Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/4HG0IGf7G6l7giN7b18VMoCkdC8.roa
File: 4HG0IGf7G6l7giN7b18VMoCkdC8.roa (raw, json)
Hash identifier: 7d6ryu12AAdVmn38q5kRsEU8bcEjbcsYfxfQO45/yAQ=
Subject key identifier: E0:71:B4:20:67:FB:1B:A9:7B:82:23:7B:6F:5F:15:32:80:A4:74:2F
Certificate issuer: /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial: 03B48069
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/4HG0IGf7G6l7giN7b18VMoCkdC8.roa
Signing time: Sat 01 Jan 2022 07:02:39 +0000
ROA not before: Sat 01 Jan 2022 07:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209608
IP address blocks: 193.186.203.0/24 maxlen: 24
193.186.202.0/24 maxlen: 24
193.186.201.0/24 maxlen: 24
193.186.200.0/22 maxlen: 22
193.186.200.0/24 maxlen: 24
2a0d:76c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62161001 (0x3b48069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Validity
Not Before: Jan 1 07:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e071b42067fb1ba97b82237b6f5f153280a4742f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:0a:bc:c8:ec:92:3a:85:db:96:f9:6b:9c:
87:dc:18:0e:84:36:02:86:ef:99:c3:9f:f8:23:2c:
52:a2:4a:68:89:7c:e8:72:8a:ff:ef:f8:26:9f:6f:
db:f3:8f:a3:76:62:a3:53:05:ad:2d:b5:ac:21:c5:
6c:3e:fa:ef:f8:63:ce:3a:80:1f:c8:00:ab:cc:33:
ec:eb:a6:4e:47:5f:cb:a8:70:83:9f:9a:37:ae:0f:
2f:b1:90:79:63:1c:6c:76:6f:52:0f:37:88:2c:ec:
f3:c8:93:34:e8:43:58:04:30:95:9a:a2:56:ff:6a:
3c:8a:e5:a6:4d:9b:8a:4c:9b:91:a4:7f:d8:9e:36:
fd:27:33:47:12:7f:2c:42:d9:49:6f:d4:7a:04:ab:
d1:8a:57:ca:a3:71:60:97:7f:69:db:71:e8:9a:b5:
23:ec:95:49:6a:d1:00:fb:e0:f9:88:af:0a:95:6a:
1d:fe:63:9e:c7:c1:1e:7d:7e:c1:18:ea:b2:7e:1c:
72:c1:48:06:ee:9d:a9:eb:77:17:22:ca:37:ba:70:
41:d9:ae:21:75:9c:27:d0:64:4c:27:ac:34:fc:41:
4a:2a:7c:4f:a9:94:55:22:e7:04:e8:e5:d4:fb:26:
cf:29:b8:2b:9f:82:a4:95:69:d1:c8:c5:f4:71:52:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:B4:20:67:FB:1B:A9:7B:82:23:7B:6F:5F:15:32:80:A4:74:2F
X509v3 Authority Key Identifier:
keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/4HG0IGf7G6l7giN7b18VMoCkdC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.200.0/22
IPv6:
2a0d:76c0::/48
Signature Algorithm: sha256WithRSAEncryption
77:74:d5:2a:10:9d:91:b8:dc:7d:ff:63:d2:c4:3e:96:dc:9c:
fe:c1:9f:fc:61:41:e9:10:b2:1c:30:87:e2:72:1f:0d:f2:ea:
4e:03:e1:9b:28:7f:b5:3d:2d:0a:f7:9b:20:23:06:20:a7:98:
2c:79:a6:30:e7:7a:7b:63:80:a9:c1:99:83:46:eb:65:3f:e3:
46:74:f3:a5:1a:df:98:55:e5:a8:3a:19:17:3c:43:07:77:b5:
84:43:8d:1a:6a:56:c3:ae:ea:5d:52:fd:97:90:16:5c:4c:61:
32:21:01:34:e0:0c:95:32:93:b3:6a:c8:50:1b:f6:2f:04:4e:
fd:f4:67:6a:4a:51:76:c2:2d:0b:2b:66:c5:c1:e8:86:94:a4:
1b:f7:72:2f:08:1a:b7:ba:52:eb:60:6e:0d:c4:60:62:e9:ad:
97:45:6a:f8:93:f0:83:d2:47:4a:ad:27:c5:e2:af:c5:30:7a:
1c:c9:49:0a:5e:c3:35:94:22:27:fd:45:82:5e:91:2f:09:b8:
25:b2:71:e3:bd:f3:14:ac:35:21:db:4b:9e:cc:54:ed:a8:4e:
09:69:3e:05:ee:6f:6e:b6:49:7a:41:67:0a:3b:ca:f8:73:36:
02:ad:92:04:36:97:f9:cd:ff:0d:fd:6d:b6:5b:35:d2:88:42:
c2:eb:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:14 2023 by rpki-client on console-fra.rpki-client.org