Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/BbI_9_X8Rhc7kEDRQ8L61rSwQbA.roa
File: BbI_9_X8Rhc7kEDRQ8L61rSwQbA.roa (raw, json)
Hash identifier: 2b82V8fLWtdCDU036SMAYpBV5s95CLb6DHVBX67SykI=
Subject key identifier: 05:B2:3F:F7:F5:FC:46:17:3B:90:40:D1:43:C2:FA:D6:B4:B0:41:B0
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 90BBE8
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/BbI_9_X8Rhc7kEDRQ8L61rSwQbA.roa
Signing time: Sat 01 Jan 2022 00:51:56 +0000
ROA not before: Sat 01 Jan 2022 00:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203210
IP address blocks: 193.43.100.0/24 maxlen: 24
193.43.110.0/24 maxlen: 24
193.43.126.0/24 maxlen: 24
193.43.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9485288 (0x90bbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jan 1 00:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05b23ff7f5fc46173b9040d143c2fad6b4b041b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:d9:9c:83:2c:3e:a1:f9:0f:d2:be:02:31:
51:de:57:21:ca:5e:3e:d3:a4:2f:b1:81:0e:bd:78:
59:8d:12:15:54:b7:83:eb:cf:cb:96:d5:a6:61:3c:
f4:83:e8:e3:92:99:a8:be:79:e0:85:60:26:d3:44:
55:f0:36:ca:58:ff:21:32:6b:2c:e6:62:fb:bd:58:
14:a5:bc:1f:9a:30:f6:1f:7f:73:50:98:9c:d0:a3:
87:bb:78:e4:fd:bf:54:54:ec:ec:7b:1f:e4:03:07:
ab:f0:8b:f9:f9:d6:cc:e7:ee:8c:1e:5d:40:5d:58:
0d:d9:c7:c5:01:5c:94:74:d2:3c:ea:c4:a2:39:b0:
c8:ee:72:e3:d7:12:6c:ef:af:68:a4:c2:90:6d:94:
3c:01:cf:a6:49:70:52:eb:0d:b0:e6:83:82:7f:ce:
f7:3a:8e:0b:d2:4a:8f:ff:c9:46:20:c3:b0:e3:3a:
99:c0:9b:1e:ff:c1:4b:18:8e:4c:ae:fc:0b:e3:61:
f9:82:c7:00:26:2b:07:9b:42:4e:5d:79:51:94:56:
2a:b1:d5:8a:05:1a:90:d9:c1:07:22:ed:be:23:60:
36:46:f0:86:84:37:62:cf:fa:71:29:1f:86:a8:8f:
68:87:0f:09:bc:8e:bc:fd:d0:c5:35:6d:cb:a1:82:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B2:3F:F7:F5:FC:46:17:3B:90:40:D1:43:C2:FA:D6:B4:B0:41:B0
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/BbI_9_X8Rhc7kEDRQ8L61rSwQbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.100.0/24
193.43.110.0/24
193.43.126.0/24
193.43.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7c:bc:0d:8b:03:d0:dc:45:b6:39:bb:06:ef:b4:6b:52:5b:
8f:53:56:89:90:0d:1c:5a:d5:e6:c7:0b:ba:52:2e:d3:8c:00:
de:8f:d7:70:81:cd:13:e5:74:14:39:a8:41:59:8d:88:93:65:
fd:2a:09:dc:85:cb:f5:2a:1b:f1:f0:81:ad:e1:a6:5a:05:3c:
68:d6:47:75:c9:13:06:5c:54:f1:da:40:32:66:99:eb:13:7d:
0c:b2:4e:b8:e3:36:d3:ce:3c:64:6b:2b:46:b3:f1:03:16:3b:
4c:8c:79:0f:19:82:81:dd:4b:82:89:76:f9:70:20:83:69:8d:
59:81:7c:98:21:be:69:f9:8f:9a:02:82:5f:15:26:d0:5c:23:
82:23:d7:01:f3:2c:70:18:94:64:d1:07:9c:05:d1:11:06:23:
e1:a6:b1:f9:9a:d8:ff:8b:f6:ca:a0:a0:a4:f6:87:19:69:c7:
cc:74:ee:13:de:1c:b5:fe:22:00:3f:1e:87:54:ad:9f:5c:4f:
bd:eb:58:89:62:c8:77:4b:92:44:db:d7:10:16:6b:71:d1:63:
7f:c6:b6:18:6d:aa:7b:01:a6:d9:ee:2e:5c:ad:94:25:f3:0e:
ce:9b:38:11:16:9c:9f:67:53:14:dc:3e:b6:70:81:c0:06:d3:
d3:78:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-fra.rpki-client.org