Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/99Miu7c462xbo6hcV1k8TSrsyEU.roa
File: 99Miu7c462xbo6hcV1k8TSrsyEU.roa (raw, json)
Hash identifier: SSnZI9nN/Al6XRU12MlpHFghowoq95MXZ+GCxGzYH6w=
Subject key identifier: F7:D3:22:BB:B7:38:EB:6C:5B:A3:A8:5C:57:59:3C:4D:2A:EC:C8:45
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0181EE3AAD0B5A83F66AF9AA156B6FE2A8DB
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/99Miu7c462xbo6hcV1k8TSrsyEU.roa
Signing time: Mon 11 Jul 2022 17:07:11 +0000
ROA not before: Mon 11 Jul 2022 17:07:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58337
IP address blocks: 93.119.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:3a:ad:0b:5a:83:f6:6a:f9:aa:15:6b:6f:e2:a8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 11 17:07:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7d322bbb738eb6c5ba3a85c57593c4d2aecc845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:7a:02:c5:91:4a:44:5a:6b:ef:e4:8e:de:
28:7b:c6:2f:cb:69:9b:30:d1:7e:46:64:0d:6f:c2:
c5:d4:53:c9:77:6b:cb:44:e5:56:48:2a:ee:4e:af:
bc:62:17:4f:98:7f:45:3c:20:d0:97:e8:ca:ac:1f:
11:fe:fb:8f:2e:e3:f5:42:3c:8a:ab:46:e7:66:4b:
05:5a:7a:f1:b8:c3:37:68:de:d7:cc:79:26:65:b2:
c7:30:c6:54:9d:75:c8:13:19:cd:52:da:50:37:e3:
d9:6e:be:1d:0c:4b:96:56:6a:40:99:10:f7:96:c1:
85:be:0a:76:24:da:9c:92:30:d9:9c:b9:66:f3:b3:
e7:ba:b2:87:aa:60:ae:c7:74:89:0d:86:8a:21:98:
dc:06:9f:64:22:15:eb:c8:2f:e6:e3:27:dd:ff:9b:
b2:97:bf:cb:6d:82:9d:a5:ac:b0:85:46:e4:ad:42:
89:f7:11:2c:b1:e3:11:69:3d:4c:9d:fb:4e:6c:f1:
b8:42:4a:e8:0f:dd:5e:30:e2:d8:da:1e:8a:66:0f:
82:18:b8:40:24:44:5e:ee:37:b4:9d:51:65:ba:b2:
2c:b9:d2:f3:01:af:08:b4:9a:a4:cd:e5:e2:01:a7:
80:f5:99:59:e1:49:dc:ce:5f:c5:41:36:8e:c4:e8:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D3:22:BB:B7:38:EB:6C:5B:A3:A8:5C:57:59:3C:4D:2A:EC:C8:45
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/99Miu7c462xbo6hcV1k8TSrsyEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.192.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e8:af:94:2a:13:e0:ce:8a:86:97:35:71:86:46:14:02:a3:
a9:69:01:6b:44:ce:d4:91:7f:0d:d4:f6:71:51:8e:f1:26:35:
3b:83:d5:39:5e:7e:6f:40:18:68:bd:b6:44:21:38:1d:73:a5:
37:ce:19:02:c8:bd:9d:f9:02:e1:4c:65:b7:e5:7f:91:9b:f5:
46:31:45:88:85:c4:0e:5c:b3:6e:f6:24:44:48:8f:a4:d5:b9:
cc:2a:26:22:d4:d5:3f:75:4c:df:17:d6:87:b6:4e:0c:ef:b5:
10:c4:27:74:71:5e:08:91:a2:60:66:a6:c3:e6:b7:55:f1:8f:
b5:3f:ff:42:5a:b4:e7:ae:ad:e7:7f:70:0b:ba:fa:f8:0e:22:
a2:6b:b5:5a:ed:5e:83:2c:48:58:f0:fb:b0:12:d4:f9:64:51:
83:3f:14:48:02:0b:0d:00:93:28:c9:a3:88:cd:63:47:46:8e:
e8:0e:14:87:33:4a:22:a2:3f:ec:e6:b1:61:3b:ef:c4:75:04:
b4:3e:ee:f2:c9:c3:df:25:a6:29:ca:8a:66:3d:d4:6a:52:7c:
c0:6d:00:b9:ef:1d:dd:12:5c:fb:f9:34:f7:12:70:75:2a:de:
67:fc:ee:3d:1e:f7:d8:5a:74:c4:ed:b7:1c:9c:bd:3a:4a:03:
b6:d6:44:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org