Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/Tc0BYPv_dosV1v7v5OsD15SKHMk.roa
File: Tc0BYPv_dosV1v7v5OsD15SKHMk.roa (raw, json)
Hash identifier: MyxCBX5OpnX0rSJH729xSFH8J0PXjbbWXI5TPWCqb6o=
Subject key identifier: 4D:CD:01:60:FB:FF:76:8B:15:D6:FE:EF:E4:EB:03:D7:94:8A:1C:C9
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 0B4C19C0
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/Tc0BYPv_dosV1v7v5OsD15SKHMk.roa
Signing time: Sat 01 Jan 2022 11:58:25 +0000
ROA not before: Sat 01 Jan 2022 11:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201107
IP address blocks: 193.30.96.0/24 maxlen: 24
193.30.97.0/24 maxlen: 24
193.30.98.0/24 maxlen: 24
193.30.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189536704 (0xb4c19c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jan 1 11:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dcd0160fbff768b15d6feefe4eb03d7948a1cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:e3:93:cb:4f:8f:d6:be:2a:cb:fb:e3:e3:
a6:83:a9:88:bf:18:77:6e:09:3c:59:56:ae:d9:94:
3a:35:32:56:4b:cb:bd:64:8e:11:6b:3b:ac:7e:36:
48:07:7c:23:dd:fa:25:de:c1:83:42:e4:92:7c:b2:
4f:82:ba:87:7a:47:4d:96:16:91:dc:b3:6c:74:6a:
c3:7a:58:ae:c0:c2:a8:2d:90:a9:35:39:c9:23:52:
df:4f:af:60:15:30:bd:44:cf:1f:08:2e:be:48:7c:
fa:14:f9:62:5d:e0:c8:32:9f:f5:c9:47:dd:e2:cd:
71:95:4f:71:c6:7d:58:f7:13:ef:35:0b:9f:e4:4e:
19:43:5e:6a:f3:80:9b:78:cc:f9:34:45:8d:03:b8:
3e:d4:40:f0:a5:b1:ac:f8:44:53:d7:a0:e9:5a:66:
1b:a1:17:75:3e:87:7a:b3:81:4c:64:6a:fa:4a:1e:
e7:48:50:07:b7:fe:3c:9b:1a:ce:17:17:6d:16:64:
be:44:7f:3d:6a:e6:64:f8:68:c6:4d:fa:87:84:cb:
91:92:94:52:4e:d0:3e:73:e8:8b:85:3c:23:4c:99:
4c:d0:01:6f:7f:be:86:01:c0:c7:15:c1:84:ec:56:
c8:0a:cf:d9:9a:75:52:3c:63:41:76:5b:ce:62:f7:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:01:60:FB:FF:76:8B:15:D6:FE:EF:E4:EB:03:D7:94:8A:1C:C9
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/Tc0BYPv_dosV1v7v5OsD15SKHMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:22:3c:7d:4d:03:75:93:69:20:7b:eb:74:02:82:87:63:f5:
0a:bf:52:eb:f5:bc:cd:3d:72:a4:0c:89:bf:d1:3d:4b:e4:09:
25:0f:4d:7f:1c:d2:e7:65:a7:a6:88:7b:a6:b0:7a:c2:96:8b:
0e:d1:67:53:98:24:58:48:52:f6:1c:43:b9:f4:eb:60:2b:be:
7d:62:6c:69:a7:05:d9:4c:3e:bb:9c:db:82:d5:fa:60:32:01:
61:75:b7:91:44:4e:22:78:b2:f3:4e:83:3a:97:d9:cf:af:4f:
47:32:31:5c:73:32:a5:a9:98:59:d5:7f:6f:42:b7:4c:fc:85:
48:09:9c:f1:7c:b2:5b:dc:0e:cc:76:78:6b:2c:c9:37:28:92:
5b:77:dc:88:12:3b:5f:e5:99:ed:60:ea:14:98:eb:6e:be:b5:
57:d8:8c:9c:c0:26:4e:be:3f:04:ba:6a:54:3a:40:38:bf:28:
20:e8:ea:d4:3e:a2:70:08:20:1c:3d:b4:54:a7:aa:9b:af:9e:
67:3d:74:32:6d:4a:f1:83:ca:2c:2c:13:98:4a:55:b1:d5:5a:
96:46:16:68:e4:b2:3b:53:7d:29:a3:31:94:55:07:ee:91:3e:
69:a3:36:51:ad:96:f4:f6:84:af:4a:9b:55:4e:ca:98:3d:6a:
95:22:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:38 2023 by rpki-client on console-ams.rpki-client.org