Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/dC9e9jClNvr7zIr2FFAodfvHfOw.roa
File: dC9e9jClNvr7zIr2FFAodfvHfOw.roa (raw, json)
Hash identifier: cyCdMFVi7sWtYWOpLq1NhXKk7dpAZreN4gsaSJP8rDY=
Subject key identifier: 74:2F:5E:F6:30:A5:36:FA:FB:CC:8A:F6:14:50:28:75:FB:C7:7C:EC
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 0745C22C
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/dC9e9jClNvr7zIr2FFAodfvHfOw.roa
Signing time: Sat 01 Jan 2022 14:00:21 +0000
ROA not before: Sat 01 Jan 2022 14:00:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.59.0/24 maxlen: 24
2a0f:ca80:1338::/48 maxlen: 48
2a0f:ca80::/48 maxlen: 48
2a0f:ca86::/40 maxlen: 40
2a0f:ca80:1::/48 maxlen: 48
2a0f:ca80:1337::/48 maxlen: 48
2a0f:ca83:1337::/48 maxlen: 48
2a0f:ca84::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122012204 (0x745c22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jan 1 14:00:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=742f5ef630a536fafbcc8af614502875fbc77cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:1e:f6:57:6a:5c:49:9f:4c:d5:78:df:f3:
38:c2:b7:8b:87:10:6b:2a:1a:5f:3e:35:ae:ea:32:
6b:00:48:e9:38:9a:de:58:c6:99:d6:12:70:91:fd:
32:98:d8:c4:16:3e:3b:88:10:90:9a:53:f7:34:82:
76:3a:04:c2:db:d9:a2:26:79:74:c8:7e:15:1a:6e:
3a:92:a2:3f:19:3a:75:21:5e:87:04:51:95:7e:c4:
45:58:15:f4:7f:aa:37:ce:d3:9b:91:f0:89:5a:a8:
c1:1e:e4:82:80:e6:ea:85:91:99:1e:bb:0b:c9:01:
e3:e7:cd:c7:b0:7c:04:1f:dc:67:aa:60:db:fc:34:
68:57:80:4d:37:23:c6:c5:6d:5a:77:32:1e:f6:de:
fd:fd:df:6d:51:5f:d3:f0:d3:f6:92:10:e8:e3:f5:
15:09:20:fd:52:35:18:b4:85:1f:40:85:e5:ea:45:
74:68:a9:56:79:cf:84:8f:4c:3d:f1:6d:f7:d0:7d:
d3:db:47:2f:1b:61:83:88:a2:df:57:9a:0c:c6:63:
7d:fe:c1:36:23:a7:db:30:75:b7:c3:45:6e:77:6a:
c5:cb:b0:ba:62:0b:2f:3d:7a:52:69:6a:e6:60:52:
d4:93:6b:24:d2:db:28:41:61:c6:ac:3f:36:67:bf:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:5E:F6:30:A5:36:FA:FB:CC:8A:F6:14:50:28:75:FB:C7:7C:EC
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/dC9e9jClNvr7zIr2FFAodfvHfOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.59.0/24
193.142.146.0/24
IPv6:
2a0f:ca80::/47
2a0f:ca80:1337::-2a0f:ca80:1338:ffff:ffff:ffff:ffff:ffff
2a0f:ca83:1337::/48
2a0f:ca84::/40
2a0f:ca86::/40
Signature Algorithm: sha256WithRSAEncryption
59:ed:a1:8c:df:01:71:58:a3:08:0c:4f:01:2c:6a:36:c2:bc:
1a:55:1d:43:5b:c8:cc:b3:02:b5:1d:f6:9e:e3:8e:df:34:e7:
11:27:52:ae:48:30:f9:80:77:f8:7e:a3:d8:80:b6:0e:6c:f8:
92:a2:c1:d9:15:f8:c2:02:e4:bc:0d:13:36:ff:35:fe:5f:39:
51:ca:a5:0b:bb:98:89:d1:f8:42:1e:42:d2:b1:9f:7e:c5:4a:
d5:a4:d8:a0:29:a5:cf:6a:de:4e:aa:9e:c5:e5:fe:5f:9b:a3:
6f:2e:e2:4a:b4:ef:b3:6b:e6:11:83:ea:e7:e5:dc:34:ec:4b:
4c:54:93:18:fd:bc:16:8d:aa:a4:91:70:29:65:9f:a2:ea:43:
ca:c1:89:74:0c:c2:8a:27:1c:ec:2d:01:de:de:7b:f5:47:7c:
92:f9:11:18:45:e2:c8:95:0a:e6:f1:6b:d6:e3:55:dd:60:33:
99:8d:7d:bc:98:72:8a:7b:b6:f1:12:cc:2a:57:3a:e8:aa:94:
86:2f:eb:0d:27:ff:c6:34:2e:30:95:99:d8:44:57:45:82:82:
fb:58:54:b3:57:58:9b:12:d7:af:7d:2d:20:ae:11:dd:66:cb:
b3:00:c4:a7:09:52:5b:e3:ea:ef:77:67:eb:66:2e:be:bd:28:
9c:0c:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org