Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/2UToHMTX5-nXhRrUmtOLBsI8ucY.roa
File: 2UToHMTX5-nXhRrUmtOLBsI8ucY.roa (raw, json)
Hash identifier: wfiCWutukwuqSHe35Em/gPx60ktvPa3qjCkwq1SwbyI=
Subject key identifier: D9:44:E8:1C:C4:D7:E7:E9:D7:85:1A:D4:9A:D3:8B:06:C2:3C:B9:C6
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 0242DBEA
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/2UToHMTX5-nXhRrUmtOLBsI8ucY.roa
Signing time: Sat 01 Jan 2022 10:58:11 +0000
ROA not before: Sat 01 Jan 2022 10:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199551
IP address blocks: 188.123.199.0/24 maxlen: 24
188.123.204.0/22 maxlen: 22
188.123.212.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37936106 (0x242dbea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jan 1 10:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d944e81cc4d7e7e9d7851ad49ad38b06c23cb9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:4b:6d:2d:48:fd:83:fb:49:86:bf:02:10:
50:93:56:f1:ac:50:e5:75:eb:9f:be:bf:1d:0d:31:
43:ed:72:3f:7d:ea:e2:bb:62:0a:b4:7c:9c:90:bd:
f4:b9:df:4a:f1:6a:d8:e6:39:ea:08:47:53:9a:24:
00:d8:ef:ea:dd:5a:7e:65:c9:c3:3f:65:fb:95:0b:
6a:d1:7d:3f:e8:8a:d7:7d:e0:bd:3b:c0:14:7d:6e:
7a:6d:af:6d:d9:16:1e:d7:64:e6:58:62:2f:8f:59:
2e:c2:fb:05:f4:04:c4:14:35:96:c5:69:6a:2f:04:
2e:7f:00:d5:e9:17:12:03:da:d2:df:e2:58:c7:ab:
5d:5b:f1:ad:eb:71:17:4d:0c:85:e9:0e:03:39:8a:
f4:b4:62:4c:5a:3e:78:f1:a0:cf:a1:56:13:b6:3c:
99:ad:a5:f1:d7:80:20:c3:09:9a:6b:3f:cd:91:ac:
6f:90:e6:60:ac:f2:9c:c5:45:42:3a:a8:3f:c7:6d:
39:6f:3f:8b:9f:f7:e8:57:c7:e2:10:8a:b9:7e:e9:
cf:80:4e:f2:0d:b8:27:9e:fe:7f:64:be:4d:47:cf:
be:b4:78:d9:8d:f5:73:4e:78:05:29:be:81:bd:f6:
5d:82:a7:0a:81:85:2e:20:d9:e8:ef:08:af:f8:6f:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:E8:1C:C4:D7:E7:E9:D7:85:1A:D4:9A:D3:8B:06:C2:3C:B9:C6
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/2UToHMTX5-nXhRrUmtOLBsI8ucY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.199.0/24
188.123.204.0/22
188.123.212.0/23
Signature Algorithm: sha256WithRSAEncryption
69:95:87:95:f6:cf:08:49:eb:6e:ef:2e:f6:1e:f1:8e:d1:bd:
67:ce:5e:d1:e7:bd:f3:42:c5:6c:3f:1d:7d:6e:2b:e1:e7:ee:
41:36:c4:f7:18:fb:ff:7f:b8:0a:3a:f5:0c:88:61:2f:07:10:
7e:52:cc:60:c6:c4:62:9e:03:ac:02:42:5c:f3:e1:6a:9e:c7:
a5:78:b3:26:0c:e8:92:a4:e4:7a:56:d2:43:17:49:70:4e:70:
0c:1e:0a:96:cb:bd:14:0d:36:ca:94:af:36:2c:cc:4b:07:ff:
d6:34:44:42:f7:b6:b9:08:68:de:ee:2d:08:f6:e3:2a:f7:75:
81:08:e1:c4:f3:5b:20:33:b2:21:fd:f1:6a:37:a5:38:18:2a:
d5:5a:18:85:df:62:cc:96:10:85:0e:bd:95:6a:d5:d8:f3:4a:
93:46:92:f6:73:d5:fe:a3:bc:b9:1e:92:0b:85:c5:82:91:47:
4e:a5:51:3f:0c:43:73:82:cd:c7:46:f9:6e:f1:d4:df:66:d0:
33:aa:06:3b:07:66:17:13:11:32:36:15:1c:75:13:fa:8b:c6:
6f:b7:b4:e6:94:4f:c7:34:ac:42:ef:76:a3:45:dc:c6:49:e5:
14:e1:62:0b:49:92:fc:cf:6e:9c:62:30:f2:04:db:48:25:08:
61:f6:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:51 2024 by rpki-client on console-ams.rpki-client.org