Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oGGqDHzGXFF8Iwuxmp6m94JOg6M.roa
File: oGGqDHzGXFF8Iwuxmp6m94JOg6M.roa (raw, json)
Hash identifier: qW4fpROb5//uicYxSLwo0tGeE1gTnnvho4GjY2j2BvQ=
Subject key identifier: A0:61:AA:0C:7C:C6:5C:51:7C:23:0B:B1:9A:9E:A6:F7:82:4E:83:A3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01853B107FAEC51688B3A85078B275C0EBF2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oGGqDHzGXFF8Iwuxmp6m94JOg6M.roa
Signing time: Thu 22 Dec 2022 18:20:15 +0000
ROA not before: Thu 22 Dec 2022 18:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6233
IP address blocks: 194.242.2.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3b:10:7f:ae:c5:16:88:b3:a8:50:78:b2:75:c0:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 22 18:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a061aa0c7cc65c517c230bb19a9ea6f7824e83a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:66:c3:94:26:ed:df:48:92:99:78:89:b7:
3d:0b:cb:80:b5:33:ae:19:70:19:d0:aa:ec:83:d3:
60:9d:01:45:9f:e5:c5:f5:9f:57:15:f1:b9:cc:0f:
82:1b:34:34:5d:8f:47:48:84:47:56:16:6b:df:f0:
99:40:a3:45:6a:a6:04:9c:16:ca:9e:80:1c:d9:41:
38:d3:eb:81:d8:2d:27:09:68:af:e8:c2:17:fc:55:
6e:bd:bc:af:ea:cb:74:80:1d:3b:25:0f:c1:97:f4:
ef:f9:cc:61:8f:fc:41:a3:00:71:31:fb:45:83:19:
26:74:bf:1d:ac:7e:66:a0:fa:c7:6b:a3:16:87:9c:
ee:58:64:25:d2:0e:d8:ef:2b:e1:d6:d9:7f:22:4e:
4d:0d:96:07:d7:c0:0c:71:92:0e:85:b3:8b:24:03:
17:e4:3b:3f:3f:ce:cd:b0:b0:ee:f5:f2:47:4d:e6:
8d:77:0e:aa:88:93:be:8b:3c:c6:95:b6:40:0e:f8:
ad:8e:27:40:76:8a:4f:1d:80:66:a9:94:a3:c0:b3:
1e:ce:76:7f:dc:8f:5c:d5:78:bc:65:56:9c:c6:51:
55:03:61:c1:78:42:2b:1f:8a:3a:68:3c:50:12:9e:
33:2a:2c:e4:54:29:1c:83:e8:27:99:3b:ef:63:54:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:AA:0C:7C:C6:5C:51:7C:23:0B:B1:9A:9E:A6:F7:82:4E:83:A3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oGGqDHzGXFF8Iwuxmp6m94JOg6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f6:d5:b2:3b:ac:cf:49:7f:fb:7c:a8:21:0d:67:52:dc:a2:
ce:cf:e6:5b:c0:d9:6a:85:90:21:24:7a:1c:03:06:45:9c:27:
9e:25:1b:39:ca:91:ed:02:bb:04:ee:21:ee:f8:5a:de:16:91:
2b:88:ab:c8:7f:6a:66:c9:43:2b:48:95:f1:fc:ac:74:b2:19:
b7:79:74:a1:1b:23:a9:c6:6c:8d:1e:a7:4e:7e:50:d6:27:28:
64:1d:01:e0:42:11:40:b7:3a:6c:ab:58:88:89:93:d5:03:b6:
41:7e:22:af:3a:31:85:98:89:8a:2b:c5:27:8c:03:45:09:8a:
cc:64:ee:cf:91:f8:17:c4:a3:eb:2e:ab:e1:19:4f:c0:22:de:
91:b6:9a:61:4d:81:a6:3d:b5:0d:d5:2e:93:bf:58:3f:66:89:
47:9f:d4:03:fe:c4:e6:e9:ed:c4:e8:2f:d6:21:6c:8e:78:8c:
ff:e5:c2:9a:6c:38:44:de:05:2c:a8:6d:fe:6c:db:7a:5b:28:
ff:d0:2f:e9:71:d7:83:85:1f:d8:73:f1:68:f6:a3:06:34:4c:
d9:b3:b2:d2:af:57:5a:c9:ca:8d:ba:af:a2:28:2d:66:c0:cb:
eb:3d:2b:23:2d:30:7a:0d:4d:8c:bd:3e:d1:68:7c:16:2a:65:
67:94:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org