Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/9swAHkRPpFbMRSo-LdqFxuTbpU4.roa
File: 9swAHkRPpFbMRSo-LdqFxuTbpU4.roa (raw, json)
Hash identifier: WNuvBrCxHped1YNeUfOT597Ou+KtIK/EbbXTTUXTueg=
Subject key identifier: F6:CC:00:1E:44:4F:A4:56:CC:45:2A:3E:2D:DA:85:C6:E4:DB:A5:4E
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 01A2AA4F
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/9swAHkRPpFbMRSo-LdqFxuTbpU4.roa
Signing time: Sat 01 Jan 2022 13:01:22 +0000
ROA not before: Sat 01 Jan 2022 13:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39020
IP address blocks: 193.203.118.0/24 maxlen: 24
193.203.119.0/24 maxlen: 24
195.88.152.0/24 maxlen: 24
195.88.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27437647 (0x1a2aa4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Jan 1 13:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6cc001e444fa456cc452a3e2dda85c6e4dba54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:69:9e:74:a7:3e:d5:12:b6:99:18:a7:da:
91:0b:31:c0:e8:75:31:d1:2e:67:6e:4f:34:99:47:
08:5c:a6:9c:3e:d6:e9:4e:a7:ae:e7:5f:25:e3:e2:
28:ec:d2:39:10:9d:f2:b4:05:85:3d:d6:43:b5:c2:
a6:a4:53:96:0f:44:0a:9b:bc:23:7e:5f:26:4c:86:
d3:4f:8e:91:fc:44:e1:55:38:cf:16:f7:28:33:b1:
06:f9:d7:38:98:d7:dd:24:7c:4e:3d:c8:5b:25:7b:
78:1e:0f:4c:63:fe:44:2a:36:94:d0:a2:33:0b:bb:
5e:b8:a9:f9:e7:49:2a:24:95:c9:b7:3f:f1:f1:54:
16:51:fe:19:da:db:ce:1a:ab:d1:fe:05:c0:cf:97:
58:5f:2a:00:97:dd:b1:c6:16:aa:0e:6f:c8:eb:04:
e8:69:89:88:df:f8:f6:88:60:65:5e:ca:1b:5d:7d:
ca:85:4b:cf:ff:c7:d8:f9:ce:bc:ac:0c:30:cf:49:
05:ad:65:59:81:a3:0b:b7:f9:86:c4:ee:06:20:87:
2a:69:44:6d:1e:0e:16:3e:b8:b2:65:a6:b3:ce:4a:
be:22:9b:52:bc:d5:4f:cb:29:49:a4:92:20:77:40:
78:2f:97:82:42:65:10:9e:e0:19:20:a6:8c:0f:4e:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CC:00:1E:44:4F:A4:56:CC:45:2A:3E:2D:DA:85:C6:E4:DB:A5:4E
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/9swAHkRPpFbMRSo-LdqFxuTbpU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.118.0/23
195.88.152.0/23
Signature Algorithm: sha256WithRSAEncryption
37:90:f5:9c:fc:fc:01:b6:2d:87:6e:61:9a:98:50:4b:ef:1b:
16:ae:a3:59:8d:16:0f:88:01:46:d2:c0:8f:b9:10:c3:3c:10:
11:bc:32:92:b9:0e:de:72:2e:eb:87:35:f5:f4:3a:6d:c3:f5:
58:31:e7:ed:91:5a:a0:d6:77:81:9b:1c:89:c6:11:2f:4e:cd:
f1:ea:df:a2:28:c9:2e:22:82:dd:a7:9d:9c:48:f3:d9:b1:fa:
14:66:3d:d6:28:4d:ff:cb:c1:7a:ef:ee:bc:20:80:9c:f6:ff:
bb:5f:34:d3:67:0b:38:7d:eb:95:e4:88:b4:d9:f2:14:0c:66:
ff:6e:d1:b2:66:8c:8d:dd:cf:34:4a:f1:b7:c4:6a:43:08:9a:
37:d4:c8:f3:3c:64:74:b2:d0:33:cc:0b:4a:24:fc:d0:45:da:
71:a7:fa:e4:c4:d7:e9:9c:e9:09:c7:98:7a:21:4a:81:9c:e5:
02:9c:b7:cd:7c:48:3c:3e:3b:cf:2a:2d:97:ba:a3:9b:a7:1b:
af:b9:e0:a0:49:fd:38:da:34:6e:6a:b4:32:85:d0:7c:b8:49:
b9:0d:50:7c:63:83:7f:61:e8:df:2d:bf:74:e6:3b:c2:41:51:
da:43:4c:d7:81:f3:60:01:55:f9:fa:bd:20:4b:48:24:04:d6:
d5:71:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:46 2024 by rpki-client on console-ams.rpki-client.org