Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/0RKINMtBnxWY_tdIvjmk8COFMpY.roa
File: 0RKINMtBnxWY_tdIvjmk8COFMpY.roa (raw, json)
Hash identifier: 323ryL8KmeASHQ5nqrwXnIlZDI3Bus2kHSFphP0MEK8=
Subject key identifier: D1:12:88:34:CB:41:9F:15:98:FE:D7:48:BE:39:A4:F0:23:85:32:96
Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial: 03922B91
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/0RKINMtBnxWY_tdIvjmk8COFMpY.roa
Signing time: Sat 01 Jan 2022 07:54:59 +0000
ROA not before: Sat 01 Jan 2022 07:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42510
IP address blocks: 193.106.58.0/23 maxlen: 23
193.106.57.0/24 maxlen: 24
193.106.56.0/22 maxlen: 22
193.106.56.0/24 maxlen: 24
193.106.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59911057 (0x3922b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Validity
Not Before: Jan 1 07:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1128834cb419f1598fed748be39a4f023853296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:c5:cf:75:ee:72:1b:7f:a7:3f:b8:8a:93:
80:4a:bf:66:0b:91:b7:e5:f5:b6:bf:02:27:2c:37:
1e:07:de:a8:31:cb:c1:35:1d:fc:3d:5f:99:80:7a:
c8:7d:a0:00:83:3b:3d:b5:e7:db:e7:af:77:7d:3d:
82:6a:45:1b:97:14:2f:67:6e:4c:23:ec:45:ac:f8:
d9:a5:9c:30:e9:bc:64:7c:a4:be:7b:82:f2:da:f6:
b2:62:92:a1:9f:4f:99:5a:b7:4f:be:bb:bb:3a:32:
6c:5c:ce:f5:e3:76:1c:46:07:9c:36:69:19:54:4a:
ee:3c:5f:0d:6e:01:06:9c:5c:e2:70:c3:24:0a:de:
af:63:77:f6:2e:d0:41:53:e7:ee:51:fc:86:81:9b:
90:ea:0e:e2:e9:f2:7e:7a:e0:81:92:b6:d3:44:a4:
95:40:e3:04:d5:78:26:28:24:4d:b6:b2:b2:56:ee:
87:63:1d:ba:54:a9:3f:39:c4:38:8f:e1:f7:ae:d1:
e5:df:ef:2e:ec:19:54:e9:05:e6:a2:9e:f6:ca:4f:
b7:33:bd:3d:46:5e:a0:38:4a:e0:f2:ce:8e:95:dd:
0e:2c:65:51:d7:29:ae:72:5e:63:68:bc:42:15:9d:
80:5b:9c:3c:3b:cd:cb:59:c9:74:aa:48:49:fe:10:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:88:34:CB:41:9F:15:98:FE:D7:48:BE:39:A4:F0:23:85:32:96
X509v3 Authority Key Identifier:
keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/0RKINMtBnxWY_tdIvjmk8COFMpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.56.0/22
Signature Algorithm: sha256WithRSAEncryption
56:8b:eb:75:12:01:26:3d:08:37:15:d1:94:52:b2:82:6c:3c:
94:ae:9b:3a:b1:e2:b9:06:8b:a5:7a:c7:cb:79:4d:a9:8e:82:
69:11:39:09:1b:0b:1d:49:7e:84:fc:dc:52:98:28:c9:45:12:
60:6b:43:5a:c4:de:34:ac:2c:3e:91:f3:0c:15:33:00:5a:6e:
a2:0a:d2:62:a1:62:47:98:24:bc:03:ff:59:34:21:2a:18:2e:
72:7d:2f:65:ed:5b:8d:05:fb:b3:3b:bd:2a:d5:3d:82:3f:d4:
cb:5d:5e:a0:03:eb:10:81:6d:f8:bf:cf:41:2e:0f:6c:d8:ba:
26:3d:96:8f:f0:16:41:b6:04:72:7e:7d:72:6b:20:ea:a4:22:
bb:81:90:42:68:2e:bb:e9:59:b9:ae:82:ea:9a:84:17:59:37:
e6:dd:94:7f:31:ee:93:b6:12:66:c0:38:e1:26:87:64:94:59:
79:25:04:41:5f:90:ca:73:93:08:9f:91:f5:71:96:52:f4:5d:
9e:40:8a:80:b5:83:7a:41:14:06:8f:6b:76:27:d9:42:15:92:
c2:01:5b:59:85:b8:f8:3e:60:8d:41:8e:0c:81:35:e7:22:36:
92:c1:cc:6a:71:26:df:b8:9d:28:52:da:ce:e5:d6:20:23:a8:
b3:0c:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:39 2024 by rpki-client on console-ams.rpki-client.org