Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0pNbI7Dw3yWjqpgS9lP5d4FhRfc.roa
File: 0pNbI7Dw3yWjqpgS9lP5d4FhRfc.roa (raw, json)
Hash identifier: F94IhxWlx/Bav9C2aRp0U+xu1fymFtzjTYwgNPALDx0=
Subject key identifier: D2:93:5B:23:B0:F0:DF:25:A3:AA:98:12:F6:53:F9:77:81:61:45:F7
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018530382E55530B8D6017E78A7FAFAA0D44
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0pNbI7Dw3yWjqpgS9lP5d4FhRfc.roa
Signing time: Tue 20 Dec 2022 15:47:46 +0000
ROA not before: Tue 20 Dec 2022 15:47:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202833
IP address blocks: 193.19.148.0/22 maxlen: 24
45.158.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:38:2e:55:53:0b:8d:60:17:e7:8a:7f:af:aa:0d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 15:47:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2935b23b0f0df25a3aa9812f653f977816145f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:d6:6e:9c:d9:83:47:ba:51:11:b9:fc:79:
12:98:5b:08:b4:0e:9b:2b:df:8a:36:5c:19:ee:a6:
21:00:01:ca:b5:c3:c8:4d:8f:13:bb:03:b7:92:b2:
06:13:b6:87:4c:9f:be:9e:05:e5:7f:33:d6:2c:e7:
4d:72:73:5f:cf:b0:18:73:3c:15:23:f9:47:53:e7:
67:42:51:af:c0:ba:35:df:1b:ea:a1:1b:12:98:50:
c2:e6:57:36:ff:02:5c:07:18:0b:90:6d:a8:f5:c3:
73:47:b5:30:20:f1:f8:be:27:8e:5e:d0:a1:8c:8c:
58:59:44:fd:fc:e0:73:c6:ad:50:f4:6c:8a:9c:7e:
55:5c:7e:51:3b:5a:32:cc:68:89:86:27:cf:25:02:
d1:71:25:1e:dd:e4:56:70:5f:65:8e:16:7f:53:f5:
06:98:90:a6:8a:43:19:a8:8c:a2:93:73:ec:c3:e6:
8d:f4:7a:53:c0:4e:a6:89:23:cc:63:d6:53:46:28:
ce:21:5e:93:b8:ad:08:35:fc:48:15:26:7a:12:70:
eb:b7:76:06:cb:68:03:1e:e1:17:e5:74:ca:83:94:
3c:8b:30:75:05:77:32:9c:5c:de:77:f2:1f:cd:24:
a8:7a:10:c8:66:9c:9d:68:c2:2a:07:63:29:92:d7:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:93:5B:23:B0:F0:DF:25:A3:AA:98:12:F6:53:F9:77:81:61:45:F7
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0pNbI7Dw3yWjqpgS9lP5d4FhRfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.84.0/22
193.19.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:1c:37:ed:3c:5b:26:2b:f6:b8:3d:cb:a1:9f:61:98:4e:77:
19:0c:0e:6e:9f:81:4a:b1:1f:90:36:58:f8:aa:e5:5c:0e:56:
a4:18:f2:79:d9:fe:4e:6b:65:5f:d3:5d:51:b0:8f:17:ad:ea:
00:d0:aa:28:d1:70:ab:c8:11:bd:94:cf:7a:a6:cb:e4:86:42:
86:3c:98:4f:fc:e9:a3:64:10:7d:6c:f0:62:94:8f:e8:5c:90:
89:27:f1:99:8a:63:b6:4b:a4:16:54:a3:d3:db:7c:18:ba:a4:
b7:c8:16:94:ae:a5:eb:1e:c0:1d:da:17:8a:f5:9a:8c:8d:14:
a3:10:00:f3:0f:39:3d:68:32:fd:21:ed:a5:b0:56:6f:a8:2e:
b5:6e:75:6d:fb:78:f0:b4:94:0a:cc:fa:2a:20:a6:cd:2c:e9:
2b:93:08:53:bb:39:d3:cc:29:4a:51:72:8f:db:e2:40:3b:4f:
3d:19:d5:71:ea:bb:28:61:27:c1:99:ec:dd:19:95:60:13:39:
cf:32:fb:97:0a:6f:5e:a4:15:c8:9b:aa:5f:b7:54:88:68:28:
27:3e:75:5c:65:ee:3c:2a:3b:30:1f:11:3f:98:0c:22:82:3e:
96:a8:c4:e8:e9:20:ad:36:71:da:39:36:2f:3e:51:a4:ac:b7:
61:79:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org