Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5_FT6LyrnfDEuu9cvvVmdib3knQ.roa
File: 5_FT6LyrnfDEuu9cvvVmdib3knQ.roa (raw, json)
Hash identifier: mjZhdAEFdKEGyevERZolPjOZOLC4TgRbEby20OVxGWg=
Subject key identifier: E7:F1:53:E8:BC:AB:9D:F0:C4:BA:EF:5C:BE:F5:66:76:26:F7:92:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183D1A68D4C702C4173F8507D12F98CA9C8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5_FT6LyrnfDEuu9cvvVmdib3knQ.roa
Signing time: Thu 13 Oct 2022 14:01:36 +0000
ROA not before: Thu 13 Oct 2022 14:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15504
IP address blocks: 93.123.19.0/24 maxlen: 24
87.121.107.0/24 maxlen: 24
87.121.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:a6:8d:4c:70:2c:41:73:f8:50:7d:12:f9:8c:a9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 13 14:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7f153e8bcab9df0c4baef5cbef5667626f79274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:ce:85:4a:c8:53:48:4b:73:8a:3a:a1:9d:
69:d1:2f:dd:c4:90:c2:f8:b3:1a:8c:63:1a:51:72:
5c:e6:63:66:fe:bb:85:26:3e:4c:8b:82:6c:eb:c3:
2c:6c:57:ab:32:11:c8:0c:1b:e2:a8:63:06:44:36:
9e:9d:95:38:6c:de:30:3a:f8:3e:c3:e4:9d:e4:e8:
15:9c:40:f7:9c:1f:93:cb:5c:da:76:36:31:a5:7a:
fa:e7:b5:c0:84:05:ad:bc:66:2d:d4:f5:cb:b7:f3:
6a:cd:4c:a3:43:b6:50:d5:f2:29:64:8f:dc:9c:d1:
ac:6f:fa:c0:12:10:f7:a8:2a:a7:df:0f:b1:30:11:
bd:c2:bc:18:0c:76:4b:d2:65:3b:71:6e:bf:fd:3f:
f6:c6:a6:e9:1b:88:b5:86:e8:53:8b:de:c3:cc:83:
cd:e9:ab:74:5e:2a:7d:13:09:06:e1:b1:37:e0:95:
8d:ef:9f:4e:57:ad:d3:59:42:f5:66:00:05:c2:77:
9b:93:ee:eb:a8:13:26:3a:32:a3:ef:bc:12:b8:fa:
55:d4:b6:53:08:b9:5e:f4:c4:3f:fb:f8:5f:60:8c:
45:1d:16:62:87:76:6d:9a:d0:a8:1a:ca:65:c7:8e:
9c:0a:a4:36:b8:02:49:0d:9d:05:d4:6b:4e:af:7a:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F1:53:E8:BC:AB:9D:F0:C4:BA:EF:5C:BE:F5:66:76:26:F7:92:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5_FT6LyrnfDEuu9cvvVmdib3knQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.106.0/23
93.123.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e5:37:dd:7d:93:1e:65:6e:bb:a4:b1:e0:89:f2:24:2d:c0:
d1:a0:a9:49:c2:5e:06:5b:9c:7e:f3:92:22:31:0c:84:69:59:
7e:b1:78:23:a9:39:0e:e1:4c:dc:23:da:09:ec:f0:a4:bb:81:
41:92:82:b5:fa:97:6d:73:7b:51:42:bc:4c:29:53:68:38:36:
13:73:b9:0a:f8:7d:7a:04:29:cc:fb:68:80:4b:af:ec:58:3c:
db:d5:b9:47:31:2a:34:97:e7:76:7f:ac:73:4e:5b:78:51:9e:
8b:6e:d7:c3:4c:dc:6a:c7:38:0b:7d:04:0b:50:ad:89:82:4e:
1f:6e:d9:a4:d2:1a:e6:91:d7:4b:fe:85:18:4c:07:d7:f4:71:
1c:03:dd:b1:95:2b:1e:83:ed:0d:c7:c4:7c:39:1c:fe:a6:06:
23:28:a6:e5:94:3d:3e:a8:88:01:8c:9f:fa:21:63:01:89:47:
74:1c:f3:a9:c2:38:03:2a:22:bd:c6:95:3c:f8:d3:dd:7e:07:
5f:b7:a9:1f:9e:c4:06:f6:b3:33:8e:82:38:38:e5:12:fc:ea:
5c:7e:92:6b:c3:1f:f8:3c:72:6b:a6:84:d5:be:c4:30:34:b1:
bd:84:6a:69:2b:85:5c:28:a9:83:34:20:96:5a:03:6f:ab:28:
1b:c1:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org