Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I1-hppz7sReRVoO5NXiP0YPJJAE.roa
File: I1-hppz7sReRVoO5NXiP0YPJJAE.roa (raw, json)
Hash identifier: Ay5xWNmEEVPb+JttYMWn2QlTffybVyAYHzbpRbXfvFM=
Subject key identifier: 23:5F:A1:A6:9C:FB:B1:17:91:56:83:B9:35:78:8F:D1:83:C9:24:01
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07A43DDB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I1-hppz7sReRVoO5NXiP0YPJJAE.roa
Signing time: Tue 26 Apr 2022 09:40:38 +0000
ROA not before: Tue 26 Apr 2022 09:40:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49600
IP address blocks: 193.37.65.0/24 maxlen: 24
193.37.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128204251 (0x7a43ddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 26 09:40:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=235fa1a69cfbb117915683b935788fd183c92401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:59:c3:b7:b3:3e:42:88:5c:07:ed:2e:32:65:
b6:b8:60:eb:80:bf:7d:3b:c2:26:65:e7:91:f7:2d:
5b:cd:ef:b0:ad:5a:a6:67:a2:9f:0b:88:54:7d:46:
50:25:d6:73:f6:30:e1:c9:46:1c:36:be:1d:61:09:
d0:d3:03:56:2b:71:28:03:8b:37:ac:ce:4a:a1:c4:
0b:5b:4f:97:ac:00:80:b6:4b:d6:30:9b:6e:1a:14:
5c:e4:32:ef:5c:cb:40:69:91:a0:87:02:90:ab:48:
37:11:dd:ab:02:c9:f7:bc:07:fe:1a:37:0b:d0:d8:
09:7f:08:56:df:45:d8:a5:91:cb:28:7c:cd:a9:c3:
92:8c:34:09:ee:67:63:02:13:a8:59:98:96:c7:c4:
fa:83:78:b7:b8:42:fb:b7:45:51:71:28:b3:61:2c:
7c:c3:93:6f:6c:66:78:5a:e7:18:4b:bc:fa:30:d2:
03:0c:bc:42:b8:08:c3:b3:bc:7d:6e:7f:6e:b1:0b:
49:a8:bd:08:a9:13:e4:8a:88:39:1d:4f:18:34:c7:
af:9d:77:7b:0a:fa:75:a9:d6:ad:64:a8:5a:14:f8:
a7:cd:01:34:d5:da:2f:24:96:50:9e:21:d7:e9:8e:
86:1e:b1:cc:61:37:9e:ae:77:5a:79:1a:40:06:8e:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5F:A1:A6:9C:FB:B1:17:91:56:83:B9:35:78:8F:D1:83:C9:24:01
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I1-hppz7sReRVoO5NXiP0YPJJAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.64.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a9:f4:82:2d:d2:88:b1:00:cd:d9:02:b3:87:d9:ce:99:1e:
88:14:2f:a7:6c:3a:d4:57:d6:c4:ed:4e:0d:f1:d3:87:53:b9:
0e:0d:b4:0a:7e:fc:78:3d:24:a4:d8:c9:8a:b3:4f:c7:c6:3b:
b0:d9:77:71:b7:69:12:8f:e6:dc:ad:4f:80:2c:5f:fd:0e:fb:
de:ff:7e:fa:3c:64:f3:5b:ea:1e:ba:fa:94:d8:7a:43:29:30:
0d:4a:09:07:7c:c1:78:85:95:57:3c:f9:f2:5f:27:fd:60:65:
ad:9e:d8:b6:78:37:5d:41:af:c6:c4:94:e2:a5:2a:36:c0:ef:
12:55:72:59:c1:96:0e:fe:26:be:ec:85:1d:03:17:e1:40:6e:
94:cd:1f:29:62:fa:9b:a6:b4:3c:fa:de:52:2e:19:3c:57:30:
68:60:7a:fa:6f:29:92:fc:f5:1f:51:06:39:e7:b8:8b:14:a5:
e7:5a:c2:33:12:6a:4c:9a:37:7d:47:fe:c0:c4:ca:bf:a5:15:
9f:25:ae:ac:c8:b6:19:c3:cc:e0:8b:70:54:d6:cc:11:2e:5d:
48:f2:32:70:37:6d:db:de:71:bb:ac:fe:65:52:b4:2e:a9:dd:
0e:e0:b8:56:2d:ae:64:fa:cb:e0:44:93:a0:fd:49:99:a8:4e:
27:b6:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org