Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/K4mLQ_eSik1d3zFCBu_2KEGC158.roa
File: K4mLQ_eSik1d3zFCBu_2KEGC158.roa (raw, json)
Hash identifier: O6F/XY5rp7gpTMoEN6Tk6+FMDgGr/HClZr3ELBebPNc=
Subject key identifier: 2B:89:8B:43:F7:92:8A:4D:5D:DF:31:42:06:EF:F6:28:41:82:D7:9F
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 05FBAF0C
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/K4mLQ_eSik1d3zFCBu_2KEGC158.roa
Signing time: Sat 01 Jan 2022 16:01:16 +0000
ROA not before: Sat 01 Jan 2022 16:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47950
IP address blocks: 193.41.244.0/24 maxlen: 24
193.41.246.0/24 maxlen: 24
2a0d:f400::/32 maxlen: 32
2a06:e800::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100380428 (0x5fbaf0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b898b43f7928a4d5ddf314206eff6284182d79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:1f:39:54:cb:2e:66:0b:4a:bf:85:4b:34:
d2:93:0e:d0:a6:4f:6b:dc:4e:75:56:99:08:a4:af:
5a:b9:53:b8:a2:f5:af:4e:9a:71:4b:82:9c:76:87:
c7:c9:53:b8:45:38:16:10:56:27:21:48:1f:52:47:
49:53:c0:32:33:66:be:15:01:8a:e0:1c:13:5d:da:
25:ca:90:a8:42:51:4f:38:b3:ea:74:ca:31:7e:93:
2a:2b:f9:9c:28:99:04:21:a8:37:0f:aa:a5:24:22:
8f:d0:db:ae:f7:6a:99:f2:41:66:08:86:bd:d8:05:
ff:58:8b:7e:7e:ef:69:de:6a:7a:ee:55:20:cb:ef:
a1:62:b2:be:bc:7e:91:17:ce:2f:70:be:6b:6d:27:
10:f4:38:0f:3e:1f:34:6c:b0:a8:44:f3:9e:72:27:
07:2d:d1:ea:01:66:91:73:49:16:5c:55:18:1e:aa:
bc:6c:65:ff:7a:d1:80:e0:9c:dc:7a:2c:07:a0:d0:
6c:d8:1e:df:fa:55:12:cb:9d:7f:66:8a:36:ed:a0:
eb:cd:a7:73:52:96:12:98:dc:72:1f:4b:07:e0:b2:
a8:1b:84:76:97:e9:5f:c1:5f:c3:7e:6f:53:0d:aa:
2e:8a:bf:bd:d3:6a:7b:73:4a:f7:14:11:aa:c5:be:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:8B:43:F7:92:8A:4D:5D:DF:31:42:06:EF:F6:28:41:82:D7:9F
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/K4mLQ_eSik1d3zFCBu_2KEGC158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.244.0/24
193.41.246.0/24
IPv6:
2a06:e800::/32
2a0d:f400::/32
Signature Algorithm: sha256WithRSAEncryption
3c:c3:1a:5c:fa:01:ce:12:ba:a3:f7:d2:a8:2e:5e:35:45:50:
6d:81:16:72:96:37:9f:29:52:41:0f:ed:5d:45:2a:06:fd:11:
be:07:4c:da:e7:25:41:b2:22:6d:84:71:e5:2b:4b:ca:b4:9e:
be:5d:ae:ea:25:e2:ba:fe:64:97:67:cf:21:a3:c9:30:ab:f5:
9a:64:fe:b0:d4:bd:c9:34:60:b5:c1:09:82:d0:9b:73:eb:d1:
fc:ac:c3:08:59:11:77:1f:7b:93:3f:d6:cb:ab:d7:84:23:58:
41:3e:78:04:a5:e1:b8:fe:e3:04:48:88:83:3e:c6:99:ce:75:
c3:63:dd:52:fb:46:48:3f:8c:58:6c:6c:94:90:c0:82:ab:d1:
8a:bc:01:af:a1:d2:30:c2:d6:73:49:6c:4f:cc:e5:07:4c:4a:
07:36:0e:4e:b7:d0:1a:12:28:ca:59:6b:2c:48:52:74:1a:48:
fe:72:de:96:c2:28:6e:b7:48:0d:a1:35:5a:db:14:85:a0:52:
68:79:bf:35:27:34:34:51:ea:87:e4:56:71:2d:c2:50:36:a4:
22:39:03:ad:f8:6c:13:0f:42:8c:e6:97:6b:a5:fd:f8:a4:b1:
6b:cb:8f:fb:32:00:22:b2:ad:51:36:52:5f:33:e6:b4:5e:83:
48:ba:6d:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org