Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/F6El_I1BNmcuKPRzSB33bL4tCIY.roa
File: F6El_I1BNmcuKPRzSB33bL4tCIY.roa (raw, json)
Hash identifier: Xuf+s9EwE6OzBkgutqUiPgLOhpaTeFfTUpm+4i0qVfI=
Subject key identifier: 17:A1:25:FC:8D:41:36:67:2E:28:F4:73:48:1D:F7:6C:BE:2D:08:86
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 05900CD6
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/F6El_I1BNmcuKPRzSB33bL4tCIY.roa
Signing time: Sat 01 Jan 2022 14:08:39 +0000
ROA not before: Sat 01 Jan 2022 14:08:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25117
IP address blocks: 193.57.120.0/23 maxlen: 24
193.57.124.0/23 maxlen: 24
193.56.244.0/23 maxlen: 24
193.56.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93326550 (0x5900cd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Jan 1 14:08:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17a125fc8d4136672e28f473481df76cbe2d0886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:da:63:70:cb:c6:ea:e3:d8:13:16:f3:b7:e2:
fc:00:e2:75:6b:56:ee:7c:e4:3f:b0:2d:2a:8c:c1:
27:e8:23:eb:f6:80:72:ef:bd:17:d0:57:3b:ab:e2:
26:4a:83:c8:95:9f:a1:1b:76:af:bd:cc:39:49:9b:
3f:ec:c7:2a:60:1d:3f:5d:14:67:0a:7f:02:56:29:
ea:2d:d5:93:b6:34:2b:c8:62:4d:5e:fc:e1:9d:f6:
3d:2a:a6:33:d6:72:55:3b:43:4c:eb:3f:b6:02:bd:
9a:2e:01:2c:78:6d:f7:f8:53:05:49:dd:fc:78:04:
34:15:83:56:60:9f:9e:f4:61:3d:c2:16:64:b2:64:
02:5c:00:76:7b:ac:89:c4:8d:36:c6:ed:45:6b:b7:
35:80:bc:7a:cb:96:ef:3c:bf:47:ed:b9:74:98:f0:
66:0e:dc:03:f3:3d:d8:3d:96:93:d8:b7:c8:fc:74:
0a:65:16:c9:cd:56:75:67:ae:8a:6d:cc:21:05:5d:
79:4a:b4:f2:78:cf:53:4f:da:ee:48:c5:4b:85:2e:
73:c9:8d:69:20:c3:1a:08:be:46:fb:a8:12:b3:c3:
3c:5d:7d:cf:5f:1f:94:4c:5a:d6:e9:d6:67:ef:76:
7e:a9:b2:f9:39:75:98:10:01:7f:7b:e2:63:18:2d:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:25:FC:8D:41:36:67:2E:28:F4:73:48:1D:F7:6C:BE:2D:08:86
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/F6El_I1BNmcuKPRzSB33bL4tCIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.242.0-193.56.245.255
193.57.120.0/23
193.57.124.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:3e:57:f1:e6:c2:85:ba:e5:4e:3a:8f:07:0c:33:77:9f:02:
01:a5:db:0e:50:fe:00:6a:fd:00:8c:de:2c:5f:09:d0:75:b8:
9a:9e:90:bf:56:09:4d:dd:2d:8a:37:ba:32:1b:62:07:69:c0:
dc:e2:fb:63:5b:56:69:5f:ad:21:d5:4e:83:b0:dc:1f:35:63:
fc:a8:48:6c:a0:60:92:87:fa:71:7b:ea:5c:9e:56:e1:76:e1:
84:b2:c3:32:85:0b:89:1f:ea:64:d7:87:91:ed:82:e0:de:e9:
f9:6e:12:19:0a:0d:4d:25:cc:27:0b:8a:c1:84:05:30:0f:76:
7c:43:fe:ce:a9:a9:d9:47:9d:1d:b1:4e:83:4b:4a:2f:b9:62:
d1:b5:01:dc:14:f5:43:24:6f:91:24:4f:9d:63:f0:55:1e:b3:
9b:32:95:73:f2:17:a9:d3:4f:dc:72:a2:d2:d4:85:06:41:9a:
78:29:f6:08:7d:56:6d:ec:91:a5:32:d1:87:c3:b9:6c:5a:7d:
b0:df:99:a4:27:6c:98:ee:01:23:0a:1f:85:bc:84:00:eb:6e:
b7:15:3d:dc:83:fa:ab:d7:35:8e:e3:e9:a3:00:e7:e5:6e:c2:
b6:4b:62:9e:33:1c:05:fa:79:ae:c1:51:86:f3:50:67:0d:ad:
0e:38:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:15 2023 by rpki-client on console-fra.rpki-client.org