Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/OliUZQcqlZes8MJAz-tvNHTzWtk.roa
File: OliUZQcqlZes8MJAz-tvNHTzWtk.roa (raw, json)
Hash identifier: VQNfruRx6F035KC53GnHF3moIbz8FoOd1pqosBW2pKU=
Subject key identifier: 3A:58:94:65:07:2A:95:97:AC:F0:C2:40:CF:EB:6F:34:74:F3:5A:D9
Certificate issuer: /CN=8bbb538fc4f8f1984100640dd8435766a6206723
Certificate serial: 018318723C72A96A9B0DFD529165ED62167A
Authority key identifier: 8B:BB:53:8F:C4:F8:F1:98:41:00:64:0D:D8:43:57:66:A6:20:67:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/OliUZQcqlZes8MJAz-tvNHTzWtk.roa
Signing time: Wed 07 Sep 2022 14:54:43 +0000
ROA not before: Wed 07 Sep 2022 14:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60295
IP address blocks: 195.20.216.0/23 maxlen: 23
193.47.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:72:3c:72:a9:6a:9b:0d:fd:52:91:65:ed:62:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bbb538fc4f8f1984100640dd8435766a6206723
Validity
Not Before: Sep 7 14:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a589465072a9597acf0c240cfeb6f3474f35ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:81:5f:c2:dd:a7:b6:a9:d9:8c:b1:9e:0a:
6a:8a:33:df:5f:51:4b:c2:86:04:5b:e6:fb:b9:b7:
b6:19:93:3b:25:73:da:c3:1f:a6:c8:60:23:c3:00:
81:b9:f8:2b:d3:82:2b:c6:9b:ed:a1:23:8b:81:7a:
4e:f5:40:9c:af:34:f7:da:1e:d6:9b:99:81:c9:c6:
47:20:d5:2b:52:fd:b8:58:c5:32:1c:6e:e1:9c:af:
c8:f3:9f:1a:84:52:d1:d6:95:32:f7:3a:15:4b:2e:
75:14:a5:23:f8:c6:48:13:8b:c0:62:6a:65:22:b5:
49:88:60:71:0c:25:4b:01:e0:c6:0d:c0:b4:69:16:
f2:c3:f2:4c:21:a2:f3:7e:27:73:d8:f8:fa:16:94:
ec:7c:8a:e7:53:0f:74:e7:5b:ff:a2:45:46:9e:f3:
71:10:ec:cc:1d:e8:06:13:16:7f:bc:a1:c9:69:a9:
36:e8:78:17:6b:19:d1:89:27:e6:7e:dc:a1:96:0c:
04:6e:d4:80:10:fb:d1:15:4f:1f:0e:5c:44:21:c1:
a5:b2:d2:0b:af:e1:a8:69:bc:e3:15:d5:fa:0d:6a:
6d:4a:fe:e7:0a:3a:44:a8:7c:f3:b5:25:26:7c:fd:
68:6f:b1:43:97:1d:34:dc:e6:c6:07:38:ae:4d:12:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:94:65:07:2A:95:97:AC:F0:C2:40:CF:EB:6F:34:74:F3:5A:D9
X509v3 Authority Key Identifier:
keyid:8B:BB:53:8F:C4:F8:F1:98:41:00:64:0D:D8:43:57:66:A6:20:67:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/OliUZQcqlZes8MJAz-tvNHTzWtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.84.0/24
195.20.216.0/23
Signature Algorithm: sha256WithRSAEncryption
99:df:ae:da:32:77:fd:0e:31:41:e0:e6:22:a2:bc:c2:3c:54:
88:0f:66:bf:22:4b:75:d4:b7:23:c2:4d:db:05:b4:8d:63:cd:
81:95:fb:35:7e:93:db:50:01:b4:90:7b:1d:87:f7:7c:95:d1:
fe:2f:3e:8a:93:89:91:36:5a:1e:b4:84:c3:9a:07:1f:a1:74:
76:71:5e:70:8b:0f:39:f7:6c:a7:26:13:c7:6b:13:91:36:32:
6d:8b:00:01:28:1d:52:96:8c:c6:09:20:c1:76:21:65:02:5b:
26:29:4c:0e:16:6f:dd:0f:c4:d4:ce:3c:ff:5a:9c:5a:e8:6e:
dc:86:10:e9:62:6e:8e:eb:73:f9:af:a7:71:e7:7e:10:dd:e2:
2b:5f:c8:7e:87:71:50:92:ad:bf:58:2b:28:92:dc:5f:a3:cc:
e2:9f:92:e6:38:03:4d:f6:07:aa:66:e1:04:c0:97:24:71:84:
f7:7e:67:34:7e:3e:f9:b0:56:d0:ca:dd:f3:05:e5:d4:bf:23:
d2:88:86:5f:68:f4:e2:83:61:43:45:25:0a:8c:ba:0e:b5:c9:
cd:d9:fb:3f:44:b1:2e:32:f1:fd:9b:33:a9:b0:5a:ba:1b:b8:
8d:89:6f:d9:95:f4:cb:6a:0e:96:9d:08:e3:15:85:73:20:e4:
89:c1:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:40 2024 by rpki-client on console-ams.rpki-client.org