Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/bZGeiQGcGOv8LHKabBpinO2duvA.roa
File: bZGeiQGcGOv8LHKabBpinO2duvA.roa (raw, json)
Hash identifier: 4EJQg3V7M2RykdM90nNprdrSm3giu9XL7/mOPPTwpRY=
Subject key identifier: 6D:91:9E:89:01:9C:18:EB:FC:2C:72:9A:6C:1A:62:9C:ED:9D:BA:F0
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 0183EF0E3F35691F398B4C235B9E56BAB411
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/bZGeiQGcGOv8LHKabBpinO2duvA.roa
Signing time: Wed 19 Oct 2022 07:03:51 +0000
ROA not before: Wed 19 Oct 2022 07:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209830
IP address blocks: 193.141.24.0/24 maxlen: 24
193.141.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:0e:3f:35:69:1f:39:8b:4c:23:5b:9e:56:ba:b4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Oct 19 07:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d919e89019c18ebfc2c729a6c1a629ced9dbaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:ed:9b:e2:37:5e:b8:2a:49:11:6f:ac:3c:
07:c8:3a:6c:2a:8c:11:90:aa:59:f3:66:84:19:92:
cc:a1:25:a4:f1:a7:57:8b:14:33:73:67:cb:d3:fe:
98:e7:23:3e:78:3c:cf:2d:ac:fc:a5:a3:4c:80:50:
c0:14:6a:3c:56:26:7f:90:1e:d6:61:06:fd:ab:d5:
27:2f:a7:ed:34:1e:c9:3a:c5:13:58:15:90:f1:2b:
50:af:d0:af:74:42:cf:9f:20:71:4c:2a:3d:89:4b:
ff:06:c3:dd:f4:6c:a9:94:d0:b4:04:e1:09:7e:d7:
a2:5d:b4:25:92:4c:1f:e4:2e:15:31:cd:a6:a9:db:
57:c4:19:cd:2b:fe:3f:41:cf:22:f6:2b:74:1f:64:
25:9a:9d:12:97:43:a2:31:7e:e0:c8:be:96:8e:b3:
57:b2:43:a7:eb:8c:dc:e3:5f:43:30:45:83:fd:8e:
3d:8e:a8:fc:d1:cc:53:89:75:1b:9f:bc:84:f8:3a:
96:ca:2a:46:c2:38:8c:58:4e:3d:7f:58:10:3c:91:
1f:d0:7f:fb:e3:27:e5:fd:05:b0:81:a1:61:93:f6:
b1:43:b8:46:92:d2:1f:0b:b7:82:51:8f:26:d7:fc:
92:53:30:fc:00:2c:c2:2f:bb:cf:ba:06:25:62:b0:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:9E:89:01:9C:18:EB:FC:2C:72:9A:6C:1A:62:9C:ED:9D:BA:F0
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/bZGeiQGcGOv8LHKabBpinO2duvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.23.0-193.141.24.255
Signature Algorithm: sha256WithRSAEncryption
6d:97:aa:36:c0:9a:a5:7b:22:72:1c:12:8f:69:84:d4:10:e3:
49:b5:05:0c:b8:bb:1f:7e:38:c4:62:20:b5:02:0e:94:7c:28:
3d:27:96:3c:9e:12:3d:dc:92:57:f8:b2:77:89:18:ce:12:78:
83:c4:00:a9:c4:6c:ce:57:f9:9d:c9:9e:2e:c4:a0:82:49:02:
cd:55:c5:1d:ca:68:ee:c4:0e:36:ae:7e:06:d7:e4:32:f6:b9:
dd:a8:d6:74:5a:e8:e5:56:64:6a:af:50:b9:dc:a2:38:0c:0a:
e2:e2:72:3e:1b:e3:e2:7d:53:a7:3f:e1:c7:03:08:14:da:54:
af:12:dd:f3:4e:08:03:ec:0d:4e:9a:c6:34:33:b3:3d:60:a7:
ca:1c:8e:69:d9:b5:3b:90:b9:14:3b:1c:df:d9:bf:af:f0:e6:
ff:ce:1a:85:69:c1:1d:15:9b:8d:b6:07:71:36:27:4e:36:ba:
80:9f:76:6a:37:d9:f4:f6:a9:d0:b4:ca:a3:5e:ee:09:7f:2f:
6f:0f:4a:f5:be:7d:ad:19:aa:8d:36:de:0c:a1:ff:99:aa:04:
af:23:a6:d7:22:43:13:b1:bb:c3:cd:c0:c2:c5:4b:9f:d6:93:
b7:fd:1b:da:11:62:e8:3b:4d:f5:78:f1:64:1f:65:17:de:24:
f8:e2:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:50 2024 by rpki-client on console-fra.rpki-client.org