Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/bKPWqQqR6Gf9XW6643tIyT-38xI.roa
File: bKPWqQqR6Gf9XW6643tIyT-38xI.roa (raw, json)
Hash identifier: 0sZElMej6JP7HAf84XhdOOKPYHxOYZTiCT6yv8YkhKg=
Subject key identifier: 6C:A3:D6:A9:0A:91:E8:67:FD:5D:6E:BA:E3:7B:48:C9:3F:B7:F3:12
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 08AA854F
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/bKPWqQqR6Gf9XW6643tIyT-38xI.roa
Signing time: Sat 01 Jan 2022 05:56:33 +0000
ROA not before: Sat 01 Jan 2022 05:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34950
IP address blocks: 193.192.54.0/23 maxlen: 23
185.222.176.0/22 maxlen: 22
193.41.168.0/23 maxlen: 23
193.8.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145392975 (0x8aa854f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 1 05:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ca3d6a90a91e867fd5d6ebae37b48c93fb7f312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:5a:e9:f8:5f:ef:45:9c:51:65:99:e4:ef:
02:37:00:1f:c1:bd:0d:20:ce:47:a9:23:96:e5:1b:
80:2d:1d:37:00:08:d7:6f:26:9f:f4:c1:34:ba:7a:
8e:fc:17:77:c4:c4:5d:50:90:ba:68:00:97:57:f2:
ab:ae:cc:8d:07:5d:06:0a:0d:b4:06:41:f7:ac:b3:
50:4b:e8:6a:94:3b:87:81:2d:5a:96:6d:3b:de:0b:
37:37:19:c1:ec:33:c0:f7:57:f1:c9:9a:37:88:4c:
78:47:b9:58:4d:3f:f2:c3:1f:65:8c:a7:47:6e:54:
69:4b:88:cb:a4:ab:39:5a:73:94:1e:c6:63:65:9f:
b1:06:95:6e:8e:8c:17:7f:b0:17:e0:81:7c:9e:8b:
2a:d5:f2:2e:9d:3b:0e:3d:b4:cd:ca:ef:19:99:dc:
ca:5c:46:18:62:e6:a8:2c:d8:c3:f0:39:4d:31:d6:
35:2d:6c:b1:4d:80:aa:4f:16:54:c1:1d:31:38:f1:
64:b0:8d:6b:ea:db:3b:a4:fb:93:e5:f7:ef:b6:3a:
85:37:e7:24:30:3f:32:78:2d:96:cc:21:1b:9c:d2:
fb:e1:ff:74:bd:63:bb:51:9a:76:89:f5:f1:87:7c:
d4:a4:28:c8:d7:f5:ce:fd:17:8d:4f:17:a3:03:e6:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:D6:A9:0A:91:E8:67:FD:5D:6E:BA:E3:7B:48:C9:3F:B7:F3:12
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/bKPWqQqR6Gf9XW6643tIyT-38xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.176.0/22
193.8.32.0/22
193.41.168.0/23
193.192.54.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ca:1b:1a:8e:e1:71:c4:8c:35:ca:43:7a:5c:3d:ad:c8:ce:
3f:3b:3d:48:bd:8f:72:d9:be:35:87:95:d0:cd:b7:de:ba:c9:
68:2f:85:b2:85:a1:c4:95:00:48:34:4d:f3:97:24:ca:5e:11:
a5:02:f6:c5:9b:59:9e:c5:57:ff:fb:9c:cc:cb:9c:0b:70:c8:
94:7c:ba:b4:10:6b:c9:2f:b3:c5:6f:65:18:e7:d0:1e:23:af:
8f:cd:76:be:6b:9a:eb:f6:61:ba:fe:f1:b3:4c:58:da:e6:f1:
c5:1b:20:9c:25:57:72:b1:19:29:2f:ec:ea:71:99:5b:5e:09:
47:3d:58:c2:9c:12:1c:65:ce:48:c3:46:82:c6:f0:81:09:65:
cd:48:78:1f:98:42:53:f1:31:ca:fc:99:73:b7:54:0a:f1:c2:
3a:02:a9:7c:14:f6:90:05:51:7b:80:5f:15:d5:34:97:86:a1:
b1:cc:07:2a:0d:16:2d:e6:83:1b:04:40:8e:97:24:71:ab:b1:
e2:c9:25:60:ce:1f:c1:d2:31:ba:f0:b5:27:59:25:b4:0b:25:
ca:c1:5c:73:46:63:96:70:e3:66:dc:34:19:bb:a3:fb:24:d7:
15:f0:fd:6a:b3:8e:54:83:67:29:38:6a:d0:2d:97:43:0b:81:
15:c9:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:02 2024 by rpki-client on console-fra.rpki-client.org