Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/u6n2smQq5-qEksUq6bD8qJIEr4k.roa
File: u6n2smQq5-qEksUq6bD8qJIEr4k.roa (raw, json)
Hash identifier: zhWD2kxMNKideC4k72XPwz3YQVLRm1n2d3UouBiIHLw=
Subject key identifier: BB:A9:F6:B2:64:2A:E7:EA:84:92:C5:2A:E9:B0:FC:A8:92:04:AF:89
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 036940F0
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/u6n2smQq5-qEksUq6bD8qJIEr4k.roa
Signing time: Sat 01 Jan 2022 13:03:48 +0000
ROA not before: Sat 01 Jan 2022 13:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212415
IP address blocks: 193.104.187.0/24 maxlen: 24
194.153.85.0/24 maxlen: 24
2001:67c:28d0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57229552 (0x36940f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Jan 1 13:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bba9f6b2642ae7ea8492c52ae9b0fca89204af89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:8b:80:cb:96:2d:e5:35:05:e7:56:62:d0:
06:78:7e:71:80:43:ca:01:4a:1f:ff:ee:c9:24:51:
9a:61:87:a0:8d:db:fc:a0:f7:ec:d9:78:4e:59:42:
de:52:d3:67:4c:93:03:8c:73:14:e7:56:bf:86:c6:
49:ec:f7:34:76:47:f8:29:d4:02:2f:cf:73:4b:f7:
c5:ab:e8:76:60:11:d0:1e:2c:55:4a:0d:a6:27:c6:
07:e8:39:90:88:f3:cd:37:18:19:aa:9d:a1:c8:f5:
79:7f:f8:7b:81:c0:c6:6c:35:c6:83:02:64:7f:cf:
6b:d9:6d:f2:c3:7f:7f:7e:58:92:9d:51:9a:6f:a1:
4d:29:77:f0:3e:33:49:a0:dc:09:80:44:22:e8:42:
97:48:76:bd:79:6c:27:97:95:23:04:54:7f:9a:47:
8b:75:d8:93:32:7c:6e:9b:2b:40:96:8f:c0:87:2d:
43:7c:c2:05:cb:b3:0a:fb:df:16:bf:8d:a4:18:04:
3e:71:7c:62:39:e3:dd:d6:88:f4:78:67:6f:87:1e:
b4:10:d2:33:1f:5e:e3:ec:a3:5d:f9:29:5c:71:8b:
cc:e7:36:26:34:79:94:65:5d:65:92:3f:a5:dc:21:
6f:34:cd:ac:5a:92:75:65:26:ff:69:79:b8:ac:1c:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:F6:B2:64:2A:E7:EA:84:92:C5:2A:E9:B0:FC:A8:92:04:AF:89
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/u6n2smQq5-qEksUq6bD8qJIEr4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.187.0/24
194.153.85.0/24
IPv6:
2001:67c:28d0::/48
Signature Algorithm: sha256WithRSAEncryption
86:b8:d8:3b:ac:a0:bc:77:b2:54:11:db:86:30:41:c1:57:5f:
16:3b:ea:c1:44:6d:0c:1a:7b:7d:13:98:38:dd:1e:57:15:66:
82:8f:4a:f6:3d:83:40:b6:3f:9c:86:d5:a9:d3:67:3d:31:e6:
7f:98:4e:af:8a:2e:f8:3d:52:74:60:7a:9a:0b:8d:26:5e:73:
6a:9d:ae:fd:77:3c:d5:05:46:24:e0:b0:5b:ff:0b:15:66:c2:
60:df:35:d7:c1:5c:28:c5:fc:7a:7b:a9:94:ec:cf:59:c2:f2:
05:24:40:1c:3a:7c:c4:48:42:91:65:34:2b:c1:83:7b:06:4b:
bb:1b:4f:3d:d9:8c:3f:97:53:4b:52:fe:69:04:21:a3:50:44:
4d:7d:ba:14:8f:6f:3e:f2:40:bc:8a:4c:0e:19:06:49:4a:23:
f2:2b:65:77:06:de:51:a6:aa:46:dd:91:09:ef:81:fd:33:16:
59:2f:a9:fd:84:d3:24:60:dd:7b:99:89:d9:94:f5:96:a8:e3:
c1:60:90:51:4c:39:eb:cb:e4:64:86:38:51:0f:61:4e:a2:c1:
92:43:77:97:5e:dc:b5:1b:93:f8:1f:77:4d:0e:8e:82:fd:5a:
f5:8f:47:3f:00:a5:8c:a2:31:3a:52:34:cd:e6:ce:62:de:c4:
34:5b:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:29 2023 by rpki-client on console-ams.rpki-client.org