Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/06eFTCrKN0jtIhv-tcu8MvRhuLs.roa
File: 06eFTCrKN0jtIhv-tcu8MvRhuLs.roa (raw, json)
Hash identifier: JTN3mgGCx5L3nkZjh85cPJStaFlx6tVswdGynr8MnE0=
Subject key identifier: D3:A7:85:4C:2A:CA:37:48:ED:22:1B:FE:B5:CB:BC:32:F4:61:B8:BB
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018463A7CD5F6861CFAC1E5D2A6244590A70
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/06eFTCrKN0jtIhv-tcu8MvRhuLs.roa
Signing time: Thu 10 Nov 2022 22:27:32 +0000
ROA not before: Thu 10 Nov 2022 22:27:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 185.93.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:63:a7:cd:5f:68:61:cf:ac:1e:5d:2a:62:44:59:0a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Nov 10 22:27:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3a7854c2aca3748ed221bfeb5cbbc32f461b8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:81:d4:bb:be:87:f0:d4:a1:77:21:49:27:
41:29:97:70:3a:37:47:37:83:a9:26:4c:a2:35:dc:
81:04:95:2f:fb:35:ea:b0:e5:ea:b5:a3:39:94:99:
51:fb:78:86:97:be:d7:99:72:69:15:55:ff:17:ce:
b8:d6:e3:ea:09:5e:63:49:18:ab:ed:57:31:31:da:
db:95:4a:ff:7c:fd:f7:51:58:ac:c3:a4:c9:ef:4f:
31:70:3e:ea:b3:1e:41:e8:97:37:03:58:29:2d:e7:
1c:61:2e:39:f7:3e:f6:27:f7:eb:a0:55:46:39:05:
78:1b:23:20:98:4e:41:f8:14:ef:32:03:1b:49:42:
5f:6a:c6:3c:a6:62:df:b3:b9:bb:d6:54:a8:75:26:
1e:b2:f9:e8:be:bc:f3:c7:24:f5:ed:09:3e:eb:2c:
82:3b:a9:f7:11:4a:d0:83:b1:47:b3:e3:44:7b:f3:
ac:a1:26:5a:d2:a9:44:f7:2b:06:16:c9:b3:40:47:
89:09:cf:26:fd:73:8b:49:14:fc:d4:04:12:85:87:
90:02:ad:2c:1a:f9:c0:5a:06:e3:1e:2e:99:41:99:
38:aa:1f:db:e3:9c:f9:a1:86:00:f7:78:dd:51:5e:
ff:48:e5:fb:ff:e3:cb:f5:08:73:6c:fe:3b:90:f8:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:85:4C:2A:CA:37:48:ED:22:1B:FE:B5:CB:BC:32:F4:61:B8:BB
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/06eFTCrKN0jtIhv-tcu8MvRhuLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.222.0/24
Signature Algorithm: sha256WithRSAEncryption
55:75:d2:ac:ad:59:38:2b:a8:88:56:3f:cc:75:a0:9c:d7:64:
95:42:f1:c9:55:f7:cb:c5:24:04:cd:ad:6d:c6:5e:0b:58:05:
04:48:58:35:ad:e2:a2:09:d3:9e:fa:a5:3b:fe:d2:81:46:8b:
6b:a1:8c:6a:a1:57:9f:a0:44:0e:fc:53:bb:f6:89:a1:ff:fb:
43:e4:62:f4:7f:8e:33:fe:85:05:2a:0e:5b:da:d4:67:31:0d:
22:39:4d:f8:8c:d8:1f:54:6d:9f:08:1d:10:7a:18:44:bd:09:
fa:36:31:85:e4:7f:e3:24:9b:73:61:ef:f3:2b:12:ab:90:3d:
c0:3d:88:9e:56:42:69:c8:4d:41:a7:49:b4:d3:0b:97:61:72:
73:ac:88:f2:7f:d6:79:38:d3:c2:a6:c1:be:cd:70:4f:d8:89:
84:51:fb:d9:e4:f9:7b:41:46:0a:fd:8f:38:08:cf:cd:ed:e3:
5b:f4:a7:b5:b3:98:01:8c:8c:0c:94:e8:a2:d2:44:da:45:4d:
23:0d:fb:a4:53:15:24:55:fa:83:c4:7a:e9:b0:06:54:21:f8:
c5:74:c6:1b:b5:7f:7c:93:27:78:89:ce:ef:0b:c5:02:7b:aa:
2c:11:fd:72:51:89:77:d9:de:0a:e2:60:b4:2e:ca:4e:83:59:
f0:f6:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:16 2024 by rpki-client on console-ams.rpki-client.org