Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/T9MXX4uQgngn6jSyWLH9R3RgxIY.roa
File: T9MXX4uQgngn6jSyWLH9R3RgxIY.roa (raw, json)
Hash identifier: G6ULEtzlqlw7MMGe9bkJmmUsl0BM+QijfQw/8oAZlTY=
Subject key identifier: 4F:D3:17:5F:8B:90:82:78:27:EA:34:B2:58:B1:FD:47:74:60:C4:86
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 0585EB44
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/T9MXX4uQgngn6jSyWLH9R3RgxIY.roa
Signing time: Sat 01 Jan 2022 08:52:48 +0000
ROA not before: Sat 01 Jan 2022 08:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.138.31.0/24 maxlen: 32
2001:7f8:56::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92662596 (0x585eb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 1 08:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fd3175f8b90827827ea34b258b1fd477460c486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:b7:ec:d4:0a:0c:f2:bf:07:49:16:22:f8:
e7:56:e7:82:10:74:38:7b:5d:a7:80:f4:e7:aa:d2:
30:94:5d:d2:09:ae:54:e7:5d:75:e1:b6:49:26:62:
a2:ac:2e:3e:8d:99:b0:fb:cf:f5:5d:f9:e3:c7:33:
56:0c:e8:89:99:39:04:7c:38:0e:39:40:ca:a4:89:
76:c2:ca:43:f0:f4:63:20:37:d7:99:e5:21:b9:25:
da:26:76:f7:6d:4d:b3:af:11:92:a5:2d:ad:c1:5e:
48:e3:8d:99:b8:f7:cd:ee:bc:9b:da:84:6f:48:27:
99:a5:c8:55:da:c3:64:1a:58:2c:bb:8a:46:a5:5d:
39:3e:5d:e6:4d:6c:44:e3:74:7a:41:17:25:79:e6:
fa:db:38:da:15:c4:46:41:f3:0a:e3:f9:37:55:6f:
fa:00:8c:d2:b9:9a:a5:8f:f1:d5:76:e1:11:9a:05:
a1:31:4d:b0:56:df:87:cc:31:a5:0c:88:0e:cc:e6:
1c:16:da:26:cb:a2:ad:ed:1d:cf:ab:37:fb:9b:04:
da:f2:c7:7d:50:56:43:9f:7e:43:db:c9:10:5a:0a:
8e:34:02:16:0d:87:7c:a1:f7:c0:ec:bf:41:2c:9a:
0d:53:c2:f3:f7:08:90:fb:0c:59:29:94:91:ed:a6:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D3:17:5F:8B:90:82:78:27:EA:34:B2:58:B1:FD:47:74:60:C4:86
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/T9MXX4uQgngn6jSyWLH9R3RgxIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.31.0/24
IPv6:
2001:7f8:56::/48
Signature Algorithm: sha256WithRSAEncryption
63:bd:be:4e:7c:4c:25:69:bd:a5:08:7a:a9:2f:4a:a9:0f:ba:
d8:f6:da:58:85:35:57:30:81:9b:8f:20:59:f0:4c:3c:be:d7:
0b:51:a9:f2:e9:c3:1d:1a:a7:b4:99:f2:c6:18:c5:d1:b6:e6:
5f:1d:10:80:7e:9d:aa:4e:3d:52:6b:4a:9a:7e:61:7c:f6:54:
2b:b7:86:8f:9a:93:5d:a1:5b:36:69:f0:41:91:17:5d:5c:58:
16:8c:b0:d9:e7:9e:3e:0f:6c:d0:48:56:c0:34:5b:3d:ad:96:
88:08:0e:19:d9:a2:17:be:c9:4f:70:eb:a9:83:cf:c4:fc:10:
d7:ef:94:e0:f6:43:9b:1d:0f:b0:db:6b:f2:07:e4:49:bc:04:
82:ed:8d:8c:49:b2:e8:5f:d3:b1:46:13:36:c1:ef:e4:78:79:
f2:8b:f2:91:b6:35:8f:cd:53:da:9f:af:ae:41:1c:cf:89:b4:
52:86:f4:de:aa:5f:c5:04:a4:27:5b:0d:45:7d:d1:9c:3c:54:
49:22:da:5e:85:44:11:d2:78:25:be:31:65:df:5f:89:91:6c:
f8:55:75:9b:29:35:30:ae:f5:6f:79:aa:40:24:19:81:ec:9b:
44:64:4d:38:47:18:df:f9:bc:0e:3f:e5:c4:a0:59:59:e9:8a:
22:28:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:16 2024 by rpki-client on console-fra.rpki-client.org