Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/lk49BWwDldsZTh96j1fG84z10iY.roa
File: lk49BWwDldsZTh96j1fG84z10iY.roa (raw, json)
Hash identifier: 3ZAAxtHfgLr6x2hHuv5t+aXOMKIBU+Ug/QFb/AXPbEM=
Subject key identifier: 96:4E:3D:05:6C:03:95:DB:19:4E:1F:7A:8F:57:C6:F3:8C:F5:D2:26
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 43C3A0
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/lk49BWwDldsZTh96j1fG84z10iY.roa
Signing time: Tue 22 Feb 2022 09:13:02 +0000
ROA not before: Tue 22 Feb 2022 09:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201299
IP address blocks: 217.198.189.0/24 maxlen: 24
2a11:ffc0::/29 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4440992 (0x43c3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Feb 22 09:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=964e3d056c0395db194e1f7a8f57c6f38cf5d226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:0d:a9:dc:43:dc:77:b8:01:43:93:36:66:
92:6c:a3:77:52:28:f7:79:0c:37:0d:f7:70:9c:02:
4e:a3:39:a1:cc:e0:ad:ae:1e:dd:0b:06:04:82:df:
27:21:49:27:cb:a6:af:c3:ac:8b:41:0f:5d:82:6b:
4f:89:dc:2b:01:5d:9c:a5:d9:55:41:d9:7b:c7:30:
fc:32:64:29:33:1d:f9:5d:c8:1d:24:9f:ee:cc:c7:
f3:e0:cd:86:a4:04:17:20:ea:5f:12:8d:17:f8:e0:
e8:55:09:a4:d2:61:b5:e5:e8:c2:a1:b7:ac:c5:22:
8e:d2:09:65:2b:c9:ae:fe:18:a0:9d:e5:69:d4:a2:
db:0a:76:b5:23:e2:9d:da:00:c4:b3:4f:6f:f7:ff:
4d:8c:cc:0c:82:f0:cd:7d:0d:54:f1:6a:33:d5:1b:
2d:4c:c8:31:ca:e1:ae:b7:39:b7:fb:26:f4:02:b7:
3f:6d:65:ef:60:56:e6:e6:ee:35:1b:d8:74:a0:f4:
24:87:d1:f5:d7:f9:d5:9d:27:91:b2:92:5b:17:44:
28:6d:c6:50:d7:c4:3e:da:2a:e3:b0:67:77:01:66:
c5:94:56:65:b6:88:64:46:48:58:6e:1b:e0:d4:d6:
6f:a4:10:99:6c:da:d9:6e:e0:0f:de:a9:10:23:25:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4E:3D:05:6C:03:95:DB:19:4E:1F:7A:8F:57:C6:F3:8C:F5:D2:26
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/lk49BWwDldsZTh96j1fG84z10iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.189.0/24
IPv6:
2a11:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
14:98:59:e2:d0:58:03:79:b2:ec:d3:7f:a1:17:3f:76:2e:4c:
3f:19:b7:e3:54:af:0f:a1:87:65:b2:a6:10:22:c1:0c:cc:15:
a4:cf:c8:fd:0b:96:09:c5:67:a0:5c:70:4a:27:1a:67:09:a5:
39:74:97:72:d1:d4:70:5f:a5:76:8a:4e:15:6e:42:75:15:fb:
26:8b:f8:ee:94:b9:f4:92:3e:b2:01:ce:58:4e:cf:2a:69:de:
be:6b:0b:28:5a:e0:56:b6:6e:6a:d6:3d:7b:b5:3c:4d:9b:19:
77:ca:0b:6d:d0:4b:de:0f:43:3b:75:f9:85:ba:91:a4:74:26:
7b:60:77:ec:25:9f:35:92:5b:dd:4a:ec:db:07:53:84:40:5b:
cd:24:a9:06:85:53:d3:26:56:c4:34:fa:fa:88:1a:f4:a5:47:
ad:43:d1:8e:dc:78:50:33:06:1c:4d:68:78:9f:6c:f2:68:7b:
e2:92:e9:09:81:d9:a3:24:4e:b0:80:b1:09:79:c3:63:e4:59:
5e:0f:7b:54:21:5e:3b:2d:f5:dd:d2:4f:e4:c1:a8:b4:a1:34:
21:5f:bf:ba:58:d1:cb:49:05:e0:fa:37:43:50:be:b2:40:9e:
c2:63:33:ff:2a:c8:0a:c2:da:05:e8:ef:7d:5b:bb:9e:9b:8b:
7e:da:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-fra.rpki-client.org