Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/9X1irRIgz4duGMHeWLQq8yxL_cI.roa
File: 9X1irRIgz4duGMHeWLQq8yxL_cI.roa (raw, json)
Hash identifier: Y/QuJ325soBGHXe7FCRa4T5x954ePxWJlife3Qb1iL4=
Subject key identifier: F5:7D:62:AD:12:20:CF:87:6E:18:C1:DE:58:B4:2A:F3:2C:4B:FD:C2
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 0470D718
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/9X1irRIgz4duGMHeWLQq8yxL_cI.roa
Signing time: Sat 01 Jan 2022 15:01:04 +0000
ROA not before: Sat 01 Jan 2022 15:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212947
IP address blocks: 93.157.187.0/24 maxlen: 24
206.204.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74503960 (0x470d718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Jan 1 15:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f57d62ad1220cf876e18c1de58b42af32c4bfdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:cb:ae:4f:1f:c7:71:dd:2d:ea:20:55:8e:
13:a8:54:f7:22:d1:10:57:44:f0:e2:e4:0f:e8:fe:
b9:45:e5:40:87:c2:e0:93:25:ac:99:c5:dc:3e:4f:
c8:af:ab:63:48:cd:85:71:70:1d:4a:db:76:b2:ea:
d4:f5:d1:85:c6:65:ef:ad:e5:f2:8f:7c:e4:93:c6:
bf:f6:c5:9f:a9:ca:c6:80:1f:56:0e:81:57:20:85:
53:3b:f2:25:94:d2:22:f4:68:32:32:a1:79:90:07:
4a:3d:2a:61:1d:77:50:86:7a:a2:27:1d:e5:2e:1a:
35:33:9f:c2:33:f1:1f:46:a5:20:f8:61:f8:ac:2d:
94:e0:55:ad:53:f9:5f:f2:84:91:df:46:28:a1:15:
07:ac:77:c5:64:bf:a3:4f:fe:56:3a:17:59:24:4a:
9c:d7:a2:f4:9d:1c:b5:6d:1f:34:ce:7c:89:6e:4b:
31:21:11:8d:ae:45:60:b5:88:25:1a:09:fd:ab:73:
61:f1:1f:7b:6e:4a:bf:49:0d:1f:5f:6f:99:ec:de:
e6:d5:d0:7a:c5:4a:04:5d:a9:cd:bb:8f:83:e9:5b:
16:e7:9c:47:31:37:3a:b3:bc:8f:36:25:46:43:0b:
01:63:d1:1c:ab:dd:7a:1e:99:a5:86:b3:d4:4e:53:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:62:AD:12:20:CF:87:6E:18:C1:DE:58:B4:2A:F3:2C:4B:FD:C2
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/9X1irRIgz4duGMHeWLQq8yxL_cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.187.0/24
206.204.104.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3d:2f:39:96:38:40:48:87:18:fd:77:50:d4:c0:16:b1:ba:
0e:99:4b:9b:7a:78:bf:27:5c:ef:86:50:c2:19:61:f9:93:28:
c0:a3:4b:e7:b9:2a:39:b2:57:da:90:70:dc:16:64:4a:4b:60:
f0:4b:9d:d8:50:94:20:eb:9f:1c:93:ca:95:62:9c:00:3c:a1:
a8:83:bc:5a:14:fa:06:47:ea:2b:ac:2e:18:74:f3:83:28:15:
ae:a0:55:9e:51:38:b2:a6:5c:4f:a0:97:2e:6c:0c:72:e5:47:
aa:3f:16:05:e0:99:36:da:5e:b2:73:a6:38:7d:14:f9:30:01:
61:a6:b3:2e:c6:84:8e:14:50:7a:a2:d4:38:83:b4:ca:10:f3:
1b:7c:e1:77:31:ab:90:5a:14:ec:ca:74:aa:ea:89:83:f3:27:
85:ac:5f:11:9d:a1:0c:a6:15:59:07:f9:da:ef:62:72:4a:c6:
3b:72:6b:c0:16:40:5f:72:ab:c0:a2:6b:37:a1:15:1d:90:c4:
8a:9c:a8:0e:f5:29:0f:fe:23:50:9b:a2:16:0e:95:ff:24:3d:
c4:ad:5c:0e:24:c8:ad:6c:70:bf:6e:91:52:e6:b8:ae:83:cf:
ef:a8:ca:64:d7:75:36:ff:d3:c6:52:c8:29:7d:2d:91:6c:c9:
65:48:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:56 2024 by rpki-client on console-ams.rpki-client.org