Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/sJFxnYdbta1pT6ddc4DpOeDKkJw.roa
File: sJFxnYdbta1pT6ddc4DpOeDKkJw.roa (raw, json)
Hash identifier: 576XEiMOvxFjj0Ar7hZvNE8PE/66SfeEZwGw1xIZ7vo=
Subject key identifier: B0:91:71:9D:87:5B:B5:AD:69:4F:A7:5D:73:80:E9:39:E0:CA:90:9C
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0185104B14BCB5E4CB321A532F1DC10538AA
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/sJFxnYdbta1pT6ddc4DpOeDKkJw.roa
Signing time: Wed 14 Dec 2022 11:00:34 +0000
ROA not before: Wed 14 Dec 2022 11:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48737
IP address blocks: 93.188.132.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.215.0/24 maxlen: 24
163.171.216.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:4b:14:bc:b5:e4:cb:32:1a:53:2f:1d:c1:05:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Dec 14 11:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b091719d875bb5ad694fa75d7380e939e0ca909c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:a1:96:f8:2f:1d:72:5b:98:94:25:93:d5:
ad:53:ff:19:0f:21:fe:f3:3a:8b:8b:2e:c4:e4:67:
91:a7:dd:dc:41:14:f9:d5:f8:65:75:37:92:2b:56:
6d:49:13:74:e7:d0:a2:c6:c1:57:6b:fe:4d:80:5d:
7a:39:db:b7:e4:df:10:67:20:1c:4a:45:a6:7c:c9:
e7:84:f1:35:8b:0b:92:45:e1:5e:9c:0c:ac:d4:e8:
2d:40:35:05:1b:bf:d7:9a:8f:e2:e4:f2:cd:d6:a6:
f5:6b:cf:e1:1a:b1:34:02:c8:8c:dd:b7:18:49:b3:
1b:04:82:7a:d4:d9:8b:75:e5:72:37:f3:aa:f7:2d:
1e:51:a8:e9:03:29:6e:d9:c1:03:b7:b6:98:40:fd:
b1:94:e4:45:23:a4:37:2e:4f:00:14:de:15:36:e2:
c2:8c:2b:20:9c:65:c5:a2:8d:8e:60:9f:20:20:18:
3a:7a:d4:c9:92:d5:18:06:44:85:59:de:26:bf:3c:
fa:3c:88:9d:29:4d:74:3d:7c:ea:6b:d7:45:e1:55:
d2:b7:72:a0:0e:68:67:e0:7b:7e:ee:75:c3:24:07:
21:b4:39:a5:cd:98:1f:0d:07:9a:9c:56:70:c1:02:
97:fb:96:f3:14:28:e9:c0:81:98:92:3f:4e:32:5d:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:71:9D:87:5B:B5:AD:69:4F:A7:5D:73:80:E9:39:E0:CA:90:9C
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/sJFxnYdbta1pT6ddc4DpOeDKkJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.132.0/24
93.188.135.0/24
163.171.215.0-163.171.216.255
163.171.231.0/24
163.171.252.0/24
Signature Algorithm: sha256WithRSAEncryption
69:94:5e:5c:2e:ae:c2:a8:34:bc:79:ab:b7:00:cd:99:cf:ea:
94:dd:78:81:72:3e:82:c0:6d:52:58:c3:56:1e:06:af:84:3c:
08:75:2c:e6:3c:ac:a2:c8:51:9d:e5:a9:a9:06:a7:0e:86:b7:
a1:8e:7b:6e:52:46:0a:bb:91:1e:7c:ff:17:9f:af:8b:67:ad:
c7:27:9c:8c:23:b5:72:d2:1d:44:7c:81:dc:c8:ec:f0:bf:c7:
f7:5d:7d:a4:bb:ca:0e:78:2f:73:95:d1:de:2a:eb:7a:91:46:
79:09:40:9c:7b:55:5e:27:63:cb:0d:d5:4f:1b:77:73:2e:ec:
7c:90:4f:6f:63:a9:dd:df:e8:b6:7a:58:18:b7:c0:28:62:10:
bc:fe:ac:07:37:f4:10:71:3a:04:3e:7d:0d:5a:68:73:3c:36:
76:d7:80:d3:05:05:3d:4e:5a:6a:df:de:b9:93:bb:07:65:81:
e7:5f:ea:d5:fd:33:f3:cb:a6:4d:24:f3:b1:b4:10:6b:62:3a:
26:5e:c3:7c:04:ea:5f:2a:3a:b3:67:c2:9c:de:f6:fe:7c:e8:
59:fd:58:e7:e6:c0:31:76:2d:97:8e:72:12:aa:27:a5:d6:08:
9d:cf:1e:a8:ab:ea:4d:8a:22:0d:df:25:c4:66:0a:d0:f1:5f:
c9:a8:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-fra.rpki-client.org