Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/AG3XIx3mzwSFF4IvTYa1pQSApYc.roa
File: AG3XIx3mzwSFF4IvTYa1pQSApYc.roa (raw, json)
Hash identifier: BECQogOzmOTz07VgtgaGg6N3ceD6p3O2IkyMK68vJZA=
Subject key identifier: 00:6D:D7:23:1D:E6:CF:04:85:17:82:2F:4D:86:B5:A5:04:80:A5:87
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0E075897
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/AG3XIx3mzwSFF4IvTYa1pQSApYc.roa
Signing time: Wed 23 Feb 2022 11:55:12 +0000
ROA not before: Wed 23 Feb 2022 11:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.34.48.0/24 maxlen: 24
193.34.49.0/24 maxlen: 24
193.34.50.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
195.13.61.0/24 maxlen: 24
195.13.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235362455 (0xe075897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Feb 23 11:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=006dd7231de6cf048517822f4d86b5a50480a587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:69:71:7c:87:64:ab:4c:4b:bb:48:75:11:
4c:4a:c6:0e:d6:9c:f9:59:c2:9e:b9:ad:1f:0d:0c:
e3:5e:c6:de:80:fb:fc:68:51:5d:27:84:40:72:02:
fc:4d:57:f7:0b:e6:44:cf:71:1c:e7:d6:70:30:fd:
3c:7e:69:09:6a:fe:6b:8c:6a:8e:2b:a7:83:03:08:
6a:86:9c:6a:b5:78:08:61:b7:f4:cd:7b:25:28:61:
34:5e:a1:96:49:67:3b:1b:92:d5:5f:31:aa:51:2a:
f6:5d:42:08:e9:3a:fe:e5:8d:59:77:31:d3:e3:e4:
3a:68:87:d8:7c:0c:56:1b:e0:a8:2c:da:71:f5:67:
88:c4:fd:10:2a:15:68:5a:30:5c:90:47:63:8d:de:
24:ba:9b:b5:3f:4d:ff:67:e1:08:1e:aa:70:59:41:
cf:12:55:ba:50:ac:f4:a2:ea:cc:9a:60:d3:8a:f9:
ed:c9:03:2c:89:1e:fa:89:c0:c5:bd:4b:4f:50:c6:
a0:e3:ca:9c:78:ec:e4:83:b2:b0:f3:84:f4:64:c6:
9b:60:21:57:e6:69:c2:4d:d4:7a:b3:45:1f:11:16:
a6:9a:a2:d6:cd:f6:b7:a4:67:06:02:1c:ed:49:8e:
e2:4b:a2:dd:04:71:2d:c9:da:8f:ed:c6:06:0b:1b:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:D7:23:1D:E6:CF:04:85:17:82:2F:4D:86:B5:A5:04:80:A5:87
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/AG3XIx3mzwSFF4IvTYa1pQSApYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0-193.34.50.255
195.13.61.0-195.13.63.255
Signature Algorithm: sha256WithRSAEncryption
1d:cb:61:8b:4a:ba:5a:3b:cf:75:36:81:7a:f9:43:05:f8:83:
b6:3f:4a:b7:8c:38:46:92:7c:4c:15:79:cc:81:d4:c0:94:0d:
93:a5:43:ac:e0:49:61:19:4f:3f:51:c5:ef:67:79:31:d4:48:
a9:a7:15:3d:92:68:de:e5:cb:b8:33:e7:62:cd:c8:e2:22:d0:
0e:a8:81:ab:b8:97:de:18:e8:49:1e:91:01:cd:54:ef:73:6c:
14:96:46:34:c0:dc:de:76:43:8b:22:f3:fc:e3:07:fd:f1:20:
f6:3a:3f:8a:40:7e:eb:e5:f2:57:e5:a9:18:f8:ed:1b:33:ba:
3d:3e:60:79:0c:b1:60:c8:47:2b:d1:df:cb:8d:9b:6b:61:c2:
88:e8:21:52:a6:00:9c:3f:07:2a:53:14:25:3b:cc:8e:6f:b0:
ac:3e:b9:79:b7:42:a1:9c:35:42:8c:fa:93:b4:c7:08:0b:d2:
24:2e:ee:99:17:88:e5:96:ef:87:5d:55:ff:8d:25:62:cd:3a:
f5:e9:97:3e:be:f2:97:47:81:6a:60:72:13:2a:f2:fc:e4:c0:
24:21:9a:d0:72:4c:49:ba:ba:c9:5f:5e:ab:38:7a:3b:79:33:
dc:00:b9:f5:1c:2d:93:64:42:66:59:12:51:be:90:45:76:c8:
b2:7e:b2:19
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEDgdYlzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTM1MzNkNjYyYzNmMGQ2YmIxZTY5MmYzZmFiNmQ3YmEzODI0YzI4MB4XDTIyMDIy
MzExNTUxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDA2ZGQ3MjMxZGU2
Y2YwNDg1MTc4MjJmNGQ4NmI1YTUwNDgwYTU4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHsaXF8h2SrTEu7SHURTErGDtac+VnCnrmtHw0M417G3oD7
/GhRXSeEQHIC/E1X9wvmRM9xHOfWcDD9PH5pCWr+a4xqjiungwMIaoacarV4CGG3
9M17JShhNF6hlklnOxuS1V8xqlEq9l1CCOk6/uWNWXcx0+PkOmiH2HwMVhvgqCza
cfVniMT9ECoVaFowXJBHY43eJLqbtT9N/2fhCB6qcFlBzxJVulCs9KLqzJpg04r5
7ckDLIke+onAxb1LT1DGoOPKnHjs5IOysPOE9GTGm2AhV+Zpwk3UerNFHxEWppqi
1s32t6RnBgIc7UmO4kui3QRxLcnaj+3GBgsbXqsCAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBQAbdcjHebPBIUXgi9NhrWlBIClhzAfBgNVHSMEGDAWgBSeNTPWYsPw1rse
aS8/q217o4JMKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25qVXoxbUxEOE5hN0hta3ZQNnR0ZTZPQ1RDZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvYmViZTZkLTE2YjMtNGIwMi1iMjA1LWE3ODM0MTMwOTlkMy8x
L0FHM1hJeDNtendTRkY0SXZUWWExcFFTQXBZYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
YmViZTZkLTE2YjMtNGIwMi1iMjA1LWE3ODM0MTMwOTlkMy8xL25qVXoxbUxEOE5h
N0hta3ZQNnR0ZTZPQ1RDZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwIgQCAAEwHDAMAwQEwSIwAwQAwSIyMAwDBADDDT0D
BAbDDQAwDQYJKoZIhvcNAQELBQADggEBAB3LYYtKulo7z3U2gXr5QwX4g7Y/SreM
OEaSfEwVecyB1MCUDZOlQ6zgSWEZTz9Rxe9neTHUSKmnFT2SaN7ly7gz52LNyOIi
0A6ogau4l94Y6EkekQHNVO9zbBSWRjTA3N52Q4si8/zjB/3xIPY6P4pAfuvl8lfl
qRj47Rszuj0+YHkMsWDIRyvR38uNm2thwojoIVKmAJw/BypTFCU7zI5vsKw+uXm3
QqGcNUKM+pO0xwgL0iQu7pkXiOWW74ddVf+NJWLNOvXplz6+8pdHgWpgchMq8vzk
wCQhmtByTEm6uslfXqs4ejt5M9wAufUcLZNkQmZZElG+kEV2yLJ+shk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org