Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/C6mUF1XNaoHSATl2NQbU90CesuM.roa
File: C6mUF1XNaoHSATl2NQbU90CesuM.roa (raw, json)
Hash identifier: EtGvif6TqtOWX6nJdeeoqG2lNEppNA7LjXogVwNiMK8=
Subject key identifier: 0B:A9:94:17:55:CD:6A:81:D2:01:39:76:35:06:D4:F7:40:9E:B2:E3
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 0978366D
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/C6mUF1XNaoHSATl2NQbU90CesuM.roa
Signing time: Sat 01 Jan 2022 04:51:24 +0000
ROA not before: Sat 01 Jan 2022 04:51:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12993
IP address blocks: 195.216.236.0/24 maxlen: 24
194.152.32.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158873197 (0x978366d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Jan 1 04:51:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ba9941755cd6a81d20139763506d4f7409eb2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:04:1c:3e:75:f2:c8:fd:91:fd:a8:a7:08:
a4:4e:7e:52:9b:60:77:af:3f:ab:66:fe:08:3b:3c:
16:46:f1:b7:80:91:2d:36:eb:9c:35:da:cc:41:28:
ee:3a:13:23:02:1e:0f:fc:98:8d:d2:4f:ce:31:c9:
e2:25:02:24:02:d2:51:fb:ff:f4:c5:59:29:c5:7b:
d5:4f:87:4a:13:0a:03:1c:37:6d:5c:ba:70:94:2e:
d8:0f:c3:0e:9c:4d:9e:72:e8:c4:ac:20:c8:ef:68:
ec:48:15:92:ce:d1:a2:fd:55:67:49:fb:5c:fa:29:
91:01:19:9d:d4:33:dc:dd:37:37:2c:ef:83:a3:2e:
bf:27:f6:27:04:2f:5d:7d:b7:f0:18:91:08:4f:43:
dc:f0:fa:45:ac:27:a4:c1:5e:8c:4f:84:0a:0b:11:
04:d0:96:98:a8:26:95:8a:67:32:16:c8:64:18:5c:
4a:1a:cb:36:94:b2:c9:0b:c7:36:ba:66:91:1d:f6:
45:d3:57:bf:82:89:3b:c2:0e:98:9d:50:18:61:ac:
0c:c5:23:52:66:97:a1:b5:69:75:be:76:50:e2:98:
e3:e3:62:e2:54:97:7e:f0:d3:a3:92:7b:c5:aa:a2:
2c:a5:7b:08:ff:01:a8:e5:45:bb:9d:c7:5b:be:0b:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A9:94:17:55:CD:6A:81:D2:01:39:76:35:06:D4:F7:40:9E:B2:E3
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/C6mUF1XNaoHSATl2NQbU90CesuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.32.0/23
195.216.236.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c6:33:44:50:1e:c7:c6:8e:92:91:b2:1a:f3:60:a7:7e:1a:
f1:47:94:cc:c7:61:51:93:89:a2:26:41:b5:8e:7d:f9:b1:d3:
79:de:80:1b:29:72:4e:b6:f3:70:69:9d:b6:7e:bd:5c:ec:c1:
92:77:9c:b2:61:45:33:51:f6:81:e0:eb:5d:bf:78:b5:9f:01:
3b:f4:92:99:ca:6d:de:30:b9:11:cd:01:01:82:d4:1c:40:39:
ce:f2:49:49:70:f9:25:3d:70:74:df:08:c3:d6:f1:c4:d4:49:
0d:ec:0e:63:a9:11:bd:a0:92:50:83:d5:25:2a:7c:17:4b:09:
be:1d:75:9e:0e:94:ce:bf:40:f5:21:f6:5b:62:98:f5:ca:d1:
bf:2a:3e:01:a1:0a:a7:71:74:03:a8:d4:85:dd:51:90:bb:36:
73:92:63:b6:77:89:93:0d:ca:6d:e0:73:92:3e:39:1c:25:16:
5a:a0:15:bc:d8:0e:28:25:0c:f3:ee:16:bd:60:8d:76:22:4f:
d9:42:d5:27:50:94:a1:24:12:e3:a9:54:fb:f6:ff:86:e0:f4:
cd:a1:97:d6:92:1d:31:75:64:6f:09:dd:bd:ea:54:46:63:f1:
e0:9a:f7:c2:71:b5:7f:a5:da:76:0c:1e:64:6c:96:0a:3f:96:
3f:21:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:04 2023 by rpki-client on console-fra.rpki-client.org