Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/wvvSF74o2YlMZQNLqQYB0sAsbhk.roa
File: wvvSF74o2YlMZQNLqQYB0sAsbhk.roa (raw, json)
Hash identifier: 5WviUnILaX6Ie9pM1APjB/QNDN1umMkqhY3URqFTnpo=
Subject key identifier: C2:FB:D2:17:BE:28:D9:89:4C:65:03:4B:A9:06:01:D2:C0:2C:6E:19
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 173E3DBF
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/wvvSF74o2YlMZQNLqQYB0sAsbhk.roa
Signing time: Sat 01 Jan 2022 07:53:07 +0000
ROA not before: Sat 01 Jan 2022 07:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9201
IP address blocks: 193.241.128.0/18 maxlen: 18
193.241.32.0/19 maxlen: 19
193.241.64.0/18 maxlen: 18
193.241.192.0/18 maxlen: 18
193.241.0.0/19 maxlen: 19
2001:67c:2c74::/48 maxlen: 48
2001:67c:2c70::/48 maxlen: 48
2001:67c:2c78::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389955007 (0x173e3dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: Jan 1 07:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2fbd217be28d9894c65034ba90601d2c02c6e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:67:b3:56:73:59:35:c1:b2:d0:1b:50:cc:
f7:0c:aa:2b:b8:9d:a2:64:77:ae:9c:54:c2:ab:96:
71:3a:04:4d:7f:24:a5:b5:9f:97:64:ec:7d:c0:f3:
d4:be:ef:f3:8e:b1:36:b4:d2:97:0d:f2:38:8d:d3:
a6:8f:b3:6c:03:8d:76:55:92:f3:d7:5e:e0:fa:74:
c8:7c:19:9d:09:2f:41:e7:16:54:b6:84:51:39:24:
1b:2b:99:cc:b8:30:c7:4b:a1:c0:53:63:3c:8b:f7:
36:fc:e6:f7:6a:38:85:32:38:89:14:54:d9:27:b4:
d9:ce:c1:72:b1:28:62:a2:c7:a7:8e:be:29:38:2f:
03:6e:3a:20:12:87:52:d7:60:9a:77:5b:3e:74:ca:
d9:b1:bc:58:65:28:d1:2a:0c:2e:f6:98:58:2c:1a:
5e:b3:e3:d1:66:39:b6:dd:79:59:d1:c6:68:f6:3b:
a9:a7:4e:fd:b8:3b:82:25:a3:82:ef:2d:8c:5e:9e:
79:89:87:b3:f4:e5:02:8a:bd:89:e1:73:fd:56:76:
c5:9e:b4:36:7f:31:b4:85:38:64:8b:6b:af:1d:19:
04:53:cc:6e:bc:06:e4:68:4a:a3:b0:35:54:e9:3e:
f6:e9:dc:61:f7:71:24:6b:7d:a1:6e:bf:8c:d2:f0:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:D2:17:BE:28:D9:89:4C:65:03:4B:A9:06:01:D2:C0:2C:6E:19
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/wvvSF74o2YlMZQNLqQYB0sAsbhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.0.0/16
IPv6:
2001:67c:2c70::/48
2001:67c:2c74::/48
2001:67c:2c78::/48
Signature Algorithm: sha256WithRSAEncryption
49:c1:93:e4:b8:b4:3c:9f:fb:28:14:44:b1:ef:82:0b:74:75:
60:06:bd:27:9f:2c:4c:cd:52:c6:ef:bc:33:e6:00:87:66:14:
b6:9f:8c:ea:68:40:f7:40:df:58:17:f9:70:c1:64:ac:24:45:
e4:98:72:f7:c7:10:59:13:31:50:01:b7:0d:3d:97:50:d4:92:
9f:5e:e8:25:09:a0:b2:da:fe:45:b4:eb:3e:5e:ef:fc:4c:e3:
30:af:10:86:c8:84:29:c8:69:23:00:cc:00:a9:41:c7:fe:c7:
11:a7:57:18:1c:3c:a0:9c:49:1f:7e:6f:8d:32:3c:14:b6:db:
d4:f3:c8:24:53:54:9d:dd:80:31:4d:42:ef:39:16:cc:6a:6f:
63:69:ff:2f:21:1d:5c:b9:da:68:4d:08:43:ec:11:aa:23:99:
29:8f:26:dd:e3:7d:94:f4:e7:77:e5:26:04:be:fa:27:40:1c:
68:88:2f:8f:13:21:f0:fe:24:43:17:d2:b1:89:5c:a5:d2:c7:
ac:4d:bf:33:da:4f:f8:35:ee:38:7f:21:1d:30:26:c8:72:20:
44:19:fe:f1:60:7a:45:db:42:65:ac:09:3d:2f:2f:7c:50:5b:
ea:ae:d5:46:8c:e9:2c:7e:3c:0b:18:a2:04:a0:04:a6:d7:c5:
29:40:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:17 2023 by rpki-client on console-ams.rpki-client.org