Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/M8T3ves8BZYee4isl0-nh7pbeIw.roa
File: M8T3ves8BZYee4isl0-nh7pbeIw.roa (raw, json)
Hash identifier: WzwzjPNzkbcom9yVGL2d0ZkOB7tqDQrptUYunLocAno=
Subject key identifier: 33:C4:F7:BD:EB:3C:05:96:1E:7B:88:AC:97:4F:A7:87:BA:5B:78:8C
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 2FB424A2
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/M8T3ves8BZYee4isl0-nh7pbeIw.roa
Signing time: Sat 01 Jan 2022 10:04:47 +0000
ROA not before: Sat 01 Jan 2022 10:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8328
IP address blocks: 193.172.126.0/24 maxlen: 24
193.173.100.0/24 maxlen: 24
193.172.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800335010 (0x2fb424a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 1 10:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33c4f7bdeb3c05961e7b88ac974fa787ba5b788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:8c:d4:f5:71:d0:4f:ad:4d:48:79:5e:47:
07:21:95:76:fc:71:e8:57:49:55:44:d5:08:51:e4:
ad:f6:3d:bf:ea:eb:c2:9d:ac:d6:4c:fd:4c:f3:66:
ad:14:58:e0:f9:d7:90:ba:7d:70:2c:4f:91:7b:c0:
3b:82:60:86:79:45:b6:66:57:4d:81:ca:a3:71:7f:
ae:04:60:ad:1f:ee:3c:00:15:7e:0c:fe:52:bd:56:
a0:a3:51:b1:9a:bd:d5:58:46:14:91:46:6a:ee:53:
6f:bd:16:38:63:bd:e1:f3:e8:c9:04:e6:17:10:9f:
21:9d:1e:57:ef:f5:30:2a:7d:e3:2e:8f:99:65:58:
f2:8c:20:bd:ca:30:f5:35:1c:12:79:5a:65:dd:57:
23:c0:c2:00:72:18:b6:e8:6c:4f:a7:47:0a:b4:47:
21:61:1b:8b:2b:aa:91:74:1f:e2:92:5e:02:92:2b:
15:f1:80:9a:f9:57:f9:2d:26:66:0f:74:df:9d:4c:
3f:3c:7b:0a:bb:44:1f:78:95:00:41:94:9b:9d:7b:
fd:86:99:11:17:1a:e3:7a:79:38:0c:f5:0e:88:c0:
41:e4:08:2f:03:1e:83:bd:da:94:79:68:8f:a4:6b:
81:81:3e:99:ee:25:10:ab:fd:0c:5b:1a:1a:d0:99:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C4:F7:BD:EB:3C:05:96:1E:7B:88:AC:97:4F:A7:87:BA:5B:78:8C
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/M8T3ves8BZYee4isl0-nh7pbeIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.172.126.0/24
193.172.193.0/24
193.173.100.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9e:9b:d2:37:05:0b:f6:67:96:51:b7:52:8f:29:f9:e0:85:
07:65:38:9b:53:0a:9e:ec:6d:21:9a:90:c7:45:72:4d:c2:cb:
e1:c3:e0:cd:c1:cd:35:6d:b3:6c:91:35:19:ba:42:cd:33:77:
2c:08:97:cb:84:8f:ab:f0:ca:b9:b5:97:1c:5e:f9:8b:fa:4e:
37:2a:12:9b:c4:15:79:fa:21:73:51:1e:13:27:45:d4:00:d0:
2f:a8:65:fd:ba:0b:ab:44:86:26:e0:38:92:a8:01:ee:cc:61:
df:52:bf:50:37:54:04:d6:ae:a5:d1:a0:a9:67:39:4a:18:1d:
92:df:5a:2b:70:ed:c7:2f:f5:dc:ab:15:38:da:e6:f0:7a:5a:
8f:18:0e:a6:2b:35:78:3a:ff:47:2e:4f:b5:cb:1f:1e:83:ce:
d1:09:5c:81:b8:e1:14:e8:f3:c3:6a:0a:53:91:22:ae:4e:28:
d6:4d:ca:79:a0:25:a7:60:77:fe:24:08:91:93:a9:c4:9a:d7:
b5:df:36:76:2a:1d:79:51:02:77:b3:6e:0b:56:0a:ec:02:f8:
6d:f4:a1:53:cb:bd:72:4a:fd:d6:b9:77:59:f1:2f:dc:41:28:
00:4a:58:b3:e6:57:ab:56:dc:81:3e:20:41:71:74:35:ee:15:
ea:e4:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:02 2024 by rpki-client on console-fra.rpki-client.org