Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1KmeL-ReCno6rkLxdNr8pQUr4xk.roa
File: 1KmeL-ReCno6rkLxdNr8pQUr4xk.roa (raw, json)
Hash identifier: zZLJ/jzZFoFCfV+GbCqNMcl+A205UjzUMD+9eGfOvWs=
Subject key identifier: D4:A9:9E:2F:E4:5E:0A:7A:3A:AE:42:F1:74:DA:FC:A5:05:2B:E3:19
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0182D0E04999D19C4A38512E4156B296B0DC
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1KmeL-ReCno6rkLxdNr8pQUr4xk.roa
Signing time: Wed 24 Aug 2022 17:22:15 +0000
ROA not before: Wed 24 Aug 2022 17:22:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 193.38.54.0/24 maxlen: 24
193.38.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:e0:49:99:d1:9c:4a:38:51:2e:41:56:b2:96:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Aug 24 17:22:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a99e2fe45e0a7a3aae42f174dafca5052be319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:78:99:af:35:ea:9c:76:a3:16:b6:6e:e0:
5c:b2:52:d2:db:cf:72:08:ee:ee:4d:2d:ba:35:0c:
12:b6:16:f4:a4:ac:c1:2d:12:8a:b9:10:ca:e1:80:
6e:5c:60:32:c4:96:24:41:fc:cf:bf:5b:c8:e5:03:
74:20:f0:bb:6d:75:a1:58:53:5c:e8:08:3a:24:20:
72:ab:c0:10:24:24:3a:37:cc:49:58:01:9d:f2:3e:
1c:e8:f6:1e:50:ea:87:b2:f5:8f:6e:55:37:56:a8:
fd:b9:97:26:ad:9c:8d:cf:29:7d:8b:be:d0:f4:32:
0f:39:43:b3:4f:e1:ff:e3:04:7a:2f:99:97:12:98:
5f:be:6c:7c:f4:0a:a5:e9:f5:e7:f6:b7:4f:b4:e0:
75:be:bf:62:ce:d4:d9:7c:a3:83:08:ec:5e:a7:af:
a5:17:70:a0:e2:79:2d:18:3c:29:23:68:92:d3:4d:
f6:37:ce:2d:40:ec:fa:87:69:36:e1:45:bd:0a:6e:
0e:9b:5f:23:1a:dc:89:ea:15:ce:b4:e4:0c:0f:03:
e2:f4:c6:7a:99:89:76:02:78:7a:09:0b:0e:1c:52:
48:4d:ea:c8:a2:88:92:7a:49:f9:c4:0e:37:69:ef:
e5:58:55:61:d4:00:a6:dc:37:0f:91:98:f7:bf:02:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:9E:2F:E4:5E:0A:7A:3A:AE:42:F1:74:DA:FC:A5:05:2B:E3:19
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1KmeL-ReCno6rkLxdNr8pQUr4xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:5b:c7:70:72:36:db:d5:5d:13:93:d3:31:f1:2e:97:9b:c4:
7c:3e:93:73:00:13:7e:be:c6:c2:66:4e:58:97:6e:08:ac:e4:
19:79:cd:1c:cc:09:e3:1c:6a:1d:58:4a:96:39:61:5e:91:c9:
a7:00:dd:94:bc:33:09:d2:ef:ef:ac:42:e0:90:58:3a:0a:64:
f0:bd:f2:19:0b:4e:23:0b:59:4d:f7:3d:da:4b:62:c3:2b:03:
45:1c:15:ff:47:af:84:d0:03:23:ba:b1:da:ba:8e:f9:5e:ff:
42:36:35:f6:c7:99:58:a4:59:51:8e:7c:05:36:5d:16:81:8d:
fb:fd:8c:86:f5:e1:14:97:49:48:a1:57:b6:7f:0f:f7:2e:27:
24:dd:91:85:9b:40:be:09:1e:a3:f9:40:01:35:fd:1f:17:59:
26:31:81:ea:0f:71:4b:c1:46:29:f1:29:9e:0a:d4:2c:ed:60:
c1:a3:07:d8:ef:57:ec:88:13:e5:4c:5d:9f:37:e9:0a:7b:83:
77:d3:2a:3c:2a:b1:9a:bd:0c:b2:4e:2c:d6:02:e4:54:9e:d4:
97:eb:f6:af:da:67:f1:9b:6e:6c:8a:2f:86:75:ac:4f:c0:d6:
71:13:f7:29:f6:f5:ab:6a:36:12:50:85:ea:4a:2a:f7:a1:70:
1f:a3:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-ams.rpki-client.org