Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/SJvV6nG0c2d9ZnhFV7ZUh3PfDoA.roa
File: SJvV6nG0c2d9ZnhFV7ZUh3PfDoA.roa (raw, json)
Hash identifier: U0WTd5jQdEae2gynqQ9c7D0oQxRf7VEEZGlwl0cncVA=
Subject key identifier: 48:9B:D5:EA:71:B4:73:67:7D:66:78:45:57:B6:54:87:73:DF:0E:80
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 069346F4
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/SJvV6nG0c2d9ZnhFV7ZUh3PfDoA.roa
Signing time: Sat 01 Jan 2022 06:58:39 +0000
ROA not before: Sat 01 Jan 2022 06:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20897
IP address blocks: 193.93.101.0/24 maxlen: 24
193.93.102.0/24 maxlen: 24
193.93.103.0/24 maxlen: 24
193.93.102.0/23 maxlen: 23
193.93.100.0/24 maxlen: 24
193.108.162.0/23 maxlen: 23
2001:67c:2380::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110315252 (0x69346f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Jan 1 06:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=489bd5ea71b473677d66784557b6548773df0e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:77:5b:6f:7b:58:88:8b:39:69:d7:b2:47:
53:0d:91:57:2d:9e:77:47:5b:24:aa:2b:00:95:49:
0c:10:c7:ca:d3:0d:70:53:5e:b5:dd:94:e5:6a:ad:
13:18:2e:c1:20:57:5c:7d:28:4d:3a:c3:e0:41:98:
41:2e:19:b7:1f:c7:ce:b3:44:e4:25:23:3d:91:68:
84:ac:37:a2:8a:3f:d7:0c:63:3e:1f:de:0f:fb:f1:
92:86:9e:5d:f8:eb:ae:e7:4d:12:a0:84:59:7d:83:
ad:d3:90:c2:2a:fc:af:61:d8:28:d1:53:8f:02:79:
91:f2:16:04:2d:26:f7:93:96:19:6e:42:0d:cd:45:
c1:b7:32:a1:d6:47:96:ad:32:eb:69:a0:2c:8a:83:
77:21:bc:55:89:8e:5c:98:d9:5e:89:2f:32:9c:40:
67:ce:9b:39:b8:1a:f1:75:94:e6:e7:d4:96:ae:4e:
67:b8:29:8c:05:c6:04:5a:64:dd:bb:f3:47:3e:54:
d0:a2:f2:11:3d:76:99:e7:6c:53:3d:19:b0:6d:fc:
42:06:0e:25:03:cb:61:ef:7f:8f:18:a7:ea:09:08:
13:b9:0d:d0:31:bc:94:7a:3c:ce:29:db:05:c1:13:
a3:ed:3a:56:b5:a2:31:43:bb:d4:5d:7d:e4:5b:fe:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:D5:EA:71:B4:73:67:7D:66:78:45:57:B6:54:87:73:DF:0E:80
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/SJvV6nG0c2d9ZnhFV7ZUh3PfDoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.100.0/22
193.108.162.0/23
IPv6:
2001:67c:2380::/48
Signature Algorithm: sha256WithRSAEncryption
32:9e:44:a9:74:59:4e:40:9d:de:9c:85:bd:a6:54:23:7c:3e:
d5:ed:6e:79:b6:38:be:99:7b:74:7a:cf:de:14:f7:13:26:54:
9c:48:1a:22:f3:20:8f:31:ed:ac:2e:da:5a:b5:19:e9:4e:e7:
28:c9:90:f5:93:ff:d1:4d:29:28:8c:e6:56:87:29:61:4f:e2:
10:39:cc:fb:d6:ce:31:a5:8b:8e:07:8b:9a:6b:14:41:4b:ba:
31:7c:09:75:7b:3b:fc:ac:53:d5:cf:3a:de:04:47:09:a7:56:
88:98:81:df:fc:23:38:87:70:43:89:bd:6a:ac:20:02:7d:ef:
fd:30:78:7c:26:ca:00:3f:b7:07:d6:78:cb:7f:7a:c2:b1:f2:
31:d1:35:05:85:7f:5a:0c:84:ed:c9:2e:e0:c8:dc:c7:f6:37:
07:d3:39:b8:ef:03:fd:06:e4:f0:75:68:49:2d:80:f3:09:28:
0d:89:22:97:b0:23:37:bf:ec:3e:04:5e:75:2d:39:5e:25:ea:
b6:c0:f5:d2:37:0a:35:50:66:e6:a5:5c:0c:bd:17:ad:02:8c:
8c:aa:a4:b1:b2:65:a1:ed:36:fc:f2:40:a6:8a:43:87:e4:e6:
0c:dd:d3:70:d8:9f:26:8d:09:5e:c9:83:93:7c:d6:dc:2e:d6:
17:20:14:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:53 2024 by rpki-client on console-fra.rpki-client.org