Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/pmuoETl0A3AS1_A5jsP0DKEeE5Q.roa
File: pmuoETl0A3AS1_A5jsP0DKEeE5Q.roa (raw, json)
Hash identifier: mThdVppBEsUR2dl6rWe3kb8k+nhKHwYE+ZwEE1ih+WE=
Subject key identifier: A6:6B:A8:11:39:74:03:70:12:D7:F0:39:8E:C3:F4:0C:A1:1E:13:94
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 01856CAF20E016B5D1998D1ED7F570EA406A
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/pmuoETl0A3AS1_A5jsP0DKEeE5Q.roa
Signing time: Sun 01 Jan 2023 09:34:54 +0000
ROA not before: Sun 01 Jan 2023 09:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61334
IP address blocks: 93.113.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:20:e0:16:b5:d1:99:8d:1e:d7:f5:70:ea:40:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Jan 1 09:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a66ba8113974037012d7f0398ec3f40ca11e1394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:44:50:09:25:fb:63:94:86:85:e4:f4:78:
f2:2f:1b:24:e2:89:dc:28:1d:ce:8b:6b:6e:24:e7:
6d:51:e8:f3:ee:17:25:55:db:69:78:97:60:9c:bb:
10:30:b7:c3:43:22:35:c7:f3:27:c2:76:0a:d0:d7:
15:86:7a:8a:1e:52:34:41:e6:39:55:17:91:a2:91:
03:8c:66:96:96:5b:53:fa:81:96:74:43:1f:57:af:
9a:50:9a:f2:38:bb:d5:68:48:4d:f1:e2:01:78:b9:
31:f9:e7:29:b1:4a:9c:3a:41:86:63:b4:6a:eb:af:
93:00:0a:d8:04:a6:c8:f7:56:72:d8:c8:ca:15:f1:
79:ef:47:96:52:dc:20:e5:4c:9b:20:6c:32:52:f6:
8e:ac:d0:ce:37:88:7c:31:a3:3b:50:1f:a2:6b:49:
e6:dc:d5:7a:78:bf:00:95:c8:34:48:88:7d:6e:3d:
32:de:8e:2c:85:3e:26:d7:ef:6c:e1:4c:57:e1:98:
c1:5f:25:c1:f7:c4:b0:3a:c6:18:21:14:94:be:28:
6d:a6:5b:e0:95:21:06:d9:0e:c8:a1:da:c6:96:4d:
ba:0d:7c:45:d6:f7:78:05:f4:66:8d:74:6a:45:37:
82:2c:f1:5e:ca:0f:52:82:55:a8:2a:67:19:b3:83:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:A8:11:39:74:03:70:12:D7:F0:39:8E:C3:F4:0C:A1:1E:13:94
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/pmuoETl0A3AS1_A5jsP0DKEeE5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.159.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d9:54:35:86:21:bf:ee:76:40:ce:e2:64:7e:75:4a:2c:4f:
ee:12:56:0a:2c:e8:48:68:98:4f:8c:f5:35:b2:8f:85:59:f5:
d5:80:8a:2d:b9:3e:dd:60:18:12:68:85:ed:30:ac:cf:22:d7:
bd:8e:de:8a:8e:b3:b6:ac:38:14:29:75:b9:99:03:63:db:35:
19:b8:13:06:a4:c7:00:d9:08:f8:d2:eb:b7:68:cd:23:6a:6a:
63:28:69:99:c8:2a:08:69:60:10:23:06:14:b0:9c:6f:8d:34:
93:fd:da:63:5c:a0:5d:c4:b7:e1:3d:b5:17:93:65:41:98:a9:
c1:40:c4:5f:7c:9c:33:0f:40:1e:c1:f4:69:42:89:7f:b9:f2:
36:1a:64:61:55:49:22:cb:fd:e7:a5:e8:25:b0:46:62:c6:f7:
c4:d5:b7:83:fd:e8:e4:c2:31:1e:8f:a2:49:5f:f3:5a:00:58:
de:af:40:fe:14:4e:5f:3e:b3:21:55:8e:02:2e:ec:92:bb:37:
96:db:95:b7:8e:aa:33:ad:08:14:91:ec:72:1a:93:7a:da:aa:
d0:a2:c7:b0:e4:59:30:ad:a4:4e:4a:a1:9e:74:fb:b7:78:84:
bb:fe:9e:5c:1a:40:5c:e5:f8:87:ed:23:8f:5b:41:19:e1:4b:
cd:0a:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:16 2025 by rpki-client