Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/c2_pGVSR00bwN7Y0CRuZMgsLt6Q.roa
File: c2_pGVSR00bwN7Y0CRuZMgsLt6Q.roa (raw, json)
Hash identifier: 1joSHIaG5u0VgNyXE5/swJxJ5Vocc0suLzBCSCziSp0=
Subject key identifier: 73:6F:E9:19:54:91:D3:46:F0:37:B6:34:09:1B:99:32:0B:0B:B7:A4
Certificate issuer: /CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Certificate serial: 0757B483
Authority key identifier: 8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/c2_pGVSR00bwN7Y0CRuZMgsLt6Q.roa
Signing time: Sat 01 Jan 2022 14:01:03 +0000
ROA not before: Sat 01 Jan 2022 14:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209492
IP address blocks: 193.33.40.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123188355 (0x757b483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Validity
Not Before: Jan 1 14:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=736fe9195491d346f037b634091b99320b0bb7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:ec:b3:06:bb:c7:23:34:51:b2:86:aa:84:
b6:fb:73:32:22:83:a0:bd:be:3f:bd:06:2a:85:e2:
c9:71:98:82:8d:1a:28:c7:43:ab:3c:dd:63:a5:93:
da:17:20:f5:71:d1:7a:c4:a2:6b:99:27:e7:e6:68:
c1:ac:a2:5f:13:56:46:80:96:7d:2a:41:6d:08:db:
76:7d:d1:26:96:c0:30:51:1d:4c:a7:e0:1e:6f:68:
9d:02:fe:51:f8:87:c0:00:9a:75:91:a6:7a:d6:b1:
65:09:63:6c:68:1c:2d:0b:47:fb:da:b6:67:53:8e:
e8:b1:c0:74:f7:06:61:d1:42:3c:4c:6e:72:56:1b:
2c:4f:86:74:60:6d:19:89:0c:89:ed:97:c1:80:3f:
69:58:74:f8:c6:5a:e6:ba:af:a1:04:1d:ef:a2:1d:
84:c3:32:5c:93:4e:52:73:c9:a6:e2:5c:fb:c5:ae:
4b:10:8f:31:fa:de:e8:b1:62:a0:16:ca:dd:93:fe:
39:f1:f4:2d:44:58:4c:ff:00:05:10:f7:c3:5a:f4:
f5:4e:e7:01:f0:9a:13:4f:ce:e9:8a:67:b6:0c:b4:
40:48:77:50:6e:f8:46:c3:b8:63:ab:62:79:36:ca:
09:01:08:d5:1d:a5:6c:48:50:b8:89:a7:6a:d3:33:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6F:E9:19:54:91:D3:46:F0:37:B6:34:09:1B:99:32:0B:0B:B7:A4
X509v3 Authority Key Identifier:
keyid:8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/c2_pGVSR00bwN7Y0CRuZMgsLt6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.40.0/23
Signature Algorithm: sha256WithRSAEncryption
45:67:84:6c:9a:71:c7:f6:fc:42:be:f8:69:29:58:6f:2a:6f:
f2:07:52:e9:d2:5e:da:d5:19:83:2d:12:7f:b6:0c:ce:84:ae:
f8:1e:dd:e2:5c:4f:fa:cf:94:b8:3d:cb:b9:4d:11:33:9c:e2:
dc:50:ee:ae:9e:a8:7c:eb:82:b6:4d:6e:1a:7e:dc:d2:35:a2:
13:78:f4:3b:5e:72:57:17:ab:8e:29:bd:c7:f6:64:ab:77:d5:
fb:8e:7f:86:48:ef:a5:37:9e:fd:59:af:aa:aa:13:8f:ce:34:
4e:c4:8d:41:3e:06:e1:42:e9:33:6c:b2:50:8a:7a:1a:0b:15:
54:a3:3b:ca:67:e0:bd:d0:65:b0:0d:0c:2e:a1:11:33:48:b1:
22:bc:3f:f5:eb:f4:87:12:d0:1e:8a:25:a1:75:d4:25:e4:c9:
e5:73:8c:6a:ab:dc:f9:0d:5d:f3:fc:b2:9d:a6:5b:56:84:14:
ee:87:d0:b4:1f:17:16:10:95:41:8a:bc:c0:f0:be:94:fb:2c:
c9:d8:0d:86:9d:6b:2e:fc:55:a3:6f:69:c6:06:60:91:77:dd:
b7:44:3f:01:c7:5a:ca:8c:b3:4e:58:1e:df:75:4a:5e:f4:f9:
61:25:75:a5:3d:d8:07:97:5f:a8:e9:a8:c1:38:3d:89:7d:a6:
aa:87:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:53 2024 by rpki-client on console-ams.rpki-client.org