Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/smNbYnCJ160Xu31mN8X7H62wfUU.roa
File: smNbYnCJ160Xu31mN8X7H62wfUU.roa (raw, json)
Hash identifier: HrWTMSY2YyLHE8+BXH09YtORq137S+5Wq7gWvp9UvHU=
Subject key identifier: B2:63:5B:62:70:89:D7:AD:17:BB:7D:66:37:C5:FB:1F:AD:B0:7D:45
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0183E5665582F53AC8404F62E648E8D75099
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/smNbYnCJ160Xu31mN8X7H62wfUU.roa
Signing time: Mon 17 Oct 2022 10:03:52 +0000
ROA not before: Mon 17 Oct 2022 10:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29310
IP address blocks: 213.244.117.0/24 maxlen: 24
213.244.116.0/24 maxlen: 24
213.244.115.0/24 maxlen: 24
213.244.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:66:55:82:f5:3a:c8:40:4f:62:e6:48:e8:d7:50:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Oct 17 10:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2635b627089d7ad17bb7d6637c5fb1fadb07d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:21:81:3a:0d:40:af:fb:d8:a0:e7:28:0f:
b5:09:a8:0b:fe:99:6c:a6:68:99:67:f9:fe:f5:7d:
17:ee:d4:3d:d0:ce:29:a5:9a:ba:7b:1a:9e:91:ba:
59:93:dd:a8:7e:29:7d:c6:d6:fa:23:ec:5b:bc:be:
d3:b6:b9:d0:96:5e:b1:54:e8:6c:be:1b:a1:66:11:
b9:17:79:30:45:91:6e:a5:36:97:b9:cc:fe:e8:96:
12:78:c5:79:f6:d3:1d:79:02:ab:95:5a:02:ca:4e:
b4:05:9e:69:68:02:5c:6e:4f:17:3e:d9:38:16:7a:
7b:9c:a9:b5:2c:12:39:ea:92:1a:9b:66:b6:32:12:
6f:5d:62:cb:7f:e6:de:1f:5f:b1:55:2d:98:49:2c:
92:d5:14:73:7e:ad:07:e7:57:84:a5:ba:f6:99:3b:
ae:51:00:8f:9b:90:6c:1e:39:02:4c:1d:32:8c:1e:
3a:88:7d:c1:4e:ea:32:cb:c3:7a:3b:9b:0b:45:1d:
f3:ba:b7:da:d3:71:a4:18:be:55:f0:43:40:99:f5:
2e:7c:ce:82:fc:ca:81:05:fd:64:e3:c9:1f:74:08:
57:cd:45:2b:90:ef:d8:c3:99:22:85:1a:20:24:a2:
33:09:a8:b4:1a:fc:6f:39:7b:f7:e3:c8:9f:9f:9a:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:5B:62:70:89:D7:AD:17:BB:7D:66:37:C5:FB:1F:AD:B0:7D:45
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/smNbYnCJ160Xu31mN8X7H62wfUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.115.0-213.244.117.255
213.244.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1a:af:a9:9b:47:54:f8:7f:fd:03:7e:ea:7a:13:05:ba:7b:
45:a8:bf:a6:3e:38:81:3d:a9:67:be:a8:26:f3:79:6a:2d:78:
ef:85:a4:c9:96:60:a1:c2:a9:6d:9f:b5:00:0c:fa:75:a7:38:
1c:84:7f:a4:9b:32:75:4a:4f:ca:ca:c6:c7:b7:6f:ee:c4:f8:
15:90:fd:a0:0a:83:5e:7e:a1:5d:4b:a0:ba:a7:27:c4:45:d6:
93:6f:ff:e9:4d:7b:3f:b7:49:1c:ae:f8:ac:e7:92:0a:4e:e7:
e1:bf:0c:0d:68:46:d7:07:c1:30:5d:0e:6d:8c:00:63:4d:e6:
40:f1:e1:d6:b5:f3:e6:e5:fb:45:b2:47:26:ac:9f:9a:62:c7:
a0:bc:cb:7e:1c:c3:7f:b6:23:5b:3d:08:a9:cd:3d:1c:fa:b2:
08:45:cd:c7:f6:dd:f3:d7:a3:85:01:48:4f:be:1e:c5:67:13:
ee:ce:5d:ea:26:02:35:0c:7e:8c:7f:77:a2:58:0d:6d:a8:cd:
76:b0:63:b5:4d:6a:f9:af:9d:42:ce:08:af:3b:46:95:ab:e2:
19:8d:6b:5b:53:dc:74:85:98:51:f0:dd:ba:fb:38:2a:bc:fe:
d3:76:23:d3:c2:c5:1c:1b:91:ec:72:ca:79:cd:06:53:7a:aa:
2a:7c:38:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:10 2024 by rpki-client on console-ams.rpki-client.org