Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/yQICAUM5rH-OkcIQ7Bstd8hZ6qA.roa
File: yQICAUM5rH-OkcIQ7Bstd8hZ6qA.roa (raw, json)
Hash identifier: 6QTgQdOWeR0mR+QuugbYwJj1n0tFc8kOsOFsyoDBcEk=
Subject key identifier: C9:02:02:01:43:39:AC:7F:8E:91:C2:10:EC:1B:2D:77:C8:59:EA:A0
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 0A2761C2
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/yQICAUM5rH-OkcIQ7Bstd8hZ6qA.roa
Signing time: Sat 01 Jan 2022 10:01:16 +0000
ROA not before: Sat 01 Jan 2022 10:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43997
IP address blocks: 193.35.149.0/24 maxlen: 24
193.35.150.0/23 maxlen: 23
193.35.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170353090 (0xa2761c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Jan 1 10:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c90202014339ac7f8e91c210ec1b2d77c859eaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:6e:bf:35:65:a2:14:84:c4:79:8b:b2:7f:
a3:89:7a:7a:55:d9:20:e4:4b:d9:4c:0a:51:6b:28:
c4:bc:f5:b9:42:c9:c7:42:cc:5d:85:f8:40:ab:79:
4c:95:38:0b:bf:2a:9b:3a:64:36:76:3c:95:92:94:
c1:54:02:e2:fa:69:3a:9b:9f:72:52:21:be:d1:28:
9a:21:f1:94:57:9f:b7:12:9f:ad:39:22:4e:cb:b7:
dd:c5:76:e5:a9:08:b7:3d:23:b8:dd:e4:60:ae:d6:
c5:e7:1b:e1:72:56:11:e9:35:8b:1c:5f:ad:fb:f9:
a5:98:04:0c:0d:0b:4a:45:65:67:32:4a:3b:bc:8e:
8b:ce:60:ed:63:13:a0:8c:c0:4d:10:09:7b:fe:92:
f2:97:15:82:73:11:bd:87:a9:e1:70:81:4d:6f:49:
05:44:85:72:26:60:2e:f8:1a:67:46:7c:02:39:3a:
fb:c9:92:ac:b9:1d:df:db:22:b9:ac:b0:fe:5a:d9:
6c:dd:d4:74:0a:d5:fb:10:c9:8f:64:cd:81:db:df:
2c:68:d5:8a:6b:e3:9f:18:1a:85:58:18:d8:6b:7e:
c1:c4:3f:fe:67:2b:7b:69:bb:26:8b:93:30:1c:bd:
45:f7:11:83:08:d7:7e:4d:0e:78:7f:6e:d4:1f:8a:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:02:01:43:39:AC:7F:8E:91:C2:10:EC:1B:2D:77:C8:59:EA:A0
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/yQICAUM5rH-OkcIQ7Bstd8hZ6qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:65:05:e3:94:40:84:b9:a9:7a:1e:b6:81:b4:ec:57:3b:16:
c4:db:5b:e7:c6:3e:4a:33:8e:71:29:0a:d3:ee:c7:81:12:80:
de:8c:a1:6d:67:af:5b:64:ea:53:cb:43:ab:23:aa:24:ed:c4:
e5:7e:12:8c:fb:07:3d:40:7b:ef:9e:95:b6:5c:8a:50:9d:fb:
53:5b:07:22:d2:4f:d6:5d:71:a9:b0:87:66:08:3b:e2:9f:19:
f2:70:55:6f:e0:8e:d5:98:d3:46:d6:48:61:02:0b:46:dc:60:
89:c1:3c:bc:b4:37:d8:ac:99:94:d7:76:09:e2:84:5d:a3:d1:
6f:e2:e1:dc:b2:6f:76:47:22:25:31:fc:0e:cf:82:d9:bc:24:
31:96:7d:17:37:d2:8e:b8:82:14:e6:43:36:07:79:42:93:7a:
74:8b:2c:4c:2c:2f:71:7f:fe:22:ec:3c:ce:72:f7:1d:dd:1d:
fa:16:0f:45:77:29:41:02:5a:06:63:91:c3:e1:77:6c:d4:91:
e7:31:3a:76:ec:45:76:b6:bf:3c:4a:5c:ed:f4:ba:7a:ce:b1:
2b:db:c2:bb:87:b1:a6:96:83:2f:67:27:41:a5:62:08:d4:bd:
31:ea:3b:3c:2f:59:97:31:5c:b1:82:34:f8:6b:7f:2b:4d:78:
4e:21:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:43 2024 by rpki-client on console-fra.rpki-client.org