Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/vL8y_KolHC5XkObFNL9fvqOVgu4.roa
File: vL8y_KolHC5XkObFNL9fvqOVgu4.roa (raw, json)
Hash identifier: bY9HyvxCVHyFDFkZ+Vnp/eVK6JLiszvzSnWGYFWmMPM=
Subject key identifier: BC:BF:32:FC:AA:25:1C:2E:57:90:E6:C5:34:BF:5F:BE:A3:95:82:EE
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0501D125
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/vL8y_KolHC5XkObFNL9fvqOVgu4.roa
Signing time: Sat 01 Jan 2022 15:59:36 +0000
ROA not before: Sat 01 Jan 2022 15:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202475
IP address blocks: 193.57.52.0/24 maxlen: 24
193.57.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84005157 (0x501d125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jan 1 15:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcbf32fcaa251c2e5790e6c534bf5fbea39582ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:ab:e7:2c:7b:9c:ae:ed:aa:98:92:40:c7:
05:a9:cb:17:a7:d1:38:2f:af:0f:1d:ff:c9:fd:e8:
a7:5f:45:4f:1d:75:72:89:bf:0e:1c:97:ce:1a:7e:
79:99:73:30:18:4f:f2:61:42:d9:00:45:fb:29:12:
0a:a3:03:aa:3f:78:93:2d:b4:56:8d:4f:75:6e:e3:
78:d1:60:be:66:c5:49:e5:0d:f3:f5:a7:71:a0:fe:
c7:8a:89:8d:b1:0f:2f:56:9f:74:3b:d1:c1:f7:2e:
1d:14:b5:61:c0:03:57:3a:e8:30:36:14:b9:2a:65:
35:e1:58:3b:b1:38:32:45:3f:ef:47:7d:30:c8:2f:
b1:c3:2b:5f:1f:3c:6e:ea:1c:52:dc:b7:c3:c6:32:
b9:7d:fc:3e:6f:94:39:be:54:b7:8d:91:3e:de:1a:
83:ff:64:c0:bf:02:cf:84:0b:1c:a2:cf:15:b5:45:
4b:8d:5e:bb:b6:35:67:d5:c6:f3:1a:18:71:41:ea:
45:58:42:fd:30:7c:24:e2:b6:1d:f5:07:11:c1:d3:
a3:62:2e:c8:e8:ed:55:3a:34:f6:79:f1:9b:c6:a5:
3c:70:31:c8:52:d0:f7:ea:4f:65:ed:8f:66:fb:a7:
4a:54:f5:d6:f1:a4:c8:32:5e:fb:00:45:de:bb:de:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:32:FC:AA:25:1C:2E:57:90:E6:C5:34:BF:5F:BE:A3:95:82:EE
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/vL8y_KolHC5XkObFNL9fvqOVgu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.52.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:16:18:78:e9:6c:b4:f5:98:12:cb:6a:3c:86:b6:cb:2a:2b:
7e:f7:2d:55:79:4f:8d:7a:90:51:3f:47:ba:24:d4:d6:04:92:
cb:91:c8:4b:b6:2e:8f:02:3b:77:96:59:05:dc:86:4c:d3:b4:
87:33:f6:31:93:7f:fc:76:cb:8d:9d:f9:9d:a3:b4:42:d2:94:
a6:c6:c8:37:ac:ec:35:db:3a:cd:94:1b:23:51:60:60:08:01:
7e:72:76:3c:14:e0:01:d3:91:98:6e:de:39:53:d8:0e:83:8b:
97:87:83:ce:7a:fc:4e:e0:a1:30:4f:97:2b:9d:b0:42:d8:3d:
39:95:1f:51:f8:3d:cd:79:1d:1e:42:b8:fa:20:a9:d5:78:33:
44:64:f7:28:c0:32:b4:01:6c:7f:03:eb:68:f7:4a:8e:ad:f5:
29:3c:cf:8e:83:32:1c:db:cc:3c:1f:90:6b:25:ec:68:08:61:
58:4f:5b:3a:e9:c5:e4:d1:db:09:c7:3a:dd:26:5b:6c:1f:de:
d7:93:67:ce:04:27:e0:ed:2f:7c:b4:f1:5e:05:00:8a:17:8e:
99:f4:ee:70:90:fc:74:f6:d8:c6:87:72:8b:ff:76:14:7b:57:
70:1f:ef:5a:60:83:1c:b3:d7:c0:80:7c:12:fc:8d:1e:ae:d0:
84:0a:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:11 2024 by rpki-client on console-ams.rpki-client.org