Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/5vc1KLWkT4Ht9g8GGPpdj6ndqno.roa
File: 5vc1KLWkT4Ht9g8GGPpdj6ndqno.roa (raw, json)
Hash identifier: 6R9vOBRRVy5g5wX6uCDOs49KPv13G+U94sYJCzvlBdk=
Subject key identifier: E6:F7:35:28:B5:A4:4F:81:ED:F6:0F:06:18:FA:5D:8F:A9:DD:AA:7A
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 044AA193
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/5vc1KLWkT4Ht9g8GGPpdj6ndqno.roa
Signing time: Sat 01 Jan 2022 07:53:09 +0000
ROA not before: Sat 01 Jan 2022 07:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9183
IP address blocks: 193.108.217.0/24 maxlen: 24
194.39.218.0/23 maxlen: 24
139.15.0.0/16 maxlen: 24
193.141.57.0/24 maxlen: 24
2a03:cc00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71999891 (0x44aa193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 1 07:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6f73528b5a44f81edf60f0618fa5d8fa9ddaa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:b6:09:20:a7:86:58:93:9a:c0:af:90:b3:
ae:37:33:b1:0c:8f:f5:5f:e7:02:d9:8c:ad:f7:d5:
f1:95:69:48:e1:28:ec:87:54:ab:3b:bd:69:ae:a7:
ab:a7:d8:4c:20:27:07:f8:68:43:47:e2:92:e2:07:
ad:6b:6b:18:9d:f3:04:0b:7a:0f:4a:e7:25:bf:63:
93:62:1a:0f:7e:9e:59:a7:5c:ed:cd:73:45:85:ef:
d4:db:ed:91:9f:ae:b4:b2:f2:7e:00:e6:26:c8:ea:
43:d9:9f:7a:ff:52:f5:c8:45:95:90:05:bd:aa:91:
e5:5d:23:64:74:56:d2:77:ec:b0:9b:18:14:9c:13:
0f:b7:7b:46:7e:07:e5:dd:f7:64:02:5e:17:0a:19:
c2:d0:8b:69:82:2c:d1:37:60:fd:79:12:3c:46:d8:
ae:53:0e:45:46:13:63:f6:d0:7c:df:54:ed:bd:eb:
32:d7:c0:2f:ac:cc:b9:fd:a9:a9:e0:db:95:56:5f:
9b:d7:02:22:45:74:1a:30:bd:5a:5e:d0:7d:4e:0b:
81:27:10:b7:94:e6:5c:16:9a:d6:15:8d:3a:2a:85:
7e:ff:5e:4f:dc:48:19:80:b4:ef:b9:74:1a:f4:81:
95:ab:11:e4:b5:80:16:29:76:ec:36:22:db:05:31:
ee:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:35:28:B5:A4:4F:81:ED:F6:0F:06:18:FA:5D:8F:A9:DD:AA:7A
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/5vc1KLWkT4Ht9g8GGPpdj6ndqno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.15.0.0/16
193.108.217.0/24
193.141.57.0/24
194.39.218.0/23
IPv6:
2a03:cc00::/32
Signature Algorithm: sha256WithRSAEncryption
1b:44:ff:91:b4:5c:27:52:fe:f6:1c:9d:89:30:f3:39:f8:51:
10:37:45:71:49:4e:14:d4:ac:25:81:d7:a4:bc:d2:06:30:18:
6b:5f:91:5d:63:3b:eb:bc:65:b9:7c:b6:d8:e1:08:ec:f0:0e:
24:19:96:c6:a5:c4:26:de:ca:12:4e:1c:a5:e0:d2:92:e1:5a:
36:8d:00:da:7d:25:da:37:bd:92:61:49:a3:36:da:79:ff:a0:
b9:19:dc:4d:1b:4c:3d:81:9f:68:d0:90:7f:87:fb:2b:43:d9:
3d:af:a9:51:d3:da:18:e1:d7:85:8a:f7:e7:5a:34:53:40:0c:
71:a9:41:99:2d:ce:3f:87:26:ac:3f:d6:b5:6d:03:af:3a:c8:
5c:a5:c7:a0:a7:83:85:ab:77:e3:a7:1f:d9:d0:7e:43:79:00:
e1:8e:33:40:9c:eb:b5:be:5d:6d:90:cd:59:2c:97:7e:7d:94:
11:f2:e4:cc:02:05:41:f0:73:bd:82:9e:d2:7c:4f:f5:f3:de:
a3:30:70:76:32:2c:77:ca:f3:06:88:50:f8:04:ca:ac:fb:79:
00:21:a9:df:ba:71:48:d9:19:11:da:66:39:a9:fa:e0:f4:c1:
f4:6b:57:b5:38:49:2b:cb:e0:c9:83:07:00:8e:fe:8b:92:9a:
57:c3:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:06 2024 by rpki-client on console-fra.rpki-client.org