Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ATFvUr1lmepONMaU3jvNvSVNx74.roa
File: ATFvUr1lmepONMaU3jvNvSVNx74.roa (raw, json)
Hash identifier: JWRH6+hF1EVAb35w7110/e2Qkk8zl3ooW3CLQYkgbno=
Subject key identifier: 01:31:6F:52:BD:65:99:EA:4E:34:C6:94:DE:3B:CD:BD:25:4D:C7:BE
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 174283C3
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ATFvUr1lmepONMaU3jvNvSVNx74.roa
Signing time: Sat 01 Jan 2022 16:03:45 +0000
ROA not before: Sat 01 Jan 2022 16:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34358
IP address blocks: 188.212.111.0/24 maxlen: 24
91.250.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390235075 (0x174283c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01316f52bd6599ea4e34c694de3bcdbd254dc7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:d5:06:59:b3:3b:df:ea:aa:b1:b1:00:5a:
32:1d:14:e9:e2:52:23:06:b9:ef:51:b8:62:a3:bd:
98:ab:22:a4:91:c7:51:5c:78:be:67:7d:74:6d:6b:
22:af:6a:a4:1c:bb:38:bd:3d:91:94:ed:25:58:45:
67:67:49:eb:c6:c9:86:61:01:5e:9f:c5:20:43:7a:
c5:40:e1:0d:81:e8:ee:84:96:c9:59:b9:d6:1a:ae:
44:fa:24:14:4b:a9:4a:d3:79:8f:02:cc:33:36:59:
c4:d3:86:17:8e:8a:1a:11:8d:c5:31:67:fc:60:9f:
40:01:0d:ad:34:13:41:e4:23:15:a4:e6:cd:98:54:
08:f1:a5:e8:00:06:b9:cf:00:d1:4e:88:b5:e4:c6:
9b:6d:7d:ab:9e:41:22:7d:f5:a7:df:33:d6:24:48:
df:26:72:30:df:37:fb:c9:2a:e5:c0:57:52:e2:04:
2c:d0:39:12:a5:d3:91:00:99:72:8b:0c:40:03:5a:
b5:54:3c:20:44:bf:d3:07:be:64:a3:2a:d3:59:08:
4e:a3:d7:37:78:5d:83:c1:b9:8c:65:0c:d1:70:e7:
db:13:79:77:ff:63:c4:d3:8e:cf:a8:0e:65:c4:e5:
c5:ff:d4:23:46:79:00:09:51:4c:9c:1f:be:f9:24:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:6F:52:BD:65:99:EA:4E:34:C6:94:DE:3B:CD:BD:25:4D:C7:BE
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ATFvUr1lmepONMaU3jvNvSVNx74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.247.0/24
188.212.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:af:79:36:e4:00:b3:ad:b3:2b:94:84:f0:03:0b:59:18:6b:
04:28:89:fd:f1:75:08:ef:99:8f:19:69:e1:5e:68:47:bf:3d:
4a:b0:34:74:41:d4:50:1b:59:17:d5:89:ef:1d:97:94:6a:76:
3d:7a:f6:9f:a9:6c:a9:ba:11:47:73:30:00:92:3b:16:c5:6c:
04:a7:57:6d:d0:69:5d:14:79:f0:79:b1:80:39:1f:46:b0:f0:
95:02:f5:34:3b:06:7a:35:7b:e0:3c:4b:87:2d:cd:b5:b5:1b:
0f:5e:64:9b:ae:c5:de:bc:24:b1:2a:8e:49:95:e3:9e:9f:bf:
a7:7d:73:81:30:8c:67:58:90:7c:98:d9:4b:09:2b:f2:86:a0:
a1:43:ee:d5:02:38:03:5d:45:aa:ba:f3:a9:3c:ce:fb:2f:c0:
38:4e:33:0e:fa:5d:71:dd:16:e8:05:0d:20:ad:61:d3:c6:4e:
f4:be:e6:89:72:15:c2:fb:70:e3:c6:12:e8:f0:f6:cb:38:2d:
8c:27:bd:fb:7a:64:f5:32:78:e5:93:c1:f5:35:0b:97:33:d5:
ca:24:d0:7f:81:82:49:34:65:65:30:ea:53:b6:68:34:2a:85:
1e:be:88:1e:36:f0:e8:7e:9a:45:f2:2a:3f:c2:e1:23:cc:42:
69:22:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org