Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/rvOtcUaSPU19z3EradvK4MzWkRM.roa
File: rvOtcUaSPU19z3EradvK4MzWkRM.roa (raw, json)
Hash identifier: mZ1VCBsv7kjABI/mrARPoRXzbuW9X0RtIHd6jtFgrB8=
Subject key identifier: AE:F3:AD:71:46:92:3D:4D:7D:CF:71:2B:69:DB:CA:E0:CC:D6:91:13
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01843D05A24572F5C99E836D124D4D88D6C0
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/rvOtcUaSPU19z3EradvK4MzWkRM.roa
Signing time: Thu 03 Nov 2022 10:24:50 +0000
ROA not before: Thu 03 Nov 2022 10:24:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8423
IP address blocks: 193.222.57.0/24 maxlen: 24
193.200.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:05:a2:45:72:f5:c9:9e:83:6d:12:4d:4d:88:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Nov 3 10:24:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aef3ad7146923d4d7dcf712b69dbcae0ccd69113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:08:13:2e:40:6a:69:2e:de:d6:14:0f:59:
41:a2:a4:fb:69:3f:73:8a:03:4a:ad:04:01:61:66:
32:82:3c:d9:c4:40:28:cc:5d:9b:8f:3b:e1:77:2f:
80:2b:eb:a5:ac:a4:0c:e8:68:a2:69:ee:5c:c4:59:
71:40:d5:a9:45:38:8c:22:f1:ab:bc:49:7f:de:31:
b5:0d:92:fc:42:2b:99:a0:9a:c6:10:cc:5d:42:86:
58:a7:8a:b2:a3:55:78:a1:bb:f8:8c:5b:77:fd:63:
a1:3e:74:7d:0f:4f:7c:df:6f:c1:d2:b4:95:80:d2:
9b:2b:2a:3e:e1:8f:5b:6b:8f:47:75:6d:ba:dc:07:
12:f0:2a:39:7c:b0:e6:43:8f:65:c6:de:73:34:df:
2f:33:8b:cf:ea:5d:2f:18:91:d0:67:5e:c3:ae:72:
84:8c:11:89:d0:6e:ae:6d:07:73:87:50:c2:b8:40:
bd:f3:5f:b8:74:36:0c:ea:28:b2:05:cb:30:e7:20:
9c:96:d6:e1:42:a6:66:bc:03:5c:38:6a:d0:cf:cc:
94:27:29:26:2c:b5:89:c4:bf:b7:5f:df:91:ba:bc:
26:7f:f7:c3:60:ea:71:13:5b:a8:20:41:3f:3b:53:
0f:41:ce:f4:b2:95:1c:a2:5e:93:2a:86:a2:be:2e:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F3:AD:71:46:92:3D:4D:7D:CF:71:2B:69:DB:CA:E0:CC:D6:91:13
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/rvOtcUaSPU19z3EradvK4MzWkRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.141.0/24
193.222.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:65:95:37:f9:bf:49:9d:bd:8b:b7:d2:3b:1d:ea:a9:ac:96:
92:69:cf:ca:96:fb:33:0a:f1:46:09:54:c4:96:92:43:37:96:
3f:5d:01:97:ca:a4:4f:c4:62:56:d2:af:3e:cb:c6:1b:25:9c:
69:ee:32:9b:df:a8:3c:d7:3a:f5:90:e8:f6:43:3f:6f:9e:c0:
e5:ca:c5:01:61:06:f7:b0:a9:95:70:ed:4f:d4:dc:d8:3b:58:
6a:6b:0b:d8:bf:71:51:01:9d:87:df:23:c4:15:78:ef:89:c1:
33:6d:aa:6a:3a:74:56:0f:b2:09:cb:19:b6:64:80:2b:78:b6:
6b:01:ef:ef:38:4f:85:13:a2:87:e8:7c:05:cf:fe:d4:a7:3a:
c6:64:f4:6e:c3:82:14:b2:5a:dc:c4:5c:3e:48:8b:86:b7:78:
23:27:d2:e8:66:a4:bb:6c:88:29:f3:e1:21:7b:9e:c0:e7:0c:
b0:e4:ba:88:95:28:ce:b3:c6:d0:fe:5b:22:77:c1:2e:d3:a7:
3a:13:9f:70:bc:a1:e9:7a:50:d1:24:13:82:67:8c:c3:0f:f5:
7b:d0:dc:7f:8a:6a:d7:94:29:c6:35:57:98:c5:b4:71:4a:b7:
8c:c9:6d:0e:c0:b6:62:d4:40:ff:ae:9d:da:8c:a8:63:6f:36:
a1:c5:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org