Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/xjgtPB_RjNd9kqlaiPh8DegeZus.roa
File: xjgtPB_RjNd9kqlaiPh8DegeZus.roa (raw, json)
Hash identifier: q2BRfVZp48PE+StGZAJaZRMIMwqbtEtv3B3ebxX5/ds=
Subject key identifier: C6:38:2D:3C:1F:D1:8C:D7:7D:92:A9:5A:88:F8:7C:0D:E8:1E:66:EB
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 32614D
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/xjgtPB_RjNd9kqlaiPh8DegeZus.roa
Signing time: Thu 16 Jun 2022 08:30:44 +0000
ROA not before: Thu 16 Jun 2022 08:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31424
IP address blocks: 195.191.132.0/23 maxlen: 23
193.17.194.0/24 maxlen: 24
2001:67c:358::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3301709 (0x32614d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Jun 16 08:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6382d3c1fd18cd77d92a95a88f87c0de81e66eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:af:cb:92:7e:5d:6d:a0:dc:74:4e:d8:cf:
1f:45:58:34:d2:a5:b8:db:fc:67:3b:0a:05:40:7a:
f2:35:37:e7:6e:8e:b0:c5:66:7e:c6:af:ce:99:be:
c1:8b:2b:1c:b2:51:7c:0d:2e:1f:10:9b:8e:35:cc:
88:c0:ae:65:bb:ee:db:fb:15:e2:09:04:35:dc:d3:
68:b7:6f:56:d5:b1:9f:08:2e:60:bb:c1:4f:24:88:
4b:2e:03:64:5d:51:ee:d6:07:90:08:4a:ce:02:76:
2c:44:ea:28:98:8a:5e:9b:1f:30:40:23:95:57:1c:
e8:2e:3f:a8:15:3c:60:b8:2e:d3:37:ce:76:d7:76:
6f:41:1f:cb:4e:c0:a3:81:71:af:8b:6c:52:c2:2e:
12:5b:0f:c3:d9:ea:44:80:ce:58:f7:9e:07:52:e0:
cb:1e:de:8b:6f:bf:73:bd:03:de:dc:a8:b2:f2:b5:
dc:89:31:6d:c7:6a:7c:61:fd:ed:d5:2d:7d:f4:26:
f1:38:c1:27:6b:dc:1b:20:49:d2:aa:c2:0b:78:6a:
34:e9:20:a0:59:5f:55:d7:32:9f:8f:6f:51:7c:f4:
ad:39:6b:a1:d1:67:60:a5:3e:9f:6f:93:a3:7b:73:
ce:be:b5:97:70:25:8a:4d:10:9b:78:85:3e:56:b2:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:38:2D:3C:1F:D1:8C:D7:7D:92:A9:5A:88:F8:7C:0D:E8:1E:66:EB
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/xjgtPB_RjNd9kqlaiPh8DegeZus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.194.0/24
195.191.132.0/23
IPv6:
2001:67c:358::/48
Signature Algorithm: sha256WithRSAEncryption
41:93:e9:38:0b:97:15:6e:55:28:2b:a4:42:d4:59:4d:55:e0:
cd:5c:2c:9b:9f:0a:c9:18:09:5c:0b:3f:2d:c2:b5:f8:54:84:
93:af:db:61:d9:25:d9:c4:d2:36:dd:65:37:7d:6a:18:84:06:
0b:54:cd:ac:ae:de:d5:b7:44:dc:30:6c:f5:91:70:ce:53:fd:
9f:1f:95:af:fb:16:b2:6a:1c:3e:36:73:42:d1:65:09:2f:9c:
3e:17:8a:7d:b8:a9:b0:00:f4:ab:96:24:fb:c0:db:17:35:9c:
83:6b:fd:f3:88:f7:1c:4f:43:32:ba:2c:2a:a8:d2:ea:eb:ac:
08:98:fb:32:35:b2:f1:08:a0:80:a0:b9:4f:28:af:e6:ec:bd:
4c:89:ea:36:10:08:8e:24:11:04:3c:8d:5d:32:43:37:fa:0f:
a4:eb:b7:04:79:75:fa:5a:f7:46:a7:84:5c:d6:db:d0:73:6a:
51:d8:24:95:11:d8:7d:17:dd:0d:2a:b7:95:2e:6a:05:18:3e:
1d:14:d6:a4:6a:e5:95:c4:aa:5a:2d:20:40:9a:c5:8c:14:f7:
97:88:e3:38:b9:ea:fb:80:8d:ca:28:41:94:8d:7e:50:f7:f0:
45:77:44:d7:4c:14:9b:81:1b:99:e3:b0:bb:12:e3:8b:ff:a8:
1a:47:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-fra.rpki-client.org