Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/aQPfh_-VC1ymjGGzmfyk2NtZZHo.roa
File: aQPfh_-VC1ymjGGzmfyk2NtZZHo.roa (raw, json)
Hash identifier: X0/cjk4QfOFOtttyxvdq7Aj3sprnoBqYHD3W4ZXASaw=
Subject key identifier: 69:03:DF:87:FF:95:0B:5C:A6:8C:61:B3:99:FC:A4:D8:DB:59:64:7A
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 0184CDBE23C8265614D61E65A58BFC7CE2C7
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/aQPfh_-VC1ymjGGzmfyk2NtZZHo.roa
Signing time: Thu 01 Dec 2022 12:51:40 +0000
ROA not before: Thu 01 Dec 2022 12:51:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61232
IP address blocks: 193.135.57.0/24 maxlen: 24
193.135.56.0/24 maxlen: 24
2001:678:e48::/48 maxlen: 48
2001:678:e44::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:be:23:c8:26:56:14:d6:1e:65:a5:8b:fc:7c:e2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Dec 1 12:51:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6903df87ff950b5ca68c61b399fca4d8db59647a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:7f:d1:c9:c7:be:8a:a3:4d:73:d6:87:8d:
a0:f8:1a:7d:8a:dc:08:cf:e7:9b:04:6b:25:e7:ba:
36:61:84:89:ec:c7:14:28:d0:d3:e9:65:46:cc:16:
67:2b:c3:fa:c9:c2:1e:6e:4f:95:50:d5:15:42:af:
22:77:bd:eb:90:be:6d:d7:d4:d4:11:64:53:fc:9f:
7a:01:f8:68:9a:09:fe:cf:12:bb:20:99:43:4d:53:
bf:5b:ad:a3:b5:c8:9e:91:aa:cd:8d:89:f2:8a:42:
d0:4c:0b:d6:ce:4c:42:8f:a6:d0:c3:38:1c:48:39:
c9:1e:95:04:11:b1:fd:e7:28:d1:a0:ba:ba:e9:9c:
41:2c:0e:85:b3:ef:8d:b4:4f:30:69:80:82:db:d6:
3b:f9:70:92:e3:c3:61:d9:e6:64:aa:d9:ca:ef:9d:
b8:12:77:9d:e4:9d:19:cd:77:f3:12:ad:e3:74:d5:
7a:cf:a0:de:08:e3:2d:c9:e0:98:42:38:da:19:64:
a4:46:e4:39:ea:55:69:79:4a:1d:42:3c:60:a4:51:
3a:85:41:47:b9:db:7e:ae:f8:47:f7:8a:e1:99:d6:
b5:71:f1:44:70:ed:4d:90:56:5e:db:84:49:fc:92:
15:ed:e9:c6:66:8a:b2:21:c8:d9:df:bd:98:06:86:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:DF:87:FF:95:0B:5C:A6:8C:61:B3:99:FC:A4:D8:DB:59:64:7A
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/aQPfh_-VC1ymjGGzmfyk2NtZZHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.56.0/23
IPv6:
2001:678:e44::/48
2001:678:e48::/48
Signature Algorithm: sha256WithRSAEncryption
b3:b5:37:c0:00:d5:a2:e2:7d:9a:b1:ae:50:fb:b4:13:54:c2:
d2:28:8c:3a:d4:fa:f5:c0:58:87:5f:8d:74:01:11:a6:61:82:
77:56:bd:ae:22:2b:55:a5:80:36:e6:69:50:83:74:96:83:6c:
e3:42:20:e0:1c:eb:b9:87:a1:e2:79:56:2c:cd:bf:08:3c:3d:
75:ae:bc:71:4b:b7:10:ad:25:9d:94:a2:86:22:df:32:69:55:
93:d9:9a:60:e5:e1:1e:67:40:32:22:de:05:ec:8c:04:6b:59:
2d:7a:b6:c7:c8:32:f0:77:86:dd:1d:9e:5c:87:47:70:cf:96:
62:af:4f:29:6a:c4:80:41:1b:40:89:9a:fa:1d:87:f6:b6:a2:
10:b2:e6:b7:5f:95:dd:b8:0d:54:8c:32:83:95:53:24:de:54:
f4:1e:c5:87:1b:f0:b0:cb:37:34:52:9b:96:fa:a4:37:db:de:
a9:d2:fd:68:cb:cf:f9:08:fa:ac:f6:3b:6a:3d:4a:4b:b9:9c:
b2:c2:62:83:08:46:77:44:97:f4:9c:f6:38:e2:65:1a:5c:05:
25:e9:71:be:ad:a9:24:4a:4b:23:e8:6d:06:bc:bf:87:dd:a6:
1d:53:ff:b7:41:20:05:db:a1:38:ea:4e:8f:ed:ce:54:d7:5b:
23:bd:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:40 2024 by rpki-client on console-ams.rpki-client.org