Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/GUQgpJ9QBGKclFk0Wvca8MAk-dY.roa
File: GUQgpJ9QBGKclFk0Wvca8MAk-dY.roa (raw, json)
Hash identifier: ATqFC/iokYBB+sqnoK4QrxDwNgDlEgs9XG11HcA+Ozg=
Subject key identifier: 19:44:20:A4:9F:50:04:62:9C:94:59:34:5A:F7:1A:F0:C0:24:F9:D6
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0A2597E6
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/GUQgpJ9QBGKclFk0Wvca8MAk-dY.roa
Signing time: Sat 01 Jan 2022 11:56:15 +0000
ROA not before: Sat 01 Jan 2022 11:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206375
IP address blocks: 93.157.188.0/24 maxlen: 24
93.157.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170235878 (0xa2597e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 11:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=194420a49f5004629c9459345af71af0c024f9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:e4:f7:42:1d:96:c0:88:63:d6:f3:99:df:
38:ba:f4:05:44:e7:83:9e:e8:f2:70:ec:34:f1:5a:
a1:ca:e4:2d:4b:ff:7f:6d:64:e7:bb:6b:04:bf:e4:
f8:3c:fe:be:e3:9f:d6:aa:c9:1d:d8:a1:ae:08:a9:
11:f3:6a:b7:7f:88:ac:8c:99:d1:f0:7a:db:4b:b1:
f5:3c:cc:bd:3b:ab:69:49:97:be:99:03:6c:ba:69:
8b:79:37:1b:00:d5:a3:7c:af:d1:84:a9:27:56:5b:
ad:59:3c:73:db:33:0b:3e:67:6a:16:18:61:46:46:
f2:d5:73:c3:59:63:f8:00:af:56:dd:47:c5:7a:4a:
08:15:a3:89:36:70:cb:11:2a:61:ff:8f:a4:3e:b6:
3f:5f:ec:9d:c5:87:3b:9c:36:49:f8:6c:19:fc:fb:
f5:ee:d2:89:f1:c4:d9:cc:02:7e:89:13:31:c5:42:
2f:c7:5f:b2:90:f8:2a:52:ae:d3:60:5f:97:0a:a8:
cb:e5:42:2c:3e:28:73:18:b9:6b:ee:a0:86:d3:48:
0f:82:c6:3c:56:87:47:bf:cf:81:30:df:a0:40:d2:
29:e8:8b:d7:28:09:5c:9b:b0:b0:be:da:24:26:ab:
6b:b8:6e:01:f0:65:5b:f9:22:a1:e7:5c:1c:95:c5:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:44:20:A4:9F:50:04:62:9C:94:59:34:5A:F7:1A:F0:C0:24:F9:D6
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/GUQgpJ9QBGKclFk0Wvca8MAk-dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.188.0/24
93.157.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:50:89:c7:72:0b:4d:d1:45:d7:7d:97:52:0a:45:e0:41:c5:
25:23:8e:ad:fb:25:2b:ba:d7:4b:be:36:19:7f:7a:95:05:82:
db:95:41:cf:3a:81:69:b2:4f:05:dc:67:47:15:8c:a6:2a:5e:
20:f7:2b:08:04:27:ec:55:29:6a:f2:b3:a6:cf:48:c6:91:e1:
ad:49:64:49:d6:10:c5:f7:d0:d6:25:5b:50:00:2f:c9:02:ca:
44:69:f4:e9:e6:34:67:ae:b4:10:47:c1:76:a7:e2:e9:6d:c6:
56:43:d3:e6:e1:be:aa:f5:61:0a:7e:a5:ca:95:e9:8c:78:12:
65:4b:88:9c:c6:13:41:44:65:8d:11:ed:a3:b8:de:b2:97:25:
b1:35:da:be:c8:0e:ee:99:e6:d3:90:7e:d1:ac:89:c8:0b:f2:
77:18:1b:32:1c:98:7d:74:08:62:08:8d:73:f4:89:3f:33:42:
f7:4a:83:6b:03:49:57:77:fb:1c:06:f7:67:20:78:8e:cd:60:
36:18:32:ad:4d:a0:ba:6f:40:42:48:98:d3:5e:c2:c1:d9:21:
7f:2f:15:27:69:23:b8:5a:ea:77:a3:8c:92:6f:d7:6b:56:63:
d3:32:23:e8:e4:01:ba:46:6e:86:8a:6e:76:c2:10:44:35:97:
57:d9:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org