Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/IxBF__c-3_61vX8cehj6mhJD3Rc.roa
File: IxBF__c-3_61vX8cehj6mhJD3Rc.roa (raw, json)
Hash identifier: gLfhMh/MhxhxZ8QKoyoDPfFOFGE9FiTczuOy/YYLA+U=
Subject key identifier: 23:10:45:FF:F7:3E:DF:FE:B5:BD:7F:1C:7A:18:FA:9A:12:43:DD:17
Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial: CFB86F
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/IxBF__c-3_61vX8cehj6mhJD3Rc.roa
Signing time: Sat 01 Jan 2022 06:55:35 +0000
ROA not before: Sat 01 Jan 2022 06:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62452
IP address blocks: 194.33.68.0/24 maxlen: 24
194.33.70.0/23 maxlen: 23
2001:67c:2994::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13613167 (0xcfb86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Validity
Not Before: Jan 1 06:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=231045fff73edffeb5bd7f1c7a18fa9a1243dd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:6b:66:61:d0:1a:76:56:50:e9:e5:aa:ea:
7d:ec:85:88:24:88:25:06:92:b4:03:e3:df:25:0c:
41:e7:3a:c8:41:28:05:99:db:85:41:aa:22:1a:44:
ea:70:4b:0f:b1:06:b9:25:c8:a4:41:ae:5f:4e:6a:
16:87:27:44:14:cb:27:db:e2:47:e5:e1:20:6d:09:
0f:71:fb:28:57:7f:f9:94:13:d3:1f:51:ca:ab:fb:
c0:4b:93:47:11:a9:c3:7f:6c:af:76:17:ab:ce:c9:
3d:86:e9:5a:d9:4a:9b:32:04:e1:1a:cb:cb:d8:eb:
d7:24:23:a8:c9:3c:76:25:29:1d:80:4d:a8:a2:36:
85:59:15:02:ce:43:f5:f3:b5:f4:ae:41:98:ff:87:
7c:29:d3:b6:0a:fe:d8:c2:a7:19:6f:a7:c1:c3:78:
df:62:29:42:e2:e6:00:fe:71:93:79:2d:6b:b6:38:
f0:bd:66:5c:a7:5d:a8:76:44:04:ac:bc:14:81:61:
7c:e2:ff:27:e0:dc:0e:9f:0b:f6:14:c8:81:2f:63:
0d:c4:f4:9a:3b:8c:8b:c9:46:7e:e9:40:db:47:26:
07:7d:0f:9a:9c:ac:89:66:f8:13:da:71:b0:2f:85:
c3:ba:ed:e1:c1:4d:ed:50:7b:5c:ea:ff:0f:93:ef:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:10:45:FF:F7:3E:DF:FE:B5:BD:7F:1C:7A:18:FA:9A:12:43:DD:17
X509v3 Authority Key Identifier:
keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/IxBF__c-3_61vX8cehj6mhJD3Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.68.0/24
194.33.70.0/23
IPv6:
2001:67c:2994::/48
Signature Algorithm: sha256WithRSAEncryption
a6:93:3e:47:00:f1:35:e3:ea:af:98:bb:50:85:67:32:5f:3b:
bb:5d:2a:8d:37:03:c4:8a:7b:41:bc:97:1b:1e:4b:f2:86:32:
1e:16:88:6a:1e:9c:9e:8c:9b:6a:c8:0e:47:85:46:ab:66:4a:
1e:33:1f:44:42:c2:0c:b1:da:d8:36:11:5d:3f:7a:df:3b:cb:
8a:0c:99:27:f6:1e:8a:f3:d7:b2:0c:00:f0:d9:0e:47:01:dc:
4b:d4:97:bd:3e:87:01:6a:60:d2:06:b2:f2:1c:fc:9b:f5:be:
dc:cf:2c:34:dd:2f:a4:90:c8:b9:b7:e1:64:a9:75:82:3e:e1:
3e:d5:10:46:a7:2a:bb:e3:1f:90:0c:2e:8d:af:93:39:b6:c6:
8a:af:7e:36:6c:43:1e:c5:0d:87:17:20:92:47:fd:80:3b:a8:
2f:97:0e:0a:44:cd:47:8c:40:33:9e:81:35:ec:7b:43:8e:51:
7d:20:3c:65:8a:f1:6f:92:f8:cf:f0:09:bf:50:74:67:07:02:
e2:94:59:3b:63:0b:a1:2b:b6:17:35:b3:c7:f1:37:42:eb:d8:
37:5b:2c:af:a9:4b:34:59:3b:21:e9:f2:18:45:a0:45:de:d8:
99:af:08:77:52:4b:be:8c:80:aa:6e:2f:27:4d:5e:02:69:ba:
42:0e:e9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:58 2024 by rpki-client on console-ams.rpki-client.org