Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bX7ZgeSMYTtPd9WvWU4QuGV6XiE.roa
File: bX7ZgeSMYTtPd9WvWU4QuGV6XiE.roa (raw, json)
Hash identifier: rAGYlQQCv1QWjU6cnAx21mB3bSOoCOznhCppyS6I2Y4=
Subject key identifier: 6D:7E:D9:81:E4:8C:61:3B:4F:77:D5:AF:59:4E:10:B8:65:7A:5E:21
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1468EA4F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bX7ZgeSMYTtPd9WvWU4QuGV6XiE.roa
Signing time: Sat 02 Apr 2022 04:30:05 +0000
ROA not before: Sat 02 Apr 2022 04:30:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 193.36.73.0/24 maxlen: 24
193.36.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342420047 (0x1468ea4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 2 04:30:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d7ed981e48c613b4f77d5af594e10b8657a5e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:23:e5:cd:07:1b:e8:35:ef:1b:1b:84:81:
e4:a0:23:1f:c9:5e:4b:9b:14:22:90:89:b1:47:af:
e8:c4:55:fc:da:5e:3f:de:5a:1b:b6:e5:82:2f:24:
08:01:1b:22:50:eb:bf:f5:0c:93:21:0b:76:2c:6d:
95:5d:10:77:d5:66:3e:3b:f2:69:22:ee:08:6e:70:
1e:4c:2f:9f:d9:71:36:e0:ca:81:62:99:75:68:1e:
ab:63:aa:0c:cd:54:54:f6:ad:b1:24:2c:1f:19:e1:
ce:4b:81:c0:79:00:69:d9:27:78:4d:70:5b:29:c7:
16:f5:78:7f:80:7a:70:cc:63:14:2f:f3:04:1d:65:
27:58:53:79:ce:a2:a5:58:92:52:95:0b:e8:d9:2d:
26:bf:46:80:98:06:bd:74:ac:c6:bb:8a:4b:c9:ba:
98:e1:e7:60:60:3d:4f:ff:dc:00:7e:18:0a:3e:99:
ee:52:e9:e6:4c:d7:df:53:49:b5:e8:66:ee:7f:91:
40:aa:0c:9a:c4:06:f0:50:dc:ce:b2:19:4d:a7:d1:
d1:3c:2f:68:07:86:af:a8:0d:c1:d2:44:89:f1:d2:
b7:c0:69:b4:3c:cc:69:99:51:2b:75:59:5c:71:5a:
b5:82:da:aa:5a:d5:d0:a2:b7:39:4c:e0:4d:40:57:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7E:D9:81:E4:8C:61:3B:4F:77:D5:AF:59:4E:10:B8:65:7A:5E:21
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bX7ZgeSMYTtPd9WvWU4QuGV6XiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.73.0/24
193.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:09:4c:b2:d6:95:a7:87:06:6d:49:49:28:6d:56:d0:1c:7a:
64:6b:38:09:09:13:77:57:9a:6a:85:cd:00:b9:14:45:19:d0:
4a:d2:89:15:bb:64:9e:d1:06:23:6c:ec:06:0f:87:e3:0c:80:
50:55:bb:38:0f:1a:e4:9c:ab:e6:98:b2:e6:20:a6:cd:fc:59:
86:69:e4:85:ec:e7:c7:df:0b:3f:e2:41:4a:a8:b7:d1:e7:f3:
91:19:d4:29:55:3b:fe:04:d6:57:c0:5e:c8:bb:66:dc:a7:58:
3a:49:8c:ee:22:c7:43:40:56:58:ff:4f:d8:3c:d1:ce:88:d2:
7b:4b:58:65:6f:16:47:14:08:73:fd:c2:c7:d9:2f:d2:71:37:
a4:95:3b:d4:58:91:11:15:e4:59:94:0d:ae:1c:cb:03:4d:5e:
f8:e6:c4:4d:c7:ae:58:3e:5b:6d:f8:db:70:22:4f:61:a9:20:
f7:dc:a8:23:78:d6:3d:7d:e3:3d:e9:13:46:60:6f:42:8b:30:
68:10:56:10:e6:03:dc:da:7a:53:63:4b:bd:39:0b:5d:ed:ec:
f1:14:21:19:ef:ed:3d:4b:58:42:25:64:ee:f4:45:8d:7a:50:
e5:c0:86:e1:7d:91:d8:be:cb:17:19:8f:28:d9:cd:47:26:45:
03:5e:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org