Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/1-tTNEWrWoGg30aZUJenr2oFNQkM.roa
File: 1-tTNEWrWoGg30aZUJenr2oFNQkM.roa (raw, json)
Hash identifier: XxcgC8m7hNgWJRhy4C1gH2u0tYWSbs0iPBKWLUtvofY=
Subject key identifier: FA:D4:CD:11:6A:D6:A0:68:37:D1:A6:54:25:E9:EB:DA:81:4D:42:43
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0AA6B884
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/1-tTNEWrWoGg30aZUJenr2oFNQkM.roa
Signing time: Fri 11 Feb 2022 14:18:40 +0000
ROA not before: Fri 11 Feb 2022 14:18:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201086
IP address blocks: 193.36.63.0/24 maxlen: 24
185.254.94.0/24 maxlen: 24
2a05:b700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178698372 (0xaa6b884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Feb 11 14:18:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fad4cd116ad6a06837d1a65425e9ebda814d4243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:1c:3b:c2:f2:b1:b8:a1:0f:92:29:98:d9:
b6:8a:34:40:82:1d:eb:ec:69:f4:e1:7e:df:3b:d5:
c7:63:e2:04:75:ee:c3:fa:3a:a4:27:ab:f8:c9:ad:
a1:49:d6:d0:2f:3d:de:10:c7:e3:62:59:61:1c:53:
f0:40:3e:e9:06:f4:67:54:95:ed:e4:14:8c:ea:c4:
eb:1a:3e:63:2f:38:15:9e:0c:f6:cf:5c:d9:11:05:
e8:f3:c8:5e:96:13:76:71:6f:ed:a9:bd:78:c6:d4:
f7:64:13:d0:ae:b9:38:01:fb:5a:bf:f6:85:48:d2:
05:5e:8c:1d:1d:1a:0c:cc:e3:f4:30:40:77:9b:55:
75:a3:7f:1e:5d:b7:37:23:3f:23:51:01:05:e1:53:
ed:67:44:cb:0d:6e:51:45:4d:a2:91:65:19:29:80:
d9:f9:70:f6:22:68:37:06:e5:02:b3:8a:95:2d:72:
22:0a:6e:15:f2:1b:82:07:fb:80:a3:eb:f7:3f:3c:
35:73:e6:42:26:18:b4:3b:98:e9:79:91:ed:64:91:
e2:7d:78:22:2a:f4:f8:52:cd:63:16:32:9f:93:cd:
61:64:09:2f:fb:66:9d:e7:8f:3a:1c:fb:0b:59:e9:
ed:50:fb:d3:c4:8a:2e:d3:53:3d:d3:e3:8d:fc:7b:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D4:CD:11:6A:D6:A0:68:37:D1:A6:54:25:E9:EB:DA:81:4D:42:43
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/1-tTNEWrWoGg30aZUJenr2oFNQkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.94.0/24
193.36.63.0/24
IPv6:
2a05:b700::/29
Signature Algorithm: sha256WithRSAEncryption
76:cf:95:9b:22:a3:c3:22:70:23:b8:07:9f:7c:bd:60:be:ea:
4d:7b:66:40:5b:9f:d6:d0:89:7e:70:08:e1:9d:97:3c:51:ea:
5d:0d:44:49:f3:a2:ab:2c:a3:49:b2:96:cd:98:48:5d:58:ab:
39:13:88:20:67:c7:88:18:f6:3e:f7:50:22:45:24:1d:85:d4:
08:77:bc:c9:1d:fb:59:48:bc:a9:24:02:61:71:ec:d7:9d:af:
04:96:14:5a:d0:77:fd:13:3d:17:40:f8:a1:2d:14:0c:dd:ad:
11:78:2e:c2:28:74:1a:b2:7a:41:ca:cc:92:97:b8:34:58:88:
e9:4a:4d:63:81:12:84:ce:0f:21:11:85:8c:cc:c9:a4:8c:e9:
fc:fe:c7:a4:09:8d:73:ac:e6:df:dc:a1:d7:f4:c0:a2:4d:7a:
6b:30:1a:2d:b3:cd:ad:7e:fc:9d:96:17:ef:ec:75:7a:2a:62:
f5:1f:9a:f8:b3:f9:5d:98:df:ea:b6:d7:4f:d8:56:4c:75:45:
cb:c7:f4:ef:a0:93:cf:50:f0:dc:22:3d:43:f5:4f:ea:a1:e0:
3a:ac:cd:8d:8f:9b:c6:51:d5:16:4a:dc:3a:f8:3f:da:a9:a1:
ee:6d:6e:75:3a:d4:58:9b:6f:7b:1a:27:df:58:dd:79:26:ca:
60:c9:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org