Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/_qF-uvhePut7qdRkfbnpcFfSs5s.roa
File: _qF-uvhePut7qdRkfbnpcFfSs5s.roa (raw, json)
Hash identifier: XokMmC3/Rvosl9vRfdEZsZtsiZrST9xK2MD2HgoRJjI=
Subject key identifier: FE:A1:7E:BA:F8:5E:3E:EB:7B:A9:D4:64:7D:B9:E9:70:57:D2:B3:9B
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 096E931F
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/_qF-uvhePut7qdRkfbnpcFfSs5s.roa
Signing time: Wed 01 Jun 2022 15:08:41 +0000
ROA not before: Wed 01 Jun 2022 15:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 193.164.4.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158241567 (0x96e931f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jun 1 15:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fea17ebaf85e3eeb7ba9d4647db9e97057d2b39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:fe:9a:6b:07:73:07:f9:80:5f:ad:e0:73:
93:f1:9d:e0:ad:62:eb:1e:b1:c0:78:a1:5f:22:62:
18:26:91:fa:23:ac:bf:42:e4:b2:f9:d9:a6:5e:91:
16:64:b9:a7:c3:43:59:ad:ea:dc:b0:41:da:5e:dc:
53:8c:87:7d:66:eb:6c:06:c0:86:83:83:78:5d:9d:
7a:4c:fc:4d:12:83:fe:78:d4:4c:c3:82:59:c5:a6:
aa:4f:af:8e:6d:fa:45:18:e4:2b:d3:92:14:ac:64:
12:fd:30:45:f1:a4:1e:4b:d1:b6:76:4d:33:1a:8d:
37:b5:d6:2b:82:31:20:f7:4c:72:f0:39:b1:4b:9a:
c2:57:90:ae:4d:02:74:cf:e1:8e:e9:e8:1f:f9:2a:
9c:36:9d:da:c1:82:f4:71:35:f6:4f:c4:33:90:89:
24:cc:d6:62:71:4e:43:56:be:aa:86:a6:0e:fd:b8:
59:79:a9:7a:ff:f3:c6:96:83:f1:ea:08:9c:00:82:
b4:ba:18:6e:9a:ab:32:5c:30:46:9e:72:81:ad:68:
fe:64:c4:63:cf:39:3a:10:b8:63:dc:b4:99:ba:3b:
03:f1:88:a5:96:86:88:ae:9d:b8:56:d8:2c:32:4c:
a3:06:b2:51:26:36:48:78:f0:ef:3a:a8:3b:fd:87:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A1:7E:BA:F8:5E:3E:EB:7B:A9:D4:64:7D:B9:E9:70:57:D2:B3:9B
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/_qF-uvhePut7qdRkfbnpcFfSs5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.4.0/24
193.164.6.0/23
Signature Algorithm: sha256WithRSAEncryption
39:6e:f3:f6:92:01:3b:7a:f0:2b:ad:4b:00:7d:c6:59:b2:8b:
a9:32:7e:33:46:8f:3a:32:dd:89:5e:74:23:03:81:21:b7:1d:
2c:99:a8:de:89:16:0e:3c:4b:52:9e:0a:a4:42:c0:06:b8:73:
dc:49:a6:16:b2:ce:f1:36:00:39:31:54:78:1a:ba:f7:d4:4f:
c7:c1:80:15:a2:72:03:20:92:38:00:fe:14:75:98:b9:0e:ea:
cc:3d:71:97:15:67:96:cc:48:b8:51:a8:56:68:c8:85:40:6d:
3e:55:cd:1e:8b:7b:c7:a1:6e:de:db:f7:51:52:6a:ec:c3:b6:
51:25:a7:71:fc:f8:25:8e:fc:9c:fe:4c:1c:41:cf:78:8d:1c:
cc:6c:51:05:ff:b4:10:43:6d:18:bc:93:e6:f3:37:6f:40:32:
82:59:89:d9:12:05:a3:29:82:f4:2a:b5:0f:e7:e6:6c:8d:e6:
3b:23:60:ce:97:8b:58:68:8c:b4:1d:00:8b:18:d6:ac:4d:bb:
c2:b6:34:14:f0:04:58:3b:d6:dc:1f:38:13:56:2e:9a:dd:cc:
96:20:d1:65:e4:7b:5c:cf:25:b5:10:be:8d:8b:ea:72:33:f1:
bf:3e:b3:38:0f:86:90:b8:5e:bc:68:39:28:a0:1a:91:d1:93:
3e:bf:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org