Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/f0kwpNC2R_momOf_PbIxWfrUmL4.roa
File: f0kwpNC2R_momOf_PbIxWfrUmL4.roa (raw, json)
Hash identifier: 4a0wTEtlHXEQipzdYkVgclIqamnmM3dciug0DynIO/w=
Subject key identifier: 7F:49:30:A4:D0:B6:47:F9:A8:98:E7:FF:3D:B2:31:59:FA:D4:98:BE
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 02AEBE87
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/f0kwpNC2R_momOf_PbIxWfrUmL4.roa
Signing time: Tue 26 Apr 2022 10:10:38 +0000
ROA not before: Tue 26 Apr 2022 10:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58074
IP address blocks: 193.138.99.0/24 maxlen: 24
194.6.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45006471 (0x2aebe87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Apr 26 10:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f4930a4d0b647f9a898e7ff3db23159fad498be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:2c:72:e8:69:59:2f:99:5f:1b:e0:bc:d1:
7d:56:c4:4a:06:24:ac:9e:d1:5d:ed:b8:1d:b3:ac:
39:35:46:a7:f3:5f:fd:c8:b7:2d:2c:59:68:ba:14:
05:2e:4c:77:e2:0c:36:9d:36:b7:db:03:64:c9:a9:
98:17:68:c3:95:7d:af:bf:23:4a:14:cf:09:f8:10:
8c:25:c3:b7:0e:c2:2d:56:e5:4d:ea:e7:ba:d6:e0:
8f:ec:94:80:ee:af:d2:30:27:0a:cc:18:17:33:0a:
ff:8a:8b:df:56:13:04:79:b1:f5:96:71:36:79:73:
7b:5e:5d:e2:c7:99:8f:3e:3e:fb:86:47:89:94:1e:
b4:bd:47:30:ca:36:92:fd:be:6f:f6:a6:11:05:19:
06:21:3d:28:cf:18:20:6b:81:78:5e:04:97:fb:ab:
d2:60:2f:b0:44:c1:3a:e8:24:82:99:87:08:ac:fd:
40:85:7d:8e:71:56:e5:2a:38:c3:e3:b0:51:f2:ad:
d9:0d:45:37:38:34:ce:fb:35:c7:ca:8f:aa:54:53:
24:de:09:d7:33:a5:1e:31:1d:0f:cc:03:4a:8e:1e:
3e:d5:b7:db:1c:9d:83:67:e7:60:29:b2:f6:4a:63:
9e:a8:df:99:95:cd:8b:36:32:ec:d4:27:08:7b:fb:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:49:30:A4:D0:B6:47:F9:A8:98:E7:FF:3D:B2:31:59:FA:D4:98:BE
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/f0kwpNC2R_momOf_PbIxWfrUmL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.99.0/24
194.6.201.0/24
Signature Algorithm: sha256WithRSAEncryption
96:49:c8:8d:14:a8:3d:22:0f:df:aa:2c:bb:d1:de:83:33:7f:
11:64:69:18:32:03:9f:15:91:6e:bd:c4:4d:a4:95:cf:70:47:
97:15:6f:f9:b7:5a:52:97:3e:c3:b8:3d:eb:5f:2f:b4:7b:db:
ab:49:5e:6a:41:68:51:c4:49:79:de:e3:ae:1d:ad:a0:94:7d:
a8:1e:71:2e:cf:6b:34:45:2f:8b:10:78:26:3a:35:ef:d9:ac:
2c:44:1e:90:e0:d0:38:3f:dd:df:3c:b7:78:0a:dc:6f:d2:7d:
d6:b3:a2:e1:02:e8:af:1f:6a:d4:30:44:b1:4a:a6:97:8a:01:
11:cc:7f:9e:67:e6:d2:aa:97:77:21:55:78:ab:59:ea:95:30:
a0:a0:8c:9a:69:03:bf:67:d5:a7:52:37:28:97:fd:41:d1:db:
f6:dd:0d:f2:ff:cc:fc:0f:5f:5a:c2:82:b1:5e:e5:b3:20:c8:
d8:c2:31:d7:73:72:36:51:b2:2f:a0:49:99:85:fb:e7:4e:ca:
b5:6e:9b:ec:da:43:68:b2:c0:47:c4:81:c5:05:8b:04:37:57:
79:aa:45:be:6a:d4:e6:b6:fe:cc:65:78:1f:ce:0b:57:d8:62:
c8:4c:3a:34:99:4b:07:d5:52:81:1c:bc:e5:1a:50:b2:fe:e1:
d4:6e:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org