Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/ByFMqhOffsBxgBAjXHKM-bnIxPY.roa
File: ByFMqhOffsBxgBAjXHKM-bnIxPY.roa (raw, json)
Hash identifier: lTr2vvBPOoGLz4TNGDGYJT9JVgv/t1GogwEB599deoA=
Subject key identifier: 07:21:4C:AA:13:9F:7E:C0:71:80:10:23:5C:72:8C:F9:B9:C8:C4:F6
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01894A5BA4499EF3EEC135CEA3EA3D56D498
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/ByFMqhOffsBxgBAjXHKM-bnIxPY.roa
Signing time: Wed 12 Jul 2023 13:47:47 +0000
ROA not before: Wed 12 Jul 2023 13:47:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39622
IP address blocks: 194.5.248.0/24 maxlen: 24
193.168.140.0/24 maxlen: 24
193.168.143.0/24 maxlen: 24
193.168.142.0/24 maxlen: 24
193.168.141.0/24 maxlen: 24
2a0c:b0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:5b:a4:49:9e:f3:ee:c1:35:ce:a3:ea:3d:56:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Jul 12 13:47:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07214caa139f7ec0718010235c728cf9b9c8c4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:76:7b:aa:bc:85:f3:12:55:62:db:7b:49:
fd:48:cd:54:b0:5c:88:6d:79:28:ad:29:2e:2f:70:
11:0c:b1:d3:54:73:a6:46:40:da:62:13:95:bc:06:
d9:53:f1:2e:07:67:16:08:93:b6:69:81:5d:39:ca:
4a:d7:5e:7f:e0:8d:aa:c6:b6:22:36:01:eb:ba:c1:
c5:ad:dc:87:19:9e:07:02:50:9d:40:46:08:e9:9e:
69:00:da:7c:7e:1f:cf:c3:c8:17:36:32:db:78:d9:
3b:c2:58:9d:ad:94:98:97:4f:28:19:59:40:d5:be:
27:17:e1:fb:8e:91:d4:b6:92:44:ea:b7:f1:5d:ca:
22:eb:3a:ee:eb:6a:44:4c:18:80:ee:8e:56:2c:d0:
f0:bc:fe:8c:b1:2f:22:bb:0d:a2:ec:43:a7:95:d6:
1d:09:0b:10:2a:d1:69:3d:f4:ba:8d:ae:c2:91:4a:
dc:b0:37:59:f2:f6:6d:4f:2e:d1:53:59:24:4f:cc:
b7:ba:8c:e4:ef:17:e7:3c:a8:ac:a5:5d:5a:ae:8c:
97:64:30:db:c3:45:77:92:50:0f:45:57:f7:70:14:
93:d9:e1:07:1e:b8:33:21:e3:77:5d:18:88:80:5c:
82:86:7c:f9:a5:83:cb:22:2c:1a:b0:3b:a7:21:7f:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:4C:AA:13:9F:7E:C0:71:80:10:23:5C:72:8C:F9:B9:C8:C4:F6
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/ByFMqhOffsBxgBAjXHKM-bnIxPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.140.0/22
194.5.248.0/24
IPv6:
2a0c:b0c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:86:81:c2:cb:58:6e:75:50:9b:99:37:5f:4c:4d:2e:9c:f0:
d3:e8:85:7b:0d:4c:62:a8:ea:47:47:f4:94:91:ea:20:17:7c:
45:d1:af:bb:52:e2:c5:42:f1:73:d1:01:5a:0b:3d:d6:c5:f4:
e7:fb:db:8c:a3:44:64:05:02:8e:ef:0d:82:f1:67:41:a5:67:
b1:3d:18:08:01:77:52:45:f2:66:56:87:e7:a6:7c:83:cc:64:
61:fa:32:b8:91:55:91:23:62:91:43:41:09:64:3a:11:c9:f5:
64:e2:29:a7:b9:5a:09:ee:86:5b:b8:e6:c5:a2:94:f0:50:40:
0c:dd:d7:10:3e:41:0d:da:fe:d0:ed:f1:4a:b2:e6:6d:47:91:
44:50:7b:f6:a3:4a:4e:10:b3:b4:32:12:b7:80:38:90:52:1d:
79:67:32:4a:db:d1:7d:a0:69:e7:ce:ea:38:70:eb:3b:7c:81:
cd:32:84:f4:ba:80:6a:8d:05:cd:3d:22:b4:de:9e:4a:30:50:
8a:61:7f:34:68:16:c9:02:2b:81:2d:32:11:ed:ac:b3:0c:53:
c4:fb:34:f2:54:ec:9d:d1:ad:97:79:8e:1e:56:51:ec:57:4e:
7c:c4:48:64:2e:29:ab:fc:1c:42:5c:97:e9:91:3c:85:4e:b7:
40:84:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:31 2025 by rpki-client