Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2twZwyL_4Yxhnq8riRezYo_qxFs.roa
File: 2twZwyL_4Yxhnq8riRezYo_qxFs.roa (raw, json)
Hash identifier: JL2tgtM2cCuybeJdMsD1iogPwbNPMxjcEFX6GMYL3W0=
Subject key identifier: DA:DC:19:C3:22:FF:E1:8C:61:9E:AF:2B:89:17:B3:62:8F:EA:C4:5B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01852A39C3E77139875D82745D92942D1472
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2twZwyL_4Yxhnq8riRezYo_qxFs.roa
Signing time: Mon 19 Dec 2022 11:51:46 +0000
ROA not before: Mon 19 Dec 2022 11:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200482
IP address blocks: 193.58.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:39:c3:e7:71:39:87:5d:82:74:5d:92:94:2d:14:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 19 11:51:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dadc19c322ffe18c619eaf2b8917b3628feac45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:13:2f:fa:96:1d:4e:c7:4d:10:ad:14:de:
8a:79:c9:c4:79:3c:54:3a:0c:54:cf:8e:92:17:fc:
97:8a:b5:10:5d:e9:61:7f:b0:7e:d7:6b:92:af:ce:
ff:1e:e0:42:20:3a:5d:5d:9d:23:f8:a7:73:20:f8:
47:a5:a1:b6:d8:6f:99:be:9c:a5:05:65:ed:53:8d:
81:14:d6:e9:e5:24:b9:11:5c:39:6a:16:9d:59:25:
c0:f7:cf:bd:59:22:38:2b:c6:60:75:31:fa:af:2e:
25:d6:bd:c8:cb:d6:8b:11:07:56:e7:31:00:46:87:
2f:cc:26:4d:c6:e4:c6:9b:77:0d:f3:1c:37:c8:4f:
03:cb:a9:b6:97:76:9e:c2:2c:d7:82:ac:30:a1:93:
61:be:81:43:27:4d:3b:c9:2f:68:b0:31:4d:ce:25:
0b:eb:17:c0:0f:c3:c0:1d:a8:8e:a9:52:75:f3:3c:
72:50:f6:75:c2:43:5a:33:28:d7:f1:19:0e:54:74:
c4:16:3d:b8:d9:c2:7e:56:9e:b9:e9:dc:b7:d0:73:
16:c7:81:d0:78:13:be:4f:84:19:6d:cd:1a:87:91:
e0:fa:2e:5b:83:df:1a:b3:7c:16:8d:b3:0d:a1:ee:
8d:33:bc:f4:82:e5:c4:91:1a:69:52:88:e4:6d:52:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:19:C3:22:FF:E1:8C:61:9E:AF:2B:89:17:B3:62:8F:EA:C4:5B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2twZwyL_4Yxhnq8riRezYo_qxFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4a:84:1c:eb:3a:38:a9:98:bc:2d:91:49:de:98:2d:1a:89:
c2:27:2a:26:39:a2:9b:46:79:e1:b0:a5:08:1f:1e:42:a3:d8:
ff:36:72:7f:5f:37:e4:0a:29:89:7e:34:81:67:10:2d:be:ca:
90:92:0a:82:f5:2b:33:34:1a:ab:80:8b:99:66:8c:3e:d2:95:
4e:2d:64:a2:fd:a9:34:49:e4:19:6c:79:40:c1:51:6e:64:9c:
07:bd:51:3a:a3:ed:59:62:64:8f:33:f6:de:82:15:67:bc:e5:
b1:8f:46:09:1f:30:96:7d:2f:bd:98:d1:06:22:8c:16:79:25:
2e:19:d5:02:10:3f:9c:d2:a4:41:02:51:8d:2e:35:94:6e:61:
6c:1c:b1:b9:2e:0d:c0:68:0d:7c:d8:8b:4a:00:d8:bb:eb:aa:
57:d5:39:fc:36:23:85:06:db:14:94:81:77:dc:4f:d3:63:77:
63:5f:42:48:61:c7:5b:7e:26:51:38:3f:f4:4f:90:61:db:60:
2f:d8:d9:d7:d2:2b:9b:ee:fb:18:ae:78:24:b2:3b:d3:c4:e3:
14:33:5e:5e:91:fc:78:e6:49:aa:08:aa:34:6e:b5:90:d7:46:
f6:ed:d9:3b:8b:fe:1a:8b:c4:a7:10:e2:16:f6:98:0a:28:01:
8c:d5:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org