Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/qolim25eZ9V14Od2dKXL7PeyyXQ.roa
File: qolim25eZ9V14Od2dKXL7PeyyXQ.roa (raw, json)
Hash identifier: 5H135UXMa5bgJyO0AYno3D2qdwzqY6zL2XOPcaaZfF4=
Subject key identifier: AA:89:62:9B:6E:5E:67:D5:75:E0:E7:76:74:A5:CB:EC:F7:B2:C9:74
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 058EA2C2
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/qolim25eZ9V14Od2dKXL7PeyyXQ.roa
Signing time: Sat 01 Jan 2022 14:08:39 +0000
ROA not before: Sat 01 Jan 2022 14:08:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8255
IP address blocks: 193.57.122.0/23 maxlen: 24
193.57.126.0/24 maxlen: 24
193.56.246.0/24 maxlen: 24
193.57.112.0/22 maxlen: 24
193.57.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93233858 (0x58ea2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Jan 1 14:08:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa89629b6e5e67d575e0e77674a5cbecf7b2c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:f1:ce:3a:1d:d7:65:53:c0:30:0b:16:04:
06:eb:d5:2f:f5:4e:ff:a5:dd:47:a1:56:dd:a8:56:
59:e9:9e:98:0c:b9:25:d0:62:4d:d4:cf:47:68:2f:
94:54:d3:d4:cf:79:dd:ee:b0:39:27:cd:50:8c:89:
f0:29:58:89:7e:68:7b:c8:38:1b:cc:40:64:58:bf:
4d:2d:ec:20:56:32:1e:b0:24:67:36:4b:4e:cc:a8:
86:7f:70:bb:97:79:5c:e5:7a:95:81:df:f5:53:62:
6a:c7:b9:7d:f2:ef:b3:a8:79:15:21:55:d8:a5:29:
c6:da:c2:b8:e0:f6:f3:e3:75:df:87:1f:ae:1c:85:
48:8e:25:c0:92:99:12:54:f3:9a:df:c1:35:a5:3e:
25:c4:db:85:aa:11:58:9e:d9:6d:cd:fd:31:d6:34:
a2:22:5b:51:48:5e:85:03:64:99:0c:78:c2:5a:11:
12:70:44:6f:0d:88:93:96:60:d8:11:0d:cc:c3:15:
63:1d:62:11:4b:8e:a3:c2:6a:b8:77:9d:7c:8f:d8:
bf:11:99:1a:e6:2f:0d:29:0f:91:37:2e:84:49:c0:
83:85:f2:5b:75:12:54:68:07:e6:6d:ad:c2:03:cf:
e4:e0:d1:b4:56:26:f8:f4:73:6f:66:08:22:3a:44:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:89:62:9B:6E:5E:67:D5:75:E0:E7:76:74:A5:CB:EC:F7:B2:C9:74
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/qolim25eZ9V14Od2dKXL7PeyyXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.246.0/24
193.57.112.0/21
193.57.122.0/23
193.57.126.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1f:e9:c2:82:c9:0e:7a:dd:36:d3:14:c9:f8:e0:e0:82:f2:
5c:ce:2b:4b:6e:14:83:c7:a5:aa:3e:03:55:ce:00:12:02:ba:
91:00:bf:30:45:23:c6:f9:93:ed:f4:49:40:bc:91:70:41:b5:
73:ca:a0:74:02:03:ac:67:d6:e3:62:65:46:0b:f6:66:be:47:
22:24:e2:d7:b2:e0:52:3b:4e:de:96:83:80:01:d7:64:cd:63:
7f:6e:30:57:33:1c:3b:a2:cc:7a:c8:ad:80:64:83:e6:28:f3:
31:df:bd:01:e0:73:62:21:0b:ae:fa:3d:82:92:2e:51:36:2f:
31:0e:ea:fb:2a:44:87:1f:b9:b9:88:2f:58:c6:d5:3b:8d:38:
bd:b1:14:04:3d:65:f0:a4:aa:16:03:c5:66:32:50:89:0c:69:
b8:07:26:84:b5:d3:ef:e9:5e:f0:d8:1f:c2:65:84:bb:5c:89:
5f:b3:46:c2:ef:08:a8:e9:5f:ad:26:f3:e8:a5:66:14:17:bc:
94:df:1f:5c:90:2c:4b:71:2e:2b:df:1d:05:f2:1a:b6:0f:1a:
3d:69:90:de:6f:bf:c0:01:04:87:93:a2:4f:7e:e7:28:40:76:
32:1f:12:1e:99:e0:ed:71:95:85:d4:27:fd:29:f8:e3:90:c3:
44:87:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:15 2024 by rpki-client on console-fra.rpki-client.org