Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/g-f-oJVHKpe9hYnY-2PgfMTpUxU.roa
File: g-f-oJVHKpe9hYnY-2PgfMTpUxU.roa (raw, json)
Hash identifier: gh2J0GxL+yaMUseBl85/1wmnanyicemirILxsZ5+MDY=
Subject key identifier: 83:E7:FE:A0:95:47:2A:97:BD:85:89:D8:FB:63:E0:7C:C4:E9:53:15
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 0630A0D6
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/g-f-oJVHKpe9hYnY-2PgfMTpUxU.roa
Signing time: Sat 01 Jan 2022 15:02:45 +0000
ROA not before: Sat 01 Jan 2022 15:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202503
IP address blocks: 193.111.54.0/23 maxlen: 23
193.111.52.0/22 maxlen: 22
193.111.52.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103850198 (0x630a0d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Jan 1 15:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83e7fea095472a97bd8589d8fb63e07cc4e95315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:59:77:93:aa:1c:1b:7b:1a:18:89:c8:a0:
a9:58:43:f2:6f:c6:8f:41:f7:b7:9d:e7:b8:9a:b8:
0b:0b:b2:f3:d5:2a:7c:0a:45:dc:e9:88:bf:f8:ed:
11:11:64:04:68:8a:7f:d0:fc:87:fe:ed:65:2e:80:
64:12:cc:b6:aa:3d:67:fc:a1:3e:16:3b:d5:5f:b6:
1e:f4:29:16:8e:f5:0e:36:0c:be:e0:54:64:84:ce:
0b:f1:da:4b:bb:83:9d:27:09:80:75:53:55:f7:6b:
6f:f1:ad:0a:32:58:cd:38:6c:ce:41:a5:ce:be:17:
eb:4b:f5:d1:a6:c1:4f:fc:2d:80:84:dd:52:b4:db:
5e:01:91:53:88:2b:cc:98:e9:e5:73:78:9d:23:04:
f6:94:aa:4f:88:4e:4a:dc:d6:57:4d:ae:26:d9:c1:
73:76:55:d7:9c:cc:e0:86:34:ff:49:e0:8c:df:48:
3f:d4:79:fc:8b:e0:63:94:c6:24:b5:d0:60:bf:06:
4f:d3:6b:1e:73:19:a3:1b:0d:ac:24:d8:62:8e:94:
e5:2f:88:f0:ea:f5:4d:a5:c8:b9:37:61:1c:30:6d:
30:d9:b9:b3:74:27:34:29:a6:24:00:17:b0:d0:0d:
92:ec:fe:44:ca:5d:50:19:9e:ad:fa:29:60:ed:e8:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:FE:A0:95:47:2A:97:BD:85:89:D8:FB:63:E0:7C:C4:E9:53:15
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/g-f-oJVHKpe9hYnY-2PgfMTpUxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.52.0/22
Signature Algorithm: sha256WithRSAEncryption
14:4a:9c:ca:6d:85:00:8e:9b:78:20:ec:9d:6a:93:67:e2:da:
f4:d5:41:4a:36:d5:88:b3:f0:aa:46:fe:7d:1b:4f:e1:95:c4:
8c:71:09:1a:c1:40:b2:ed:61:8d:68:4d:fc:c7:a0:84:f8:c3:
1e:fa:25:cf:18:72:01:43:ef:11:0a:10:91:ea:77:15:7a:15:
11:29:73:cc:74:49:f2:4c:51:14:91:f4:50:ed:35:be:69:e3:
8d:e1:cc:25:60:9e:3a:43:4e:d3:11:a0:01:cd:91:36:fe:f3:
db:06:23:13:25:40:7f:25:b2:eb:c9:04:0d:17:29:d6:18:91:
05:bf:91:12:6d:6c:17:09:8e:bf:92:a2:8d:b6:93:d6:72:ad:
a9:79:4a:42:3d:7e:8e:35:7e:d3:6c:68:9e:d7:b3:92:47:ca:
3a:9b:65:08:1b:6d:43:23:32:06:fd:72:29:2a:b4:39:88:4f:
4c:50:13:0b:52:f7:0f:1a:05:9e:48:15:a8:0e:b8:ba:a6:c6:
00:db:31:f8:9c:50:f8:b6:86:d1:cc:ec:6f:66:67:40:c8:57:
6d:0a:3a:c9:97:7c:3e:a6:57:0a:fa:a4:f6:d5:aa:87:c3:34:
8e:e1:60:3e:39:3b:f0:bf:43:56:8b:b0:a7:36:eb:78:a7:2f:
2f:b8:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:55 2024 by rpki-client on console-ams.rpki-client.org