Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/owXzsBKoX-Tw2CPofzaV28VRmzk.roa
File: owXzsBKoX-Tw2CPofzaV28VRmzk.roa (raw, json)
Hash identifier: yXOgIG7TF6jqaVyyZ8irepXAIG/RC5D8XIXBlF49T7M=
Subject key identifier: A3:05:F3:B0:12:A8:5F:E4:F0:D8:23:E8:7F:36:95:DB:C5:51:9B:39
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0184FD1459A1FC909E5350E03616B16066F2
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/owXzsBKoX-Tw2CPofzaV28VRmzk.roa
Signing time: Sat 10 Dec 2022 17:28:00 +0000
ROA not before: Sat 10 Dec 2022 17:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 193.106.251.0/24 maxlen: 24
193.106.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fd:14:59:a1:fc:90:9e:53:50:e0:36:16:b1:60:66:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Dec 10 17:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a305f3b012a85fe4f0d823e87f3695dbc5519b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:7b:de:ac:52:fd:c7:29:8d:e4:b2:27:78:
fe:0a:97:4e:7b:7d:f3:d7:33:1c:d1:f4:45:0e:f1:
1b:ce:37:32:21:26:0e:cf:4d:1f:40:c1:3d:e0:e8:
b8:39:8f:2f:86:f7:f6:b6:3d:63:2d:43:c7:f7:46:
ba:8f:86:18:73:50:77:df:cc:ec:67:01:9c:5c:b2:
04:0b:09:fe:57:a0:ee:21:f4:2c:95:a5:24:b6:e6:
5e:36:7e:8c:65:3a:44:73:90:c1:2e:12:cd:bd:c0:
22:1a:7a:cf:3b:19:da:1c:36:47:78:c4:ad:31:9d:
11:dc:f8:b7:97:40:f4:84:ab:cd:e1:68:e9:df:59:
6d:10:e9:b3:8c:21:bd:61:33:e0:94:26:f0:dc:5d:
de:df:e2:ef:ed:07:71:ce:34:63:51:5f:01:7c:d8:
ba:b2:81:02:e5:25:36:d7:41:9c:d5:9d:3a:f2:40:
b8:5a:69:ac:15:ce:92:64:71:13:4e:e2:ec:d5:88:
5e:0b:a6:bb:90:e6:84:ec:66:9b:d9:71:87:8f:6b:
53:b3:98:22:4a:98:c6:58:2a:a1:3d:f0:c7:d7:29:
10:bc:8e:32:4a:bf:29:76:ed:97:dd:05:e2:ee:df:
6c:05:c7:c9:8f:a0:2e:ab:8a:ad:8f:b3:4d:13:62:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:05:F3:B0:12:A8:5F:E4:F0:D8:23:E8:7F:36:95:DB:C5:51:9B:39
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/owXzsBKoX-Tw2CPofzaV28VRmzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.249.0/24
193.106.251.0/24
Signature Algorithm: sha256WithRSAEncryption
27:84:28:4e:42:06:25:3f:f0:2d:7a:4b:c4:4e:b4:47:bb:a1:
2d:e2:fa:98:a3:08:f7:14:e3:c0:68:09:a0:44:c0:dc:67:27:
6c:6b:cc:5c:8d:d2:0b:17:92:42:fc:39:6d:58:90:3f:c1:93:
ef:50:12:f9:7a:a9:08:eb:13:6c:a3:98:51:89:7a:6d:cf:d1:
37:6d:99:7f:8d:45:e2:64:3d:4f:bf:df:83:c2:78:53:3e:52:
0f:e5:93:d7:c8:55:09:96:de:b3:ec:a5:37:fa:1d:3f:89:fc:
c3:a6:cb:bd:0c:93:87:5b:09:02:bb:25:fb:e1:77:cf:c0:f7:
93:89:2d:cc:6a:27:e0:5c:63:2c:ec:2a:84:f7:1c:8b:11:d0:
90:55:02:04:45:44:dd:51:19:25:4e:34:3d:02:e7:64:01:5a:
cf:65:02:cd:2c:ac:f9:f3:d0:78:94:9c:f2:09:02:c1:72:7a:
f0:59:9d:bc:84:ba:75:99:f5:3c:f1:9a:53:ff:d0:ea:13:10:
5c:eb:c1:de:d3:1d:f0:dd:69:e2:08:3d:18:85:bc:ca:c7:1d:
27:a4:5e:cd:25:28:33:05:64:05:7a:26:55:1b:ca:e1:e2:15:
2a:d0:da:ad:46:7b:06:88:c0:da:5f:91:94:f1:d9:21:1a:88:
e2:49:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:59 2024 by rpki-client on console-ams.rpki-client.org