Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IlpEUmrKhbrQwCDqJFgWMN6qGcU.roa
File: IlpEUmrKhbrQwCDqJFgWMN6qGcU.roa (raw, json)
Hash identifier: SQiDPQGR4HAHmFwrKJkWJvdjXHusmM25hBEdd0JhOpc=
Subject key identifier: 22:5A:44:52:6A:CA:85:BA:D0:C0:20:EA:24:58:16:30:DE:AA:19:C5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 092DCE04
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IlpEUmrKhbrQwCDqJFgWMN6qGcU.roa
Signing time: Sat 01 Jan 2022 05:55:27 +0000
ROA not before: Sat 01 Jan 2022 05:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29551
IP address blocks: 85.93.10.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153996804 (0x92dce04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 05:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=225a44526aca85bad0c020ea24581630deaa19c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:1b:ff:2b:bb:71:0f:8a:eb:02:d8:b3:da:
ce:4d:bf:d9:48:8b:99:b1:e0:76:05:49:b5:33:d7:
21:45:68:f2:54:93:f0:15:d6:f4:fb:96:27:4f:13:
3c:6e:7a:1c:8f:fe:9f:e0:33:e7:7f:5a:f3:f2:dc:
43:8e:ca:98:bf:f3:d6:ca:f4:8c:26:66:61:d6:59:
b5:21:08:c0:26:8c:d9:90:8b:10:af:09:ec:5c:f0:
14:9f:c2:fc:76:43:b7:49:b0:7f:2c:a2:14:17:70:
b0:6d:0a:99:a6:20:16:f9:de:f7:d9:9c:35:84:56:
4c:30:97:47:ce:50:6b:16:a4:3d:2f:db:62:d7:86:
27:24:cb:39:2c:7f:94:83:70:7e:54:e4:b6:3a:cf:
0e:40:22:29:d6:d3:a4:77:91:f8:4b:e0:69:a7:0a:
b2:01:fd:23:46:93:44:c0:ec:11:68:89:ec:68:4c:
c9:1b:c3:3d:d9:07:f2:60:a6:21:15:32:a5:ea:c9:
c2:47:8e:11:a6:ca:f8:27:1c:33:39:08:42:3f:e7:
90:37:51:a8:37:88:39:85:7f:4d:5b:61:30:d0:72:
4f:c6:e1:32:0c:ce:01:68:7d:78:a7:f1:5e:37:9e:
e3:c6:72:65:e4:d4:07:c8:69:28:43:56:74:1d:04:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:44:52:6A:CA:85:BA:D0:C0:20:EA:24:58:16:30:DE:AA:19:C5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IlpEUmrKhbrQwCDqJFgWMN6qGcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:96:b8:0e:80:dc:b1:55:fb:bd:39:f3:bd:0f:16:5c:69:83:
09:af:14:d3:4b:52:71:fa:03:57:32:12:c8:5f:e0:1b:59:01:
62:7f:a4:e4:61:f4:d7:05:c6:6b:d3:d5:43:61:54:ee:7e:04:
77:2d:7c:45:41:48:9b:9d:3e:65:dd:9b:26:cb:bf:78:76:a9:
61:90:2e:09:b4:e0:6f:77:c1:bc:26:36:f5:e3:b1:ea:62:11:
5c:c7:d6:aa:71:07:b8:58:cb:66:dd:68:0f:56:b2:50:a5:bd:
b5:3d:b5:59:a0:c4:c3:21:b1:73:ae:22:67:fa:89:30:33:19:
e3:a1:ef:60:97:56:e0:86:74:a6:af:fb:72:5d:39:89:0f:69:
16:c8:92:dd:1a:19:fa:12:7d:46:6f:0e:c8:75:4c:a4:7e:c9:
36:e0:cc:81:36:a3:a1:2a:9d:dd:66:7f:d7:06:bb:02:c1:27:
78:b3:28:87:ab:75:29:ab:94:ac:65:3c:b7:f3:fe:dd:f3:00:
b2:72:51:a7:f5:f9:f4:49:30:1f:57:5d:e6:4c:b8:60:99:e9:
b3:17:35:d2:3f:7e:73:ae:5a:5b:7b:3a:e7:a3:09:ed:0e:3a:
b5:62:a3:ad:c0:f4:ba:4e:bd:3d:bf:4c:a4:5e:b7:90:2d:f2:
f8:9e:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org