Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/boUlGG6g3-HSmJ5hSNrgfB2VHk0.roa
File: boUlGG6g3-HSmJ5hSNrgfB2VHk0.roa (raw, json)
Hash identifier: h0b7i5Lr7qNhzruVWESS1piKUv4/pQhBNIs8NxNcpTA=
Subject key identifier: 6E:85:25:18:6E:A0:DF:E1:D2:98:9E:61:48:DA:E0:7C:1D:95:1E:4D
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 07483B9A
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/boUlGG6g3-HSmJ5hSNrgfB2VHk0.roa
Signing time: Sat 01 Jan 2022 01:52:15 +0000
ROA not before: Sat 01 Jan 2022 01:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31374
IP address blocks: 193.200.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122174362 (0x7483b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Jan 1 01:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e8525186ea0dfe1d2989e6148dae07c1d951e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f2:aa:2e:97:f2:4d:b4:c0:30:c5:71:9f:12:
7d:d5:b0:a6:b7:6e:f4:be:fd:be:7d:c5:8c:ef:0d:
d1:13:8f:78:ab:24:be:09:97:fb:39:83:30:f8:e6:
d8:b1:9d:e5:3a:86:4d:68:1a:3a:ef:39:49:68:38:
41:62:3c:dc:4c:d6:04:49:1f:df:0d:12:95:56:3d:
1c:65:ac:74:d6:f5:3c:5f:1f:35:d1:57:6d:4c:4d:
19:d9:d7:fa:a9:9d:90:19:69:32:ce:35:7f:fc:48:
72:c1:da:04:26:aa:6b:0f:67:a5:3a:29:3e:91:7a:
a6:e8:6f:58:0d:f9:27:8a:82:a7:ef:3f:2f:bf:7e:
8a:67:56:8c:f0:6d:46:29:5a:0a:cf:8c:1c:9d:ff:
33:45:83:ff:a6:3f:da:2f:c5:a9:61:6c:d4:27:96:
2a:78:97:d1:94:53:9a:15:d2:59:4c:ed:9c:8e:4f:
88:f6:1c:3e:d1:e4:4e:f6:2d:b8:53:e8:42:a4:93:
9c:b8:d8:9b:4e:9c:24:57:ff:b2:1e:b9:99:b9:79:
71:14:0a:51:81:a4:e4:5f:08:c2:86:d1:cb:21:70:
56:0b:c5:47:42:f7:2d:78:75:42:e5:95:9a:72:cb:
d2:bc:c4:64:46:ba:2e:73:b1:f4:7b:77:d9:6f:b7:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:85:25:18:6E:A0:DF:E1:D2:98:9E:61:48:DA:E0:7C:1D:95:1E:4D
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/boUlGG6g3-HSmJ5hSNrgfB2VHk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:23:12:4e:75:0b:f5:df:e9:d0:49:80:06:57:2f:ba:fb:fd:
2f:25:be:c9:29:99:ff:ba:cf:c1:99:c5:8b:5d:a7:be:04:f1:
cf:30:e2:71:6d:b5:72:b1:f7:c8:19:ff:b0:75:93:2c:2a:07:
a9:1d:57:29:79:6f:23:a2:a8:d0:96:99:c0:b8:65:56:b5:e3:
ef:7d:80:8d:da:80:bc:e4:2f:18:32:03:8d:01:d8:55:b5:6a:
63:4b:36:d7:0b:36:92:0a:1b:39:8f:2f:44:d6:46:ba:71:b3:
4d:5e:b2:e6:23:16:4f:6a:9b:f1:ef:81:0b:db:e8:07:b3:13:
cb:66:c6:71:02:a4:5e:b5:a3:90:bf:72:03:9e:60:76:43:08:
13:ef:98:aa:43:c5:18:21:db:60:2a:50:4c:fc:d8:da:23:6c:
40:4e:94:01:f0:0f:af:73:48:a6:17:ad:64:df:16:14:2b:98:
61:bb:7b:9c:d9:c9:d0:f0:4f:9d:95:81:c6:7e:96:f4:79:e8:
ae:f3:36:81:fa:46:80:0b:9f:d4:96:7e:70:55:1f:af:9f:08:
f3:04:96:6b:97:45:6c:b0:33:04:cd:0a:c4:4d:2c:6b:0f:94:
99:c6:77:e7:3f:2a:c7:f8:77:18:07:ea:3d:fd:ef:9b:80:9d:
28:a0:31:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net