Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/UG2KRQwvjM6aoulFC1xhQ3dB6-I.roa
File: UG2KRQwvjM6aoulFC1xhQ3dB6-I.roa (raw, json)
Hash identifier: PcSdDsULmD401EQnof8jLKWUGnYK9Mm/VOVmLmrhYv8=
Subject key identifier: 50:6D:8A:45:0C:2F:8C:CE:9A:A2:E9:45:0B:5C:61:43:77:41:EB:E2
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 714DC8
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/UG2KRQwvjM6aoulFC1xhQ3dB6-I.roa
Signing time: Sat 01 Jan 2022 03:02:47 +0000
ROA not before: Sat 01 Jan 2022 03:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61003
IP address blocks: 193.108.117.0/24 maxlen: 24
193.108.118.0/24 maxlen: 24
193.108.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7425480 (0x714dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Jan 1 03:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=506d8a450c2f8cce9aa2e9450b5c61437741ebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:13:d3:4b:22:03:8a:ee:fc:99:6e:29:64:
49:95:78:f0:cb:3c:5f:d7:26:91:e8:dc:0c:01:4c:
7f:cc:63:ce:6e:f9:fe:8b:22:d7:4a:df:39:5e:6c:
06:3f:a6:48:d4:9f:e1:d4:3a:8c:6b:f9:79:23:26:
c7:98:73:cd:1c:82:2c:66:45:c1:12:be:ff:5b:ab:
dd:d1:92:6f:2f:5e:84:d6:38:be:00:cb:b2:7b:a2:
a1:8f:82:86:8e:21:c0:18:42:d9:36:12:06:a0:16:
e4:3f:11:ee:9d:f2:ba:f2:f5:fc:2c:dc:78:92:68:
16:e2:f6:5e:ed:5a:c2:0a:47:69:74:b9:d1:64:5d:
80:eb:2b:e8:a9:6e:5b:5d:ff:2c:ad:19:5b:b6:5c:
33:d1:12:97:e5:44:d3:34:f7:e2:24:bc:37:c2:d8:
47:07:d4:0d:b2:fa:75:e8:b0:bc:20:6d:04:80:e3:
99:e9:ce:41:ef:a7:17:f2:74:09:ad:8c:aa:0d:e3:
43:ae:e5:ef:34:e8:fc:87:a3:84:a4:b3:97:3d:22:
19:00:34:f7:f3:57:6e:0b:e5:2b:e2:24:0c:98:54:
fc:98:2c:5e:5e:48:50:b0:1a:5f:a8:c9:fe:a1:0a:
00:10:e2:68:47:16:20:e4:02:fe:8b:30:28:67:bf:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6D:8A:45:0C:2F:8C:CE:9A:A2:E9:45:0B:5C:61:43:77:41:EB:E2
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/UG2KRQwvjM6aoulFC1xhQ3dB6-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.116.0-193.108.118.255
Signature Algorithm: sha256WithRSAEncryption
00:8b:e9:56:45:c6:3d:58:5d:f4:c8:03:04:db:2f:6c:26:5e:
bb:64:99:95:6e:f5:8e:e2:08:f3:b8:83:73:30:12:41:24:cb:
19:d7:8b:e5:71:d3:fb:34:9f:19:87:06:6b:2d:75:41:05:dd:
c2:88:5c:b3:46:87:7e:2d:d0:a6:27:4e:01:8b:ad:64:2d:54:
8c:dc:7d:50:d9:a2:99:a6:43:0f:f1:dc:b5:18:c1:d9:d8:e9:
c1:21:d9:69:b8:84:00:9b:72:c2:84:43:91:23:28:b2:5e:31:
22:a9:47:40:6e:57:5c:cf:81:7c:1c:a9:67:00:8c:e8:59:ab:
34:fe:1d:c2:5c:50:c8:b9:18:19:91:22:26:bf:a4:29:25:a8:
40:86:77:8e:dc:9c:29:81:e5:8e:35:1b:65:20:51:c8:af:e3:
dc:d3:22:ac:7b:ef:8a:e5:7d:d5:13:18:54:f0:dd:02:28:cf:
45:9b:d4:b9:2f:21:f2:4f:21:1a:bd:9a:28:ce:ce:82:a3:e2:
2a:f7:f4:51:51:57:d7:64:03:e8:8e:75:e5:f0:22:be:e8:9d:
ec:45:9a:2a:6e:51:5f:ca:fe:87:d6:a0:21:41:e5:35:26:3e:
ee:96:18:e8:fc:40:70:db:00:bf:2b:a6:68:6d:0e:93:b1:6a:
70:50:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:21 2024 by rpki-client on console-ams.rpki-client.org