Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XNpFIYIYuGdlCrLkbVvuIX8YNZo.roa
File: XNpFIYIYuGdlCrLkbVvuIX8YNZo.roa (raw, json)
Hash identifier: DiSQt96rKIuU7f9VHWz1SW3L99vqUQBUdoCkjWH+JZE=
Subject key identifier: 5C:DA:45:21:82:18:B8:67:65:0A:B2:E4:6D:5B:EE:21:7F:18:35:9A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 093010C2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XNpFIYIYuGdlCrLkbVvuIX8YNZo.roa
Signing time: Sat 01 Jan 2022 05:55:28 +0000
ROA not before: Sat 01 Jan 2022 05:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59580
IP address blocks: 85.93.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154144962 (0x93010c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 05:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cda45218218b867650ab2e46d5bee217f18359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:30:bd:e2:cd:49:65:54:5f:67:4c:0d:7e:
34:80:25:86:07:26:3c:2d:5e:e9:47:b2:54:94:22:
ea:50:2f:24:4c:f9:53:dc:58:83:b3:ff:30:6f:00:
23:eb:81:3f:d0:f6:4c:3d:e1:2e:6a:d2:f6:30:df:
30:d4:4d:93:33:a9:ac:48:f8:a2:43:93:f3:f6:1a:
ba:24:53:0c:02:0a:dc:6b:85:80:a8:95:ee:61:7d:
48:30:69:07:96:63:9e:44:39:a4:f6:66:bc:56:d5:
3d:d3:73:41:d1:d8:ef:3b:0c:85:2b:d2:7f:e0:91:
68:71:a2:92:59:ba:3f:34:a8:de:86:7d:65:33:4f:
cf:d6:02:75:d1:14:74:9e:ee:ae:a4:08:8c:88:58:
04:65:14:99:d0:c3:c9:02:b0:a4:af:3e:1b:1e:1a:
4b:d4:28:01:d6:21:a3:7f:28:9b:58:41:1c:bc:f8:
4a:08:bd:eb:df:91:d2:22:41:08:5d:29:43:a1:b7:
f7:b9:f1:d8:97:0b:26:2b:bc:92:dc:b8:56:f2:2e:
5b:4b:ab:a3:74:65:c2:8e:54:3e:7f:12:f2:28:cb:
eb:2c:86:28:fd:66:e2:2c:3a:76:35:b2:5f:d9:78:
34:f4:40:89:49:90:60:79:6a:59:1d:f1:ec:0b:fe:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:45:21:82:18:B8:67:65:0A:B2:E4:6D:5B:EE:21:7F:18:35:9A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XNpFIYIYuGdlCrLkbVvuIX8YNZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.2.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ef:56:d2:10:5f:44:ad:70:0c:09:7e:17:cc:20:20:79:c5:
81:4f:d3:db:99:c5:bf:df:67:36:b8:33:71:b9:b8:3d:2f:de:
b7:9f:85:30:d9:7c:e3:d9:58:10:31:36:e0:45:5e:ae:54:8b:
3c:53:61:09:cd:2b:5e:4e:10:83:1d:28:b1:fd:32:e6:cf:e2:
d6:51:b9:b9:41:c1:91:78:d9:95:90:bc:25:88:6c:2a:8e:aa:
7a:26:d1:c7:e3:0b:a5:a7:fa:6f:e1:8e:08:9e:fa:d9:26:65:
31:6f:d8:c2:c0:1b:d5:df:ca:f8:f3:bc:2d:72:bd:b2:96:44:
24:3b:4f:36:a2:d5:2c:63:d3:fc:94:e6:74:47:c6:2a:55:0f:
b0:aa:1c:47:e3:72:d2:22:85:bd:d2:6e:2b:4b:72:8a:8d:2b:
e0:0a:b2:a1:bf:b5:17:73:c3:3b:eb:cf:9d:5f:a5:06:28:b6:
eb:81:2e:d7:8b:7d:18:2b:a2:3d:ba:ea:1c:5a:2b:a0:8d:0c:
76:0d:8b:26:67:f9:e8:3b:55:dc:6d:1d:c0:29:9e:c6:b3:58:
58:e8:8b:96:7d:f2:45:43:00:05:7d:f1:d1:fc:31:f6:96:e4:
5d:79:87:ca:6c:fc:eb:1e:02:28:d1:18:22:c7:8b:40:98:05:
6b:11:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org