Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/we7U6Tr-POD0fOnaIJZzfipjpn4.roa
File: we7U6Tr-POD0fOnaIJZzfipjpn4.roa (raw, json)
Hash identifier: AFlWDVwH9BZmYN+NZHj9hnr4k+YwmthBxjuZJYdP6HI=
Subject key identifier: C1:EE:D4:E9:3A:FE:3C:E0:F4:7C:E9:DA:20:96:73:7E:2A:63:A6:7E
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 054DD012
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/we7U6Tr-POD0fOnaIJZzfipjpn4.roa
Signing time: Sat 01 Jan 2022 06:56:02 +0000
ROA not before: Sat 01 Jan 2022 06:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 193.42.27.0/24 maxlen: 24
2a06:5040:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88985618 (0x54dd012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 1 06:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1eed4e93afe3ce0f47ce9da2096737e2a63a67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ed:53:10:de:62:d6:70:42:e0:58:c3:f7:f4:
e8:50:3a:64:09:ac:35:70:78:eb:f8:25:83:66:af:
68:6e:d8:17:6b:64:ac:76:03:d5:d2:a9:87:bd:73:
26:2f:eb:8b:04:a3:b4:b5:89:a5:5b:71:fd:ba:2a:
8a:eb:02:75:d6:34:a9:65:8b:9a:2d:aa:1c:59:d1:
14:e9:89:ae:90:92:e7:fd:f6:6b:f6:a5:4b:80:d2:
fb:37:91:d0:13:46:f2:ef:f7:b6:2f:68:0f:49:1b:
b9:f5:16:90:2e:0f:78:92:c8:aa:82:d4:90:a8:45:
00:b4:e7:0d:6f:81:e9:a7:3f:93:3b:bb:cc:1f:e2:
96:a4:b6:81:30:82:d3:c3:68:0c:5c:c9:8f:b1:1f:
be:ac:07:cc:32:b8:11:8a:93:42:e8:3a:f1:54:74:
ae:8b:d0:d7:87:3f:5e:46:fe:42:4e:27:b0:83:2d:
10:ba:1d:58:01:fa:13:08:f0:1d:ed:8d:01:02:d5:
6d:66:80:f1:52:a3:10:76:18:2b:cc:d7:85:fb:04:
60:0c:4b:b5:88:a3:61:fd:4c:96:2c:36:a2:e7:f6:
29:c2:82:de:fc:10:cb:ba:20:97:50:6a:db:02:e6:
b3:ff:c3:12:8f:c7:ca:a3:70:6a:f3:45:c6:49:f5:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:D4:E9:3A:FE:3C:E0:F4:7C:E9:DA:20:96:73:7E:2A:63:A6:7E
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/we7U6Tr-POD0fOnaIJZzfipjpn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.27.0/24
IPv6:
2a06:5040:6::/48
Signature Algorithm: sha256WithRSAEncryption
26:a8:7b:3d:cb:fd:e7:4e:71:47:ca:44:1b:09:bb:99:d8:ff:
39:6e:b6:ba:c2:cb:ca:c3:ca:6d:0c:67:d8:98:44:3e:49:6d:
8a:ff:47:7b:ed:bf:c3:1e:66:c5:2e:94:9a:12:c3:39:89:b2:
cf:49:fc:55:ed:cd:b6:f4:fa:a6:a6:c4:a9:94:5a:c5:c7:22:
95:8a:1e:b4:8b:d5:ff:20:4b:b8:be:b9:99:6a:97:23:43:6d:
bb:c2:f4:a6:9e:9f:4e:3a:0a:f6:71:22:b5:38:70:6a:64:fa:
c5:96:35:40:79:ef:f8:33:30:7b:1a:83:f7:03:91:78:5e:13:
2b:69:e4:df:d2:75:be:92:fb:92:15:21:e9:3d:93:67:ac:e8:
82:f9:78:62:28:d1:92:ae:96:7f:b4:ab:f1:d6:67:bb:0f:40:
96:19:b4:21:9d:9e:8d:52:65:26:a0:95:cb:16:90:d3:5e:5f:
2b:40:a4:13:67:15:9a:b4:a4:ab:be:4f:b5:cd:c1:82:c6:05:
80:80:db:38:6f:1e:ee:02:10:fb:90:02:18:23:a3:8b:5c:4e:
1c:be:47:af:75:1f:ae:a2:da:fe:0e:56:b2:c1:9e:21:17:b6:
ca:f0:aa:d7:95:d5:c0:ef:50:f6:c9:f8:27:c0:64:78:31:0a:
e2:59:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:41 2024 by rpki-client on console-fra.rpki-client.org