Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/C4_fYREKCKXLvszi3i18WTbpKtM.roa
File: C4_fYREKCKXLvszi3i18WTbpKtM.roa (raw, json)
Hash identifier: 4pl+4nif1c8BnsOCfxM8DvLVDnZLluXOHIx8t+PINBI=
Subject key identifier: 0B:8F:DF:61:11:0A:08:A5:CB:BE:CC:E2:DE:2D:7C:59:36:E9:2A:D3
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 0279CB17
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/C4_fYREKCKXLvszi3i18WTbpKtM.roa
Signing time: Sat 01 Jan 2022 07:03:17 +0000
ROA not before: Sat 01 Jan 2022 07:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31069
IP address blocks: 193.30.246.0/24 maxlen: 24
193.30.246.0/23 maxlen: 24
193.30.247.0/24 maxlen: 24
194.187.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41536279 (0x279cb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Jan 1 07:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b8fdf61110a08a5cbbecce2de2d7c5936e92ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:74:b0:51:26:cc:9b:2b:5a:42:33:1f:e8:
07:1a:3f:28:93:c4:37:e3:d1:1c:d6:b5:d4:ca:d5:
06:1d:1d:e9:0d:43:37:fe:89:f7:66:96:06:1f:f8:
63:8e:63:eb:f5:5b:6e:bd:84:0c:cb:d9:d0:3e:a3:
05:a9:03:21:88:62:3f:5d:07:53:8f:64:90:3b:b2:
28:12:f6:fb:7b:2f:b3:c9:d9:19:55:16:eb:46:a9:
10:a1:fa:a2:c4:07:29:1d:75:f1:82:35:b5:92:3a:
a2:9d:b1:2a:de:10:50:12:53:55:53:4f:bc:3f:a6:
d2:5c:df:c7:58:bd:a3:d6:71:36:f9:54:80:99:1f:
34:7d:8d:54:66:5d:18:ec:03:90:90:a2:29:ef:ef:
58:fe:ef:9d:3f:f6:e7:76:6b:11:50:60:30:c7:1c:
97:3a:35:c1:f8:63:04:b3:1d:07:8d:6f:8b:96:e6:
0f:57:9f:d0:af:78:11:b8:40:4e:9d:8f:65:4e:3b:
96:0a:13:18:ea:19:6a:6c:78:5f:e5:c0:26:51:07:
84:01:24:58:c3:9d:be:06:8d:e2:d0:2b:1c:0c:3d:
7e:83:8c:79:f2:e1:85:be:6b:ee:a3:4c:27:1e:7a:
68:8a:3b:03:ae:3c:01:d4:65:01:68:ee:09:02:4d:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:DF:61:11:0A:08:A5:CB:BE:CC:E2:DE:2D:7C:59:36:E9:2A:D3
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/C4_fYREKCKXLvszi3i18WTbpKtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.246.0/23
194.187.28.0/24
Signature Algorithm: sha256WithRSAEncryption
47:37:15:c6:c9:ac:58:c2:8a:5f:09:7b:6a:7a:d5:16:b8:6c:
99:2d:03:d3:c6:c9:9c:15:93:69:3e:47:d6:1a:9f:96:6d:4b:
4d:48:2b:3d:c0:9a:12:7e:e3:6a:08:69:3a:e8:97:c5:6d:aa:
2f:1c:16:7a:f8:7f:ee:8f:98:32:62:72:88:08:dc:3c:41:1d:
e5:58:2f:07:84:b4:de:af:22:a4:19:1d:ee:6a:ed:eb:24:bd:
d9:ee:65:e5:0d:a8:7c:10:ed:47:8b:b1:a8:5f:19:10:8d:71:
ce:28:9c:46:65:c9:e0:50:d4:fd:eb:13:76:95:bf:9f:f3:a4:
1b:94:65:ca:65:40:c1:d0:a2:aa:65:9b:2f:41:7d:f9:9c:28:
95:00:bc:82:91:ec:1d:e5:29:bc:f1:ab:eb:00:d5:be:0f:78:
7b:ec:aa:79:73:29:23:00:f1:11:82:f4:8d:f7:e8:25:41:9b:
7e:75:f8:ba:87:7c:aa:4f:1a:19:a5:ad:d0:e8:25:3b:c6:c1:
0e:27:36:a4:3c:a8:ff:75:2c:05:da:90:ea:6c:ce:59:b3:87:
d6:07:c0:3d:1e:3c:42:7e:94:0c:37:2f:9c:5b:3b:2e:a2:58:
8a:ce:32:89:40:6c:95:04:d7:4a:28:51:ed:2b:fa:db:69:b2:
31:54:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:35 2024 by rpki-client on console-fra.rpki-client.org