Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/tuZ25ok2-wel-hXz6xgxHft8Wmo.roa
File: tuZ25ok2-wel-hXz6xgxHft8Wmo.roa (raw, json)
Hash identifier: GQoDwYGwgYoW3z5eMT/fXthKeIJkR+dZVI2mYVW/XHs=
Subject key identifier: B6:E6:76:E6:89:36:FB:07:A5:FA:15:F3:EB:18:31:1D:FB:7C:5A:6A
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 01855D147D085B54D897255F2E51AC8E69B9
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/tuZ25ok2-wel-hXz6xgxHft8Wmo.roa
Signing time: Thu 29 Dec 2022 08:51:41 +0000
ROA not before: Thu 29 Dec 2022 08:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 193.33.237.0/24 maxlen: 24
193.33.236.0/24 maxlen: 24
193.33.236.0/23 maxlen: 24
195.211.118.0/24 maxlen: 24
195.211.116.0/24 maxlen: 24
195.211.116.0/22 maxlen: 24
195.211.117.0/24 maxlen: 24
195.211.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:14:7d:08:5b:54:d8:97:25:5f:2e:51:ac:8e:69:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Dec 29 08:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6e676e68936fb07a5fa15f3eb18311dfb7c5a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:d2:71:29:28:5d:52:b3:8e:78:4c:a5:41:
c9:20:53:5e:3f:34:87:d5:21:68:b9:61:51:ba:2d:
6f:9d:ce:1c:9c:38:48:47:ad:7d:17:7c:29:b1:af:
0a:fd:01:11:d8:3c:65:7f:e4:a0:f5:2f:0f:f1:68:
a1:04:55:3d:ab:22:76:8b:c1:63:34:4d:a4:9e:00:
f2:2a:99:ef:2b:33:1d:02:35:1d:50:3f:a1:69:e6:
9b:2c:ad:9f:01:cd:c6:1f:a6:df:3a:84:15:9c:f1:
d6:cb:65:c1:16:7d:98:d7:41:14:c5:2d:92:66:40:
c5:60:07:1b:30:c8:d1:79:ad:22:56:b4:43:11:39:
b0:9e:c0:67:09:cb:71:88:76:35:60:d3:e1:50:98:
b1:07:06:e4:e1:fa:08:93:b5:4e:de:6c:7b:aa:28:
bb:ff:8d:b2:71:74:dd:99:cd:c9:68:76:c6:69:44:
3b:e5:7c:33:eb:7b:b9:98:9a:a4:b0:c1:af:b2:4a:
c2:2e:d8:50:f0:bf:c2:1b:23:78:55:1d:01:b8:31:
62:75:f7:58:c1:ff:04:f0:56:27:7e:e4:c2:58:f3:
41:43:41:71:68:21:d7:bd:4d:b4:39:96:33:ff:a8:
83:5b:b6:5e:5b:95:00:15:a7:3a:02:00:69:c6:b4:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E6:76:E6:89:36:FB:07:A5:FA:15:F3:EB:18:31:1D:FB:7C:5A:6A
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/tuZ25ok2-wel-hXz6xgxHft8Wmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.236.0/23
195.211.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:1b:e3:dd:6c:a5:e5:6e:03:8e:a7:10:ba:cc:90:d4:ac:e4:
02:b3:92:4b:1a:81:00:4d:5c:a3:ec:2b:df:4b:22:48:bb:2e:
60:a3:80:ef:46:15:30:a6:95:e8:34:de:67:af:b9:8d:03:39:
a3:43:b2:e0:54:4a:f2:0b:71:8c:49:5e:83:35:92:6d:03:c7:
5a:f2:a0:e8:f9:50:74:71:64:41:f7:40:ff:b2:fc:18:31:47:
a2:79:d2:b9:b7:e4:b9:6d:54:e8:31:18:e3:ea:bc:e3:08:ff:
2c:54:c6:d9:3c:55:06:34:5b:2a:4a:6f:11:9a:78:92:8b:a4:
40:10:27:90:9f:4a:61:88:17:6f:62:6f:83:2a:5f:88:35:37:
ae:b0:7b:65:08:ca:6c:57:ba:66:ea:72:11:99:6c:34:8b:5f:
8d:86:af:80:0d:56:90:04:b5:dd:e7:2c:88:88:d0:c9:72:2f:
c1:72:48:b5:70:1c:35:96:bd:d2:e0:1a:a1:3f:d4:d9:cc:69:
37:d5:ce:0c:c8:20:c0:26:cc:6b:79:72:40:7e:2b:46:c6:e0:
e0:51:80:8c:9b:db:61:a5:65:8d:f0:47:84:0c:2d:cb:af:12:
e1:58:6a:db:93:b1:71:89:21:e4:19:ed:73:9b:98:88:fa:99:
a5:34:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:27 2024 by rpki-client on console-ams.rpki-client.org