Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/_dLuximEkLoGruMHYY-PtE_Z138.roa
File: _dLuximEkLoGruMHYY-PtE_Z138.roa (raw, json)
Hash identifier: rubYOyMB+7CkpuflMfOEuDmqZTKOCNMJvMITNGySrTw=
Subject key identifier: FD:D2:EE:C6:29:84:90:BA:06:AE:E3:07:61:8F:8F:B4:4F:D9:D7:7F
Certificate issuer: /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial: 0184C097C056B9528521BE99155AF72520A0
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/_dLuximEkLoGruMHYY-PtE_Z138.roa
Signing time: Mon 28 Nov 2022 23:34:41 +0000
ROA not before: Mon 28 Nov 2022 23:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28889
IP address blocks: 193.187.254.0/24 maxlen: 24
193.46.102.0/23 maxlen: 23
193.46.101.0/24 maxlen: 24
193.46.100.0/22 maxlen: 22
193.187.252.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c0:97:c0:56:b9:52:85:21:be:99:15:5a:f7:25:20:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
Validity
Not Before: Nov 28 23:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdd2eec6298490ba06aee307618f8fb44fd9d77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:26:ed:e1:3a:a8:e5:12:ab:b5:63:f6:8e:
41:c9:6b:2d:54:eb:85:51:8f:10:0c:f8:74:db:a1:
24:87:86:22:58:89:10:d9:12:db:89:75:66:30:04:
53:f6:84:58:4a:df:57:d4:c8:ee:e3:ce:e5:ed:49:
f9:fd:14:1c:e4:b1:d8:2c:18:70:39:98:4a:b6:45:
e9:96:3a:79:f1:4c:4c:b9:39:dd:fa:6c:a5:7f:07:
a7:2d:43:7b:8c:9d:b0:67:7b:73:d2:16:ac:ed:9d:
15:32:9c:d3:3c:4f:1b:bb:ce:3b:30:ff:65:f2:f2:
b7:a4:b5:13:6f:cb:4b:c4:15:0e:7d:b8:74:3f:14:
f1:6c:e3:51:6e:a4:ea:fd:2b:02:60:6f:ac:0d:0a:
f1:39:24:89:4e:e8:7b:e8:83:88:7b:2d:a6:e7:f4:
c3:e1:c5:1b:ea:e5:30:08:b9:11:b8:47:5f:e9:e8:
ee:d2:b4:92:03:f2:74:39:ac:45:d7:59:fe:8e:04:
8e:fb:c9:a7:8e:fe:1f:a1:99:23:c7:e4:1d:4d:59:
86:a9:06:f2:ba:96:d2:44:91:4b:10:84:cb:10:d3:
6e:51:d6:b6:bc:73:24:a5:3e:f9:23:c6:79:c9:b3:
74:56:7f:0f:a1:01:e8:fb:11:ba:f4:15:bf:74:a7:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D2:EE:C6:29:84:90:BA:06:AE:E3:07:61:8F:8F:B4:4F:D9:D7:7F
X509v3 Authority Key Identifier:
keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/_dLuximEkLoGruMHYY-PtE_Z138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.100.0/22
193.187.252.0-193.187.254.255
Signature Algorithm: sha256WithRSAEncryption
26:5f:60:4a:57:e5:9f:59:27:db:58:32:b5:70:e4:24:22:b0:
9c:75:8b:cd:b7:5e:51:43:7b:9d:e9:3c:ee:6d:cd:7f:a1:79:
39:9c:38:e7:0d:7a:8d:1c:1d:e6:5b:9f:db:10:b0:44:64:31:
79:7f:1b:a6:29:cc:ae:1a:a3:cd:40:80:b3:14:b8:9a:67:a9:
fd:62:d0:9c:83:45:5e:ca:80:56:43:5d:93:71:df:20:11:f5:
eb:2b:1b:4d:d2:45:ba:3b:e7:3d:4c:19:cc:23:7d:53:04:fd:
66:bb:74:da:e0:91:77:27:03:ce:ce:8f:dc:81:d2:87:bc:f7:
d8:ef:9e:64:95:fa:6e:f9:5f:4a:6d:cf:41:f4:a3:9e:b1:8d:
96:3f:33:b3:76:fd:af:2a:29:a3:9b:dd:9c:04:b4:24:e6:1d:
4c:08:c7:e8:78:44:4d:b6:c4:7f:fd:66:7e:3e:bb:26:07:c3:
29:9f:7d:fb:a0:9c:20:75:16:6d:b7:68:35:8a:c9:3e:06:10:
12:5d:3d:02:85:76:ab:d6:06:b2:a4:e1:52:27:ca:42:37:77:
11:3d:59:e3:83:2c:8c:1e:97:54:34:ec:fb:22:58:df:c1:97:
b6:ed:c9:06:88:45:30:1f:0b:4d:f5:25:6e:7f:65:1f:24:6c:
f2:49:dd:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:41 2024 by rpki-client on console-fra.rpki-client.org