Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/K4-v2GTN8WwaQ6EZYE2giYFdO_8.roa
File: K4-v2GTN8WwaQ6EZYE2giYFdO_8.roa (raw, json)
Hash identifier: NGgnd2QzYfmYjNR/fUrKiGs/54wMNkM64Yqmybd1jdA=
Subject key identifier: 2B:8F:AF:D8:64:CD:F1:6C:1A:43:A1:19:60:4D:A0:89:81:5D:3B:FF
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0E082E9B
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/K4-v2GTN8WwaQ6EZYE2giYFdO_8.roa
Signing time: Wed 23 Feb 2022 11:55:25 +0000
ROA not before: Wed 23 Feb 2022 11:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 193.34.48.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235417243 (0xe082e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Feb 23 11:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b8fafd864cdf16c1a43a119604da089815d3bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:70:f2:0a:b5:db:ca:f6:ae:f2:2b:be:55:
1d:4a:62:68:14:ed:7e:3f:5d:15:ab:4b:81:35:ee:
e7:b6:0e:b3:55:b5:86:3a:90:ca:ea:07:89:d7:f6:
ec:66:0b:f5:4b:8a:b5:d7:78:a9:02:07:9d:70:7b:
1a:61:63:cf:ad:fe:e1:27:8c:b7:0a:3b:59:c6:53:
56:2d:56:27:1e:f6:0e:66:ab:c0:69:55:d2:52:ae:
e9:6f:4e:42:9a:4c:6b:67:64:e8:87:df:ba:df:bd:
cf:e7:76:3c:74:eb:c1:37:66:91:e5:11:ac:25:00:
7d:b9:ca:5d:65:b0:e4:6a:2f:17:18:88:1d:0b:2d:
71:6d:3a:44:72:82:d3:85:24:2a:2c:ff:1d:58:bb:
10:eb:f0:91:9b:b6:e5:fb:a9:74:03:a7:7c:07:13:
17:c3:e1:cd:ea:4c:ab:97:bb:62:a4:33:66:21:fb:
c3:22:8c:1e:0b:ad:64:8a:c2:35:ef:dd:fb:e7:d2:
11:bf:91:9b:aa:29:f4:49:c2:9f:e6:11:45:c7:2e:
16:78:11:92:89:31:f9:e5:a0:9d:fd:62:6d:d8:a9:
88:2a:c4:16:b8:bd:7d:ae:51:cc:60:38:0c:73:72:
cf:ad:de:ff:89:8f:45:98:a2:19:60:c0:73:e2:84:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8F:AF:D8:64:CD:F1:6C:1A:43:A1:19:60:4D:A0:89:81:5D:3B:FF
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/K4-v2GTN8WwaQ6EZYE2giYFdO_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/24
193.34.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:9a:4f:a3:98:e2:b7:71:73:a2:d8:ad:41:7f:ed:ff:ab:88:
2e:16:77:a6:d0:15:dd:35:19:19:8d:6d:8b:07:ac:73:26:ba:
bf:22:f2:26:63:85:f7:b1:d3:28:aa:62:6f:1f:1c:87:75:94:
21:9b:86:19:92:ed:4b:50:83:35:87:b9:6c:a6:72:f9:ea:8d:
17:2c:ad:47:b3:75:81:6b:83:06:c4:2f:a3:bd:1a:21:04:7f:
e7:ca:02:2a:2b:3c:d3:1f:20:ce:86:63:77:27:9d:ef:bf:fc:
ff:43:2a:2e:37:57:01:85:2d:4d:2a:45:b2:75:47:9c:d5:68:
42:13:3a:7c:8c:c7:e6:17:89:3e:d1:b7:3b:82:8c:92:dc:77:
05:2c:15:54:6c:d0:aa:61:f2:49:50:3c:94:78:69:c0:55:3b:
f4:7e:cd:c9:a6:5e:86:1e:1c:85:10:fe:33:df:31:16:53:94:
74:a8:9a:3a:e1:ef:72:5b:4d:b5:39:51:e2:7b:7b:55:2c:0a:
9b:91:95:2f:4b:41:87:08:a6:2d:80:5e:db:f0:99:d3:50:62:
39:80:79:8b:7f:b2:f6:c5:a2:a3:b5:71:8b:50:8d:c8:44:63:
35:04:9c:30:e3:15:2b:c2:95:ee:ba:ae:38:24:63:f7:1c:fd:
19:a3:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org