Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/D3SvXO2AKaeY06bEOqW3Nj-zH-Y.roa
File: D3SvXO2AKaeY06bEOqW3Nj-zH-Y.roa (raw, json)
Hash identifier: 0aoYhxFaH+x4frfZiRxJlIvt3crpWdheql0NB0iNVn8=
Subject key identifier: 0F:74:AF:5C:ED:80:29:A7:98:D3:A6:C4:3A:A5:B7:36:3F:B3:1F:E6
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13CE96A1
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/D3SvXO2AKaeY06bEOqW3Nj-zH-Y.roa
Signing time: Fri 18 Feb 2022 23:37:22 +0000
ROA not before: Fri 18 Feb 2022 23:37:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 188.253.1.0/24 maxlen: 24
193.36.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332306081 (0x13ce96a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 18 23:37:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f74af5ced8029a798d3a6c43aa5b7363fb31fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:42:95:a9:1e:17:20:e1:25:67:67:87:9b:
10:6b:50:62:de:2b:9a:7c:ce:30:07:f9:9b:4b:d7:
c6:6c:05:17:39:78:0a:74:69:91:8e:4e:42:16:c5:
a9:20:f6:9a:36:73:c0:0c:6e:19:29:5a:2d:94:a9:
a6:84:0c:bf:1a:2c:46:cd:59:88:06:31:0f:5b:02:
c2:d9:82:94:96:c0:43:76:16:aa:72:79:72:38:fa:
58:22:c2:92:81:29:f2:90:d1:38:af:56:b5:45:36:
4e:48:72:4c:85:d5:2d:7c:9a:d6:47:ee:63:ed:c1:
18:0e:65:ef:1b:8b:70:c8:3d:d0:d4:68:8a:62:d6:
4b:d0:a4:f2:0f:f5:d4:fb:d2:97:43:5b:3d:31:3c:
84:82:1c:f5:d7:ed:cf:a5:36:7b:4a:6e:4b:c7:f2:
3d:d1:51:bb:5d:fe:93:07:b3:ec:c8:4c:c3:e3:0d:
a8:87:96:de:e7:ba:37:b2:07:47:88:f2:d3:97:8e:
b6:39:cb:3d:47:42:f6:b0:84:0b:c1:89:31:da:ed:
c7:85:98:04:77:0b:e9:3a:8c:c2:14:0c:6e:22:75:
d9:2d:3e:f3:c8:79:85:9e:49:2b:8d:d6:70:c0:b5:
c8:9a:60:63:22:77:60:fd:e1:57:89:c0:84:c9:95:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:74:AF:5C:ED:80:29:A7:98:D3:A6:C4:3A:A5:B7:36:3F:B3:1F:E6
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/D3SvXO2AKaeY06bEOqW3Nj-zH-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.1.0/24
193.36.72.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4e:de:b9:90:87:65:4d:53:f6:58:f1:fb:67:20:3f:0f:5f:
88:9f:0c:1b:88:5c:a5:89:d0:1c:0b:51:b3:d7:62:60:2e:c8:
33:44:dc:b3:9f:e3:6e:05:68:e8:ce:f9:74:c4:42:4f:43:28:
f4:24:09:4d:08:df:81:6a:85:9f:99:81:a0:e9:5a:73:2d:f9:
0e:31:d3:d7:20:53:09:a7:af:27:71:04:c9:4d:97:e4:c6:27:
37:e4:a6:0b:a4:4f:c4:75:ac:f1:b3:2f:f2:07:c0:35:b8:ff:
0b:aa:38:5e:cf:b9:95:65:26:bd:5e:62:96:8d:44:09:a6:12:
55:3d:6c:6a:d9:5e:cb:aa:be:04:86:2e:b1:bb:f0:aa:84:ac:
d3:9e:44:b3:0f:8a:88:ca:ef:ed:b7:b9:ad:8c:bd:27:b9:3d:
fe:41:93:d8:92:7e:30:a0:2c:3d:f0:16:c1:87:b2:03:e1:4b:
0e:f6:4d:53:9b:a3:5c:db:ff:b2:09:ef:79:67:ac:9d:85:60:
34:2f:56:3a:44:0f:ef:bf:ce:14:b7:77:0c:0c:e4:8a:e9:6c:
ee:75:e1:af:19:2c:a7:bf:c4:4d:65:a1:30:fc:d0:1f:38:39:
e5:40:d3:a7:df:19:90:c1:56:2a:a9:c6:6e:6d:39:45:1d:1a:
6e:5f:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org