Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/1-5d4Dta5JFA0ktKgswLyFWz5xuI.roa
File: 1-5d4Dta5JFA0ktKgswLyFWz5xuI.roa (raw, json)
Hash identifier: 3jiNCsN5naYmyKMKnpdu414JUZEbFHpM65k0gyBdPtA=
Subject key identifier: FB:97:78:0E:D6:B9:24:50:34:92:D2:A0:B3:02:F2:15:6C:F9:C6:E2
Certificate issuer: /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial: 06B84FF8
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/1-5d4Dta5JFA0ktKgswLyFWz5xuI.roa
Signing time: Sat 01 Jan 2022 15:57:22 +0000
ROA not before: Sat 01 Jan 2022 15:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200052
IP address blocks: 193.28.252.0/23 maxlen: 23
185.21.216.0/22 maxlen: 22
193.29.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112742392 (0x6b84ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
Validity
Not Before: Jan 1 15:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb97780ed6b924503492d2a0b302f2156cf9c6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:f9:a7:53:74:68:e7:57:67:85:cc:91:c2:
8f:c1:85:44:c8:64:8b:b7:3e:19:78:26:f5:7d:59:
3c:c6:13:e9:35:06:a0:4e:d2:87:01:ea:89:0a:4c:
4f:68:ef:34:91:4a:6d:d4:42:31:0b:9f:1f:67:85:
a4:12:81:9d:6b:84:41:36:21:bc:03:3c:7d:b4:57:
44:52:aa:ac:03:88:8e:24:7f:59:b2:cf:39:f1:e1:
ed:9c:e7:0e:86:e6:3f:de:4b:7e:84:03:e5:be:f6:
ef:3e:ba:0c:3b:a6:81:c8:aa:54:16:6b:89:56:52:
d4:90:2c:44:77:74:0e:d3:c4:88:da:ce:f0:78:0f:
38:c3:59:94:cf:6b:0c:e8:99:10:cf:7a:02:f0:58:
e8:07:e5:e8:76:51:ce:f1:4d:e0:17:d3:d1:5d:66:
a6:7e:4c:cd:80:bf:7a:50:b2:14:13:74:e5:6e:40:
1c:87:b9:2b:c4:69:29:8f:fb:00:ec:44:43:33:d5:
ae:43:72:76:5d:4e:ce:38:cf:bf:a8:0d:b7:c3:02:
74:f1:07:22:92:de:25:2f:a7:b7:5e:cb:e4:a9:b6:
32:d5:5b:64:5c:f7:bf:b8:8e:07:b7:c4:8f:5f:6b:
04:9a:45:c8:7b:9f:00:a3:65:c1:12:b1:7d:0d:9e:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:78:0E:D6:B9:24:50:34:92:D2:A0:B3:02:F2:15:6C:F9:C6:E2
X509v3 Authority Key Identifier:
keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/1-5d4Dta5JFA0ktKgswLyFWz5xuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.216.0/22
193.28.252.0/23
193.29.6.0/23
Signature Algorithm: sha256WithRSAEncryption
16:3c:eb:6f:dd:cc:c7:5c:34:b3:5e:d3:56:fe:61:49:0c:3d:
b1:04:10:24:b2:d8:e0:96:ff:5a:78:b0:83:75:ed:90:cd:b3:
84:22:2b:3d:b1:4e:38:e7:6c:c1:97:56:cc:fd:29:69:72:ef:
e6:30:63:f3:3a:e0:e9:0c:27:52:50:48:39:0e:e2:22:b7:19:
35:4a:1c:23:e7:d7:51:22:8a:eb:99:c6:9a:8d:93:f0:ac:5d:
93:b3:f3:07:3e:da:8b:64:3b:7b:24:d1:e0:04:24:90:25:98:
d1:26:a3:10:0d:ad:8c:98:74:05:59:8f:86:af:2e:4c:20:65:
f3:b9:22:32:a9:ba:4e:85:61:0b:75:ae:8f:3e:db:d0:ff:3c:
4e:92:c1:73:33:39:d3:a2:c9:17:1f:4e:1b:e8:18:0b:76:4c:
e7:49:18:e6:c0:f5:20:64:f5:b8:69:64:18:ef:81:82:48:2d:
b5:e4:25:39:e5:44:19:e6:55:06:d0:04:40:49:70:af:58:cd:
3c:36:7a:98:85:0e:99:59:ed:a0:87:1e:ce:5d:7d:84:04:f1:
b4:8a:92:91:2b:bb:bc:42:fa:87:68:f0:12:96:fc:73:79:35:
b8:b4:68:b1:01:a5:91:7c:5e:9d:d3:1b:54:d6:7c:50:a3:7e:
36:cd:ab:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:03 2023 by rpki-client on console-fra.rpki-client.org