Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/mFXcIz1c2SLJWtSWrKqfd2CWXjk.roa
File: mFXcIz1c2SLJWtSWrKqfd2CWXjk.roa (raw, json)
Hash identifier: VLTz7/TFssSAlMPRJF/9TGkMDul1/kFi+NCdWlZAGk4=
Subject key identifier: 98:55:DC:23:3D:5C:D9:22:C9:5A:D4:96:AC:AA:9F:77:60:96:5E:39
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 1541A3E4
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/mFXcIz1c2SLJWtSWrKqfd2CWXjk.roa
Signing time: Sat 01 Jan 2022 02:52:03 +0000
ROA not before: Sat 01 Jan 2022 02:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2202
IP address blocks: 193.56.111.0/24 maxlen: 24
193.56.108.0/24 maxlen: 24
193.56.109.0/24 maxlen: 24
193.56.110.0/24 maxlen: 24
193.56.229.0/24 maxlen: 24
193.56.230.0/24 maxlen: 24
193.56.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356623332 (0x1541a3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Jan 1 02:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9855dc233d5cd922c95ad496acaa9f7760965e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:54:02:3b:75:5b:3b:cb:8f:2f:7c:aa:54:
bd:ae:a9:9f:b7:1a:cd:db:b1:db:1d:28:7b:97:73:
37:5d:7d:56:ea:88:a9:f5:d0:55:7c:2a:37:36:22:
23:4f:b8:9e:51:68:63:40:fd:d2:04:b5:b1:bc:c3:
7c:1b:49:08:c3:89:07:e7:d6:ae:95:51:6f:bd:b0:
19:11:77:0a:5a:b1:49:30:20:78:dc:d1:e5:a6:23:
d8:66:e3:f8:32:d0:39:e8:bb:d1:4e:e3:59:06:98:
95:1b:c9:05:d8:6b:2a:d7:6c:e5:1d:81:45:24:ad:
5c:0e:7a:60:fb:8c:fe:cc:e4:00:80:94:c6:3b:03:
89:de:5c:c5:a3:93:de:fd:db:00:bb:99:b5:94:ee:
ff:41:25:44:f7:21:5c:e8:96:a7:44:7e:07:57:c3:
27:1a:7e:14:43:68:8c:ac:44:90:91:44:dc:02:54:
ce:59:a3:44:f8:8a:c8:52:81:07:cf:14:24:42:1c:
d0:de:95:7b:4b:ff:99:ed:d6:1e:77:d2:bf:71:48:
1d:b8:e6:4b:e3:28:cc:9a:59:a7:2e:35:57:34:fa:
f1:b9:32:01:76:bc:93:5e:ac:28:c2:85:5b:9d:48:
dc:fb:50:bb:da:61:d2:02:50:7a:d5:08:a9:c2:79:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:DC:23:3D:5C:D9:22:C9:5A:D4:96:AC:AA:9F:77:60:96:5E:39
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/mFXcIz1c2SLJWtSWrKqfd2CWXjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.108.0/22
193.56.228.0-193.56.230.255
Signature Algorithm: sha256WithRSAEncryption
86:01:0c:de:0a:78:ef:f6:7e:d3:36:bd:48:10:0d:15:13:42:
73:02:11:e5:de:96:68:9c:fe:ee:cb:65:6f:17:25:e9:04:93:
69:68:81:99:60:ab:03:87:27:59:83:e0:85:d2:ce:19:de:49:
0e:55:81:51:47:d8:4d:cc:0e:59:76:34:ea:86:1b:ad:30:58:
e9:f2:98:cc:6c:99:fb:ed:bd:3a:6e:26:ea:95:b9:61:cc:79:
0c:46:c4:cc:33:95:12:37:b7:46:7d:0b:32:29:8e:be:9c:63:
dc:25:12:e8:ef:65:27:91:6e:54:7b:1f:4f:9b:89:b0:ad:32:
96:48:68:63:bc:93:fe:78:9b:e9:f6:29:9e:c1:e4:88:bd:69:
c6:0d:c3:35:74:f5:b2:18:68:65:df:1e:bc:fb:c0:ea:3b:3b:
e0:b7:c6:ff:d9:c5:12:6d:74:67:b1:f3:13:ac:e0:5d:09:f0:
ee:ae:82:f5:a9:bc:66:a1:f4:80:dc:49:a0:d0:ca:13:8a:cb:
57:e2:ac:87:8f:26:56:1a:77:17:b8:15:b8:50:4f:4d:33:5e:
12:3a:23:ea:0e:da:d9:a9:2b:58:af:8a:a2:65:dd:e3:66:e5:
a2:bd:4b:05:3f:a8:06:af:35:83:b0:f6:4e:d8:3c:43:cf:92:
a8:de:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org