsLZc.roa
Signing time: Sat 01 Jan 2022 11:57:27 +0000
ROA not before: Sat 01 Jan 2022 11:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31134
IP address blocks: 193.23.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23131011 (0x160f383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Jan 1 11:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9cd95c72524f3518a1e7c4567efdff436ec2d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:34:ee:63:b1:fc:c7:fb:0c:f6:7a:9b:88:
1a:37:15:2e:ef:f5:18:ae:a8:d3:73:84:a3:bb:f2:
65:d1:90:24:a6:7f:17:54:d8:5b:e3:1a:46:9b:b3:
bd:f1:90:1b:84:37:39:94:92:73:57:98:f1:5b:b7:
88:39:53:8b:f7:b2:3c:e6:fd:5e:d7:20:c2:5e:30:
83:49:51:6f:16:ff:ae:7f:aa:33:c9:6e:30:e6:db:
26:4d:91:a6:a7:18:dd:06:e7:de:46:b6:dc:5c:64:
59:f5:f0:a6:c0:4f:52:ab:da:88:c0:8e:86:d2:58:
65:29:df:3d:7a:11:85:cd:1d:b0:0e:1f:80:60:4e:
0f:2b:8a:f3:d2:16:7c:a5:fd:ae:b7:41:01:d3:0f:
06:b2:91:2f:d6:25:b1:58:a2:ab:e0:79:e2:14:dc:
84:59:52:2a:19:6f:04:53:1c:00:be:b0:1f:9a:15:
de:88:dd:d9:d1:b2:f0:cf:db:69:64:a3:7e:e0:4d:
73:48:6f:d0:49:f6:3e:8c:e6:ae:16:70:f4:99:c3:
bf:1b:1e:3e:96:c6:d8:1f:59:d4:58:98:35:75:ce:
81:ae:b6:3b:d4:4f:ac:0c:3f:ec:6c:d0:87:70:c4:
02:e8:e5:3d:f8:7e:1a:59:7a:0b:ca:88:1b:6c:6b:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:95:C7:25:24:F3:51:8A:1E:7C:45:67:EF:DF:F4:36:EC:2D:97
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/2c2VxyUk81GKHnxFZ-_f9DbsLZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.62.0/24
Signature Algorithm: sha256WithRSAEncryption
51:76:c6:5d:7c:0e:e9:aa:e5:46:11:f1:00:51:be:6f:8a:92:
c0:55:ed:41:dd:24:ce:29:f3:3e:b8:b5:b3:28:ba:88:6d:20:
bf:6e:1e:1a:0a:0a:51:c0:ed:a9:eb:4a:e5:3c:66:90:7e:c9:
b8:d7:33:0e:1c:33:12:e8:81:ea:fa:74:2d:d7:76:19:4b:01:
41:15:c2:b7:a7:ce:07:57:97:27:dc:2d:82:9d:2b:c1:ed:f8:
81:d1:88:40:13:79:a5:32:78:ef:2a:a0:42:a5:fd:4d:d5:b1:
78:17:65:a2:f3:d5:03:0b:0e:36:b4:88:36:5b:82:ac:ea:f0:
c8:57:3f:9b:c6:33:dc:94:a7:7d:ea:38:49:b2:b6:81:4f:ae:
a6:a3:8f:51:c7:fd:a7:7c:d4:4f:f3:a6:9d:1b:4b:55:e9:f5:
b4:f4:3b:9e:67:f9:44:8e:f0:3c:49:d4:32:a4:74:c1:a1:6a:
b7:67:64:c4:d7:27:e1:e7:3a:7d:7b:94:60:ff:32:81:d1:64:
94:5b:12:98:52:46:d7:03:c2:04:58:e3:96:08:6f:d4:49:39:
ea:8e:61:3d:32:79:57:3b:d4:36:bf:20:17:22:a0:f4:95:c2:
12:6e:6e:3c:75:4f:7e:5d:e1:ec:51:40:9f:e5:9f:39:03:db:
7b:52:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org