Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/6ir0dRzayLZ2P4nN_RvG7nHr7GY.roa
File: 6ir0dRzayLZ2P4nN_RvG7nHr7GY.roa (raw, json)
Hash identifier: Jw9S9Eov+Bfu+L11JQ/8Em2bW0Zrx92N9CMF+yXsliU=
Subject key identifier: EA:2A:F4:75:1C:DA:C8:B6:76:3F:89:CD:FD:1B:C6:EE:71:EB:EC:66
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0183B276B2ADE74AEEBDB6BA3E8C963CECA3
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/6ir0dRzayLZ2P4nN_RvG7nHr7GY.roa
Signing time: Fri 07 Oct 2022 12:41:06 +0000
ROA not before: Fri 07 Oct 2022 12:41:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 193.34.49.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
195.13.63.0/24 maxlen: 24
195.13.61.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:76:b2:ad:e7:4a:ee:bd:b6:ba:3e:8c:96:3c:ec:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Oct 7 12:41:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea2af4751cdac8b6763f89cdfd1bc6ee71ebec66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:3b:ed:ec:92:f7:0b:3c:8d:11:a6:26:0a:
c8:98:36:4d:b3:86:d5:bf:13:06:29:35:d1:5e:ff:
e2:af:91:35:24:21:1c:d1:99:e6:5d:5b:e6:d5:cb:
be:62:66:99:d7:ff:e2:c7:07:0c:f3:6e:e2:98:61:
5d:19:ce:cc:2e:18:fb:a3:f8:4a:47:6f:b0:ad:73:
2b:ae:3d:a8:01:53:6f:50:4f:3c:27:63:d5:6b:29:
96:2a:0d:6f:2e:19:b3:88:b1:64:4f:48:28:c9:20:
6a:ba:cf:a4:14:5d:55:30:3d:02:52:95:b0:c4:ce:
64:84:fd:4a:63:7f:5d:40:0a:8c:2c:c1:af:b4:52:
c7:5a:f2:ed:68:63:31:8f:be:d2:54:1c:a7:2d:bf:
39:8f:ff:3c:bf:37:d1:7c:86:8b:7a:fb:e5:90:5b:
e9:1d:09:19:c9:de:c4:bc:be:99:0a:56:11:c6:60:
98:cd:0b:7c:88:65:89:20:e4:37:9b:46:99:d7:dd:
2c:ec:4d:fd:a9:43:cf:93:c5:d0:e0:92:1e:66:19:
c4:28:76:19:5f:3d:bc:25:e0:2d:70:d7:b2:db:dc:
61:3c:64:37:23:f8:4c:3a:1d:09:d8:6a:6c:b8:46:
8a:81:ee:d4:d9:85:20:78:8e:38:d5:9e:a5:ff:6a:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2A:F4:75:1C:DA:C8:B6:76:3F:89:CD:FD:1B:C6:EE:71:EB:EC:66
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/6ir0dRzayLZ2P4nN_RvG7nHr7GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
193.34.51.0/24
195.13.61.0-195.13.63.255
Signature Algorithm: sha256WithRSAEncryption
2d:64:5e:ae:83:36:e4:ab:72:88:dd:c0:6d:c3:2a:a9:a3:c1:
d1:33:12:8b:50:f1:8d:b5:a2:0f:51:ad:22:8c:63:15:a4:f8:
81:0f:df:9f:45:dd:9c:7f:36:b0:98:9a:8f:21:a9:b1:1e:cd:
71:f2:f8:11:dc:45:f9:42:74:9e:9f:6c:b8:70:1c:fe:6e:11:
3f:77:77:ba:af:09:7b:46:95:c4:22:86:b8:bb:7d:3d:4a:ae:
af:c7:1b:fa:89:90:e7:14:61:7f:30:3c:32:0f:e7:41:07:f5:
3c:f2:58:02:df:e2:a1:a2:0c:3e:6a:d9:79:b9:65:1f:29:db:
12:8e:a8:bc:b9:67:d5:d7:f6:d1:ea:b3:a2:63:5b:4c:bd:7f:
5d:91:ed:bf:6b:e1:49:55:c6:9f:b1:d8:a9:cc:1c:c9:d7:7b:
2a:fe:87:3e:7c:d4:7a:12:fd:63:02:ac:f5:df:5c:c0:27:f7:
e6:62:9a:85:f2:65:b0:11:e5:0a:1a:dd:ea:09:cc:03:a2:90:
92:80:95:10:d3:88:62:ed:96:52:2f:06:24:97:fb:56:80:75:
4e:68:91:a9:a4:bd:0b:7a:10:35:4f:e7:8a:72:9d:87:70:3c:
5c:91:1a:a2:f5:67:03:f0:05:69:1e:f8:d0:a0:2a:1f:55:82:
d6:ba:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org