Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/5xRmgK8c2py6MHqrsdcitgdtAzg.roa
File: 5xRmgK8c2py6MHqrsdcitgdtAzg.roa (raw, json)
Hash identifier: ohqI1OQT2CyAWePu1opwuTu+dPbZ/b9jI92C0YJ7Vko=
Subject key identifier: E7:14:66:80:AF:1C:DA:9C:BA:30:7A:AB:B1:D7:22:B6:07:6D:03:38
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018216759F1A65AC22B80E10F8B21CEC8FBF
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/5xRmgK8c2py6MHqrsdcitgdtAzg.roa
Signing time: Tue 19 Jul 2022 12:36:23 +0000
ROA not before: Tue 19 Jul 2022 12:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8971
IP address blocks: 193.81.246.0/24 maxlen: 24
193.80.22.0/24 maxlen: 24
193.80.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:75:9f:1a:65:ac:22:b8:0e:10:f8:b2:1c:ec:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 19 12:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7146680af1cda9cba307aabb1d722b6076d0338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:62:c7:55:6e:7c:d4:35:d9:6f:86:a7:58:
0e:b9:e4:c0:b6:ca:1b:c4:0a:e7:2d:db:1a:8e:e9:
12:a6:8b:06:1a:50:12:8c:c6:a5:33:30:9c:a1:a4:
08:4a:75:4a:16:7d:30:e1:8c:dd:a3:d4:9f:4d:27:
bb:9c:b8:28:97:be:b0:83:ad:c6:c3:cb:c5:2c:75:
9b:b4:a5:b6:23:e8:dc:b0:27:2a:2e:b3:bb:73:08:
a7:cb:16:d8:d6:67:a8:5f:0a:ee:2b:21:1d:fb:4b:
5d:c8:02:23:d8:fa:ad:e7:91:02:f6:01:02:94:dd:
23:69:f8:04:f3:d2:57:b4:33:cd:d8:81:2d:ae:7d:
fb:cf:f1:06:82:f8:fc:14:cf:f6:bb:e2:47:7f:e0:
39:3c:38:9f:f5:ed:e1:88:ed:17:51:4a:88:0b:07:
ed:3b:08:5c:cb:20:9f:9e:42:15:77:f8:98:b4:21:
0a:90:b5:17:35:28:8e:32:1c:15:fc:9d:84:2b:ef:
80:9d:f2:c7:52:43:70:c3:37:ce:5c:42:ad:a8:07:
da:cf:01:d8:06:c7:ed:5d:bd:fa:1d:49:40:85:ca:
b8:d0:05:72:e0:d4:d1:27:24:2a:6a:c6:86:35:4c:
8f:48:79:f0:25:73:be:34:2f:04:0d:99:ff:87:27:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:14:66:80:AF:1C:DA:9C:BA:30:7A:AB:B1:D7:22:B6:07:6D:03:38
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/5xRmgK8c2py6MHqrsdcitgdtAzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.80.22.0/24
193.80.42.0/24
193.81.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:19:e9:1e:01:73:ea:b1:9a:77:d5:ca:43:e8:f5:54:39:35:
9c:0b:6f:89:c9:a7:b9:e8:b1:c7:7a:8d:6f:87:1d:67:c7:2d:
bc:11:58:0f:79:82:86:54:cd:49:d5:d6:41:e6:cc:7c:93:f0:
3c:4f:41:2f:f6:13:6c:fe:05:82:0a:94:f5:22:0f:72:29:1c:
d4:31:82:ad:1b:94:1c:0b:3d:c3:81:33:aa:fc:b9:0b:4d:7d:
c7:61:ff:8d:55:0d:0a:d5:e7:cb:ed:ec:2b:bc:38:78:37:23:
8d:dc:5b:54:a3:cb:f8:1a:73:a5:07:a1:d5:80:40:6b:fc:fe:
30:21:da:c3:20:3b:0b:a7:97:c4:e0:79:b1:14:fa:b7:93:3a:
77:2e:fb:ec:f5:4e:90:d5:6d:23:7f:00:f7:f2:cd:fe:3b:c9:
62:fe:bf:76:f5:6a:cd:e1:17:47:a5:54:8c:28:47:07:3e:ea:
10:27:b8:72:c4:17:44:f4:7d:7c:23:77:a1:f6:cf:64:fb:d8:
a0:0f:e0:48:79:51:0d:f9:80:f1:19:f8:84:38:2f:3b:96:ca:
57:f9:d0:65:5a:1b:cf:8c:34:84:99:5c:26:99:26:95:1f:a2:
72:46:66:1b:45:64:8c:f3:21:30:0e:03:53:b9:7e:b8:40:59:
8b:4d:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org