Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ACCB5wzFaVa_q0fdR6KRYnu1LOg.roa
File: ACCB5wzFaVa_q0fdR6KRYnu1LOg.roa (raw, json)
Hash identifier: cq2xSwXbwTojm4KEblunXlYtppR+UOXpDpSc7yIdZZY=
Subject key identifier: 00:20:81:E7:0C:C5:69:56:BF:AB:47:DD:47:A2:91:62:7B:B5:2C:E8
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 05C433E9
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ACCB5wzFaVa_q0fdR6KRYnu1LOg.roa
Signing time: Sat 01 Jan 2022 14:06:04 +0000
ROA not before: Sat 01 Jan 2022 14:06:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50345
IP address blocks: 93.125.108.0/24 maxlen: 24
2a04:2e80:14::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96744425 (0x5c433e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 1 14:06:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=002081e70cc56956bfab47dd47a291627bb52ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cf:74:3d:51:40:a3:04:de:f1:57:58:f0:b2:
c7:56:ec:1c:c0:b3:ee:95:58:c2:4b:9c:a7:40:71:
47:80:d0:1e:fa:cb:e4:e0:a5:22:7f:4e:03:f6:86:
dc:0a:56:d9:24:fe:16:3f:cb:29:d4:cd:54:9d:6c:
35:eb:c4:b4:db:7c:db:52:c6:9a:eb:ba:2c:bc:20:
c8:ad:60:3c:48:cd:1c:5a:cb:f5:50:9b:c0:08:c7:
c7:8f:36:40:4e:fe:e2:4b:d1:4e:d0:76:e5:0c:62:
ea:55:22:3f:93:66:d4:7b:10:e3:df:cc:05:2d:ac:
d8:bb:b7:8e:ab:15:25:92:3e:b4:29:4c:cd:be:db:
64:4f:a6:46:2b:96:a0:14:ad:63:65:e6:58:ab:9b:
d0:b6:5c:87:72:d9:6b:42:0e:4d:8f:d0:eb:f6:42:
22:49:ce:cb:59:29:fd:12:0d:7c:cf:3d:28:39:3d:
42:1d:d6:0e:2b:c2:41:f1:f2:0f:86:48:10:39:c0:
79:7b:a5:a0:53:14:b6:51:95:9f:70:2f:42:a1:f2:
1d:f9:87:6f:cc:5d:98:4b:be:7b:5b:18:5e:9f:fe:
89:76:28:74:3f:ac:e4:88:69:6c:1d:9d:a0:3b:0d:
e1:a8:68:2a:db:a5:b4:d9:34:12:83:56:f8:94:c5:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:81:E7:0C:C5:69:56:BF:AB:47:DD:47:A2:91:62:7B:B5:2C:E8
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ACCB5wzFaVa_q0fdR6KRYnu1LOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.108.0/24
IPv6:
2a04:2e80:14::/48
Signature Algorithm: sha256WithRSAEncryption
51:09:bd:76:d7:cb:c8:c2:e3:0d:4c:1c:8a:07:82:29:ab:93:
79:9a:5b:4a:40:b7:21:12:79:6c:d0:11:de:59:59:37:c7:11:
03:2b:78:11:61:c1:eb:46:6a:ee:7f:77:e4:2d:bf:5e:b8:cf:
b2:dd:f0:54:1e:fb:c1:b2:c4:fb:3e:d1:ab:78:a8:10:c5:19:
39:17:50:c8:02:a4:9d:93:65:54:50:3a:71:0a:51:93:59:3d:
ff:8a:be:76:cb:2e:75:b4:f8:30:57:2a:54:d0:98:06:c8:89:
e4:d9:e3:89:b4:cb:d0:af:80:8f:89:1c:83:e2:21:c6:17:ea:
b2:73:2b:8a:5b:94:66:35:b8:e5:ba:a8:93:bf:52:1d:ed:18:
18:a7:e7:39:36:e2:3a:d9:49:bf:50:8e:d7:6c:42:63:c5:6b:
ce:f7:fe:5b:c6:17:12:11:d6:39:64:38:4b:43:26:ee:84:a0:
33:da:72:ad:1e:2b:27:82:c5:b7:53:be:32:db:8c:18:fb:64:
dc:c4:74:13:35:e4:6c:c6:4e:ff:2c:3d:63:70:68:92:53:03:
62:cf:f2:03:56:59:c1:80:89:ce:37:b5:a1:27:c8:ac:5a:f2:
0f:b7:b7:2b:b6:a1:d9:1d:3f:3d:1a:14:09:5b:4a:37:b9:db:
2d:bd:8d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:50 2024 by rpki-client on console-ams.rpki-client.org