Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/55Tx9I-V7bLqvCRhK6wZwF2iHZI.roa
File: 55Tx9I-V7bLqvCRhK6wZwF2iHZI.roa (raw, json)
Hash identifier: +8aKZaxNtoU2YnVReE6CY5kNTBF4cW/RYZpsrPLE1O0=
Subject key identifier: E7:94:F1:F4:8F:95:ED:B2:EA:BC:24:61:2B:AC:19:C0:5D:A2:1D:92
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 03796FD2
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/55Tx9I-V7bLqvCRhK6wZwF2iHZI.roa
Signing time: Sat 01 Jan 2022 15:01:30 +0000
ROA not before: Sat 01 Jan 2022 15:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30860
IP address blocks: 193.107.201.0/24 maxlen: 24
193.107.202.0/24 maxlen: 24
193.107.200.0/23 maxlen: 23
193.107.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58290130 (0x3796fd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jan 1 15:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e794f1f48f95edb2eabc24612bac19c05da21d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:29:13:2f:df:b5:54:5a:36:6d:6d:48:9b:
57:a0:c0:b1:43:4d:d2:1f:fa:e7:23:0d:0f:64:36:
d2:3c:0f:d0:5e:5f:2b:8e:44:2c:71:a2:e9:3f:b8:
a6:db:90:27:a4:1d:75:05:ea:c6:4d:0d:1f:02:bc:
dd:be:85:74:32:97:d6:ae:19:b3:7c:69:56:e9:35:
ba:2b:b6:9b:fc:d6:dd:a0:e5:e3:44:a1:7e:ab:1c:
8f:66:af:21:7c:a2:78:ad:13:a2:d3:fc:fd:5b:94:
6c:d9:76:1d:53:9e:ec:03:41:ae:a8:87:24:64:17:
d9:65:1f:9d:4b:f9:1b:ef:ff:76:f4:62:51:b4:23:
8a:6d:db:b3:f8:e4:11:41:74:8f:e8:d0:7d:d6:ce:
af:37:b9:2f:22:6e:8e:62:07:0b:4a:23:cd:56:08:
35:a5:d3:78:23:d6:a0:b2:c0:f7:6d:3e:77:2c:03:
e6:bb:fe:3f:89:22:a0:b6:00:b9:d2:77:a3:cf:c1:
f7:18:e1:91:81:a3:cb:d1:ca:0b:e1:59:e3:12:93:
7b:fb:53:e2:37:a4:13:03:34:77:da:96:38:5a:59:
f0:f7:56:a3:ba:bf:d8:65:6c:6a:8b:cf:98:66:05:
0c:58:0f:b8:51:f8:d5:85:eb:76:be:be:b4:1d:24:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:94:F1:F4:8F:95:ED:B2:EA:BC:24:61:2B:AC:19:C0:5D:A2:1D:92
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/55Tx9I-V7bLqvCRhK6wZwF2iHZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.200.0-193.107.202.255
Signature Algorithm: sha256WithRSAEncryption
3e:dd:1e:04:e9:81:29:80:b4:bf:2b:c4:43:69:20:95:d1:45:
34:d3:63:fc:bf:08:ac:f8:ad:10:40:8c:93:85:3a:64:3c:bd:
c5:b3:cc:c9:d9:a6:e9:09:53:31:b5:43:3d:5f:b0:fe:69:ed:
15:33:ab:f3:c0:b9:14:03:d9:9c:3b:f1:09:0f:c7:3d:e3:3b:
8c:20:fe:53:b2:56:25:84:c7:1f:2d:c7:60:1b:23:1a:03:f8:
15:c7:29:65:02:4c:5d:8a:a2:3b:8b:0f:9f:30:78:03:8a:f8:
23:0d:46:21:2b:b5:88:37:02:0e:27:a7:cb:84:82:59:bb:7c:
4c:93:6a:16:a1:13:a6:e1:7c:36:8f:ed:83:97:68:37:37:e4:
47:18:83:ea:5d:c5:80:3f:9b:9e:fb:43:ed:2c:96:d0:4f:03:
15:48:1e:be:b8:3b:fd:c7:cc:7a:ad:65:3f:4f:0d:74:83:ee:
40:fc:82:b1:f2:6e:61:2a:73:a4:60:3c:53:f4:56:4f:75:c0:
bc:96:57:b0:91:52:ef:b6:2d:78:ab:d3:9b:c4:06:ad:64:42:
24:8c:22:82:4e:c2:6e:47:eb:d6:0e:bf:d0:90:cc:f8:08:a4:
7e:84:5f:fe:bd:b6:56:45:dc:42:7a:1c:04:bc:b4:1c:35:e3:
8d:6d:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:17 2024 by rpki-client on console-ams.rpki-client.org