Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Bw5at5bpMz9nYySn8yNXQhP4-mk.roa
File: Bw5at5bpMz9nYySn8yNXQhP4-mk.roa (raw, json)
Hash identifier: xEalT2jHmDSzpbO339xHNSx9RDJFSP+canK3HWp2lSI=
Subject key identifier: 07:0E:5A:B7:96:E9:33:3F:67:63:24:A7:F3:23:57:42:13:F8:FA:69
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183080B5223982C0EE8DFF0C3FE73116B80
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Bw5at5bpMz9nYySn8yNXQhP4-mk.roa
Signing time: Sun 04 Sep 2022 10:28:23 +0000
ROA not before: Sun 04 Sep 2022 10:28:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202402
IP address blocks: 193.34.234.0/24 maxlen: 24
185.233.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:0b:52:23:98:2c:0e:e8:df:f0:c3:fe:73:11:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 4 10:28:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=070e5ab796e9333f676324a7f323574213f8fa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:ea:4d:6c:79:6a:d8:b2:3d:60:53:53:92:
3f:4e:f7:43:8c:c7:05:2a:72:94:9a:49:d3:25:ac:
45:c9:90:bd:71:91:5c:7e:c6:d5:5c:ac:22:69:fb:
5a:f2:fc:08:7e:23:d3:e6:93:c1:10:0d:bc:52:f4:
88:25:1b:c5:4d:03:9d:34:2e:06:e2:93:bb:c5:46:
a6:1c:d0:4c:3f:c4:f8:9f:c7:89:9c:84:4f:25:f9:
ab:d2:35:b2:d0:06:9d:6c:1d:1e:10:7c:75:8c:95:
4d:fd:00:9f:77:90:34:a0:8f:0e:49:83:4d:32:47:
82:ff:90:bb:21:6e:a4:34:b0:00:31:8b:2e:bb:19:
16:cd:ea:97:dc:b1:11:79:25:a7:9c:4d:9f:d0:d6:
4f:31:2b:5e:0b:39:dd:b1:aa:e0:6b:55:19:22:a1:
04:f7:52:ac:7c:c9:67:ed:33:36:1d:d4:6a:42:29:
dc:62:23:1a:de:7f:7f:07:e3:6c:94:31:27:2b:3b:
1c:cf:4c:f4:94:7f:36:41:75:29:27:1e:16:8e:cc:
f8:ca:15:25:a6:b1:a0:76:f6:ee:99:84:da:a3:fc:
7f:cc:1b:24:f7:c3:80:0f:c9:cd:2d:b5:7f:c4:cd:
a3:80:60:5f:8a:44:dc:57:74:8c:81:a0:67:49:76:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0E:5A:B7:96:E9:33:3F:67:63:24:A7:F3:23:57:42:13:F8:FA:69
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Bw5at5bpMz9nYySn8yNXQhP4-mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.201.0/24
193.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1c:ad:63:bc:37:54:91:ce:b2:e8:8d:b8:7d:60:d0:39:fb:
97:0c:93:6f:34:58:bf:cd:e4:08:50:63:95:5f:a6:fa:ea:3a:
c5:99:27:b9:b9:0d:b8:d5:54:1e:fc:0b:a1:7e:d3:6a:ce:29:
f9:09:02:7d:94:c9:fe:7e:f3:84:22:f9:be:92:7a:25:d5:07:
c6:20:8e:dd:7c:de:b1:b6:6f:aa:3c:f8:77:03:65:6e:6e:d2:
07:0b:1b:3e:0b:8c:4c:4f:85:d6:59:b9:7c:4d:b7:fe:ab:bf:
9f:63:18:8c:14:3f:8d:7a:fc:50:6a:67:a0:96:03:02:14:68:
5e:75:61:7f:30:ae:03:22:e2:52:a2:6c:f2:f0:f6:32:28:c1:
db:de:02:e9:0c:cf:e9:28:06:5c:1d:68:7f:8c:7b:70:12:ae:
34:5c:b2:27:7a:15:54:04:1f:e4:40:4a:e6:8e:2a:9f:f8:d2:
49:e9:74:07:2b:44:d4:40:f8:18:53:12:ec:2a:b7:12:ed:9d:
ab:9c:d2:64:fd:4c:0f:42:7b:07:96:d6:b9:2f:1b:25:28:47:
69:4f:94:b0:87:35:31:88:89:42:2c:4f:2e:aa:c2:39:f6:f1:
c5:de:2b:32:6c:71:6d:a9:5e:96:c4:d7:0f:0b:f3:86:2a:f8:
a7:7a:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org