Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/p7emXTzk5f152sBhNnOxv4_yTu0.roa
File: p7emXTzk5f152sBhNnOxv4_yTu0.roa (raw, json)
Hash identifier: gv8OPM7irhPkSSYfOdPay9u31ftt/FEapXNiFrEO860=
Subject key identifier: A7:B7:A6:5D:3C:E4:E5:FD:79:DA:C0:61:36:73:B1:BF:8F:F2:4E:ED
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: BBAB34
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/p7emXTzk5f152sBhNnOxv4_yTu0.roa
Signing time: Sat 01 Jan 2022 02:56:45 +0000
ROA not before: Sat 01 Jan 2022 02:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39265
IP address blocks: 193.247.32.0/24 maxlen: 24
193.247.32.0/22 maxlen: 22
2001:67c:21c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12299060 (0xbbab34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Jan 1 02:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7b7a65d3ce4e5fd79dac0613673b1bf8ff24eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fc:91:82:28:f1:6c:bc:d3:3b:b0:89:23:ec:
1f:1a:16:63:e8:92:a0:de:91:84:c8:1c:8f:9a:34:
06:07:cc:cc:7f:92:1d:88:6c:48:93:a8:91:b6:cd:
ec:f8:66:1e:6a:a9:c7:d8:50:53:f2:33:1e:4d:d7:
59:6a:55:64:b6:19:35:a5:5d:75:6c:f7:62:b1:8a:
9f:13:6f:09:f3:59:6f:79:ed:3d:06:14:8b:ae:d0:
5f:8c:27:30:7c:9a:e2:ad:07:19:6a:32:02:16:59:
7b:d4:4a:7c:d5:e3:f3:7d:91:fe:60:d5:26:88:fd:
e9:af:33:b6:79:45:39:60:bd:d3:98:ed:74:6c:86:
53:27:d4:e6:23:4a:76:30:5f:45:08:8e:2d:da:ca:
d4:02:d3:6e:23:61:c1:b9:e7:9c:82:19:0b:45:e1:
79:08:b4:d9:c2:f3:e2:f7:67:36:b8:8d:20:63:36:
07:38:66:c8:53:47:25:17:11:24:e3:3e:98:db:cd:
68:27:9e:ba:53:53:55:9f:cd:15:c7:da:47:91:aa:
35:6e:84:d6:49:da:ad:10:d5:2f:ed:de:58:98:11:
1f:7d:b6:b7:d7:89:09:a7:c3:10:1b:3b:d8:bb:db:
52:b6:24:2e:67:1b:21:c4:2f:62:a2:e0:bd:b6:15:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B7:A6:5D:3C:E4:E5:FD:79:DA:C0:61:36:73:B1:BF:8F:F2:4E:ED
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/p7emXTzk5f152sBhNnOxv4_yTu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.32.0/22
IPv6:
2001:67c:21c0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:53:ca:9d:6d:81:2d:b6:23:41:6d:68:08:41:0d:44:aa:91:
2c:45:c9:f9:41:7b:52:d0:e8:83:9e:47:31:a3:ab:a7:7d:45:
c2:35:74:e2:e3:d4:76:e7:b6:ac:93:ac:42:5e:6a:a0:94:ba:
8d:e9:22:57:0e:ca:75:45:d6:5d:13:cf:2c:cd:0a:ce:a1:3a:
58:0d:71:1a:ad:e9:cf:6f:17:06:83:85:65:56:e2:dc:88:04:
ea:d6:e9:86:fb:99:19:67:39:f5:f1:8c:d7:d9:dc:d5:26:38:
4f:56:ba:f2:d5:f8:a0:b1:b1:c8:ca:ef:69:c2:a4:6a:00:89:
53:b9:8a:e4:e6:ca:94:7d:44:1f:57:66:5c:fb:b0:1f:08:8f:
f4:6d:f5:50:1b:4f:a5:06:47:a7:2b:4b:80:e2:a1:44:8d:26:
d6:cc:bd:77:60:40:51:81:ea:56:cf:b9:6f:1c:89:9d:2c:46:
88:45:2f:78:c8:d6:ac:3a:22:13:34:60:1a:bd:39:c6:fa:eb:
e6:76:a4:1f:a0:da:76:40:58:db:20:d0:7e:26:b9:cb:d1:23:
ce:05:fa:1a:2b:db:f1:88:04:fe:2f:af:b2:3e:63:bd:fc:65:
68:61:ec:a7:12:90:82:0a:7d:35:89:27:87:fd:84:dc:cc:ae:
e0:2c:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:43 2024 by rpki-client on console-ams.rpki-client.org