Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/qUT1jbT7LJWVWNr9tUpYSTgOgWE.roa
File: qUT1jbT7LJWVWNr9tUpYSTgOgWE.roa (raw, json)
Hash identifier: DYlGlQKBMlEZqn25s4fwaM7dkPZ0OtzG6UzHBrwcna4=
Subject key identifier: A9:44:F5:8D:B4:FB:2C:95:95:58:DA:FD:B5:4A:58:49:38:0E:81:61
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 054FCB16
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/qUT1jbT7LJWVWNr9tUpYSTgOgWE.roa
Signing time: Sat 01 Jan 2022 06:57:32 +0000
ROA not before: Sat 01 Jan 2022 06:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47702
IP address blocks: 213.109.224.0/20 maxlen: 20
213.109.225.0/24 maxlen: 24
213.109.224.0/21 maxlen: 21
213.109.224.0/22 maxlen: 22
213.109.224.0/24 maxlen: 24
93.175.200.0/24 maxlen: 24
93.175.200.0/21 maxlen: 21
93.175.200.0/22 maxlen: 22
93.175.201.0/24 maxlen: 24
93.175.204.0/22 maxlen: 22
213.109.232.0/24 maxlen: 24
213.109.232.0/21 maxlen: 21
213.109.232.0/22 maxlen: 22
213.109.233.0/24 maxlen: 24
213.109.228.0/22 maxlen: 22
213.109.236.0/22 maxlen: 22
93.175.192.0/20 maxlen: 20
93.175.192.0/21 maxlen: 21
93.175.192.0/22 maxlen: 22
93.175.196.0/22 maxlen: 22
2001:67c:11d4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89115414 (0x54fcb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Jan 1 06:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a944f58db4fb2c959558dafdb54a5849380e8161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:63:ff:5e:8d:54:a0:a8:3b:5d:ba:40:63:
3d:8a:55:04:12:49:9e:f8:47:74:9e:b0:b1:8f:bf:
fe:3c:2e:54:bf:23:e2:f3:f8:29:0a:32:dc:30:12:
d8:60:5f:3a:0a:39:95:82:47:6e:92:fd:1d:a6:e0:
35:11:cc:53:12:11:3a:f3:0d:81:a2:e7:2b:e1:7e:
0f:14:12:80:cf:3b:47:36:ad:c8:9d:85:ed:81:95:
ea:88:a8:37:a0:9d:c1:fe:eb:59:54:44:b3:d5:d2:
a5:eb:d7:1a:ca:7a:88:96:8a:9a:4e:54:4d:4e:b7:
dc:18:a7:65:68:3c:80:89:01:2b:e1:e5:d0:21:e6:
71:e0:da:1b:1b:9c:ba:b1:d4:25:7d:6a:73:05:78:
14:53:dc:52:d6:d4:a2:af:0f:18:ff:31:c2:e8:66:
08:57:b3:d8:02:ce:3f:88:ba:1f:36:2a:30:7e:18:
51:54:e2:f4:41:ae:dd:27:67:e4:b5:b3:4f:5f:92:
2f:a7:e0:09:b0:01:30:d2:37:e5:97:46:84:33:dd:
ca:2d:23:90:a4:13:e6:5b:4b:b9:17:9c:f4:86:7d:
82:5f:6f:1e:c8:5f:97:87:42:3f:cb:8c:c1:41:84:
d7:85:0a:56:5f:23:bd:1f:88:44:05:eb:52:58:47:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:F5:8D:B4:FB:2C:95:95:58:DA:FD:B5:4A:58:49:38:0E:81:61
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/qUT1jbT7LJWVWNr9tUpYSTgOgWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.192.0/20
213.109.224.0/20
IPv6:
2001:67c:11d4::/48
Signature Algorithm: sha256WithRSAEncryption
10:45:2f:b1:20:ac:16:8d:a9:28:9e:89:67:b1:7b:88:bd:00:
19:8b:c0:89:fe:08:7f:bb:9a:f6:3d:01:63:ee:ed:44:20:c2:
c0:f9:34:6a:5a:82:df:54:be:c3:6b:d9:bc:4f:7e:05:ba:3a:
c2:fc:a1:45:3e:56:79:d4:5e:e4:81:df:93:98:9c:a3:b7:d3:
48:86:96:cd:86:67:eb:23:c8:72:21:ed:74:e4:ee:7e:16:ca:
04:4e:cd:72:fc:10:f3:ac:0d:e9:2f:55:24:34:ff:49:a0:f6:
fa:e4:4c:74:f2:99:22:69:be:12:eb:57:52:1b:ef:ca:30:bc:
f7:14:f7:a0:5c:ed:b1:93:1e:7f:14:f3:48:05:0f:2a:18:6c:
03:c4:17:61:3c:c0:9d:53:1e:87:48:01:31:16:e4:27:b6:02:
c7:85:3c:cd:91:fd:38:e9:63:17:93:ce:b8:6b:3b:a3:69:62:
81:48:1f:3a:9b:ad:a9:ee:e3:55:d0:e8:7d:a6:0b:dc:c7:d6:
6c:48:e4:70:ac:41:d2:9c:9e:bc:8e:61:43:29:fa:7a:bb:34:
80:ef:97:e8:5c:bd:82:52:83:8d:3d:f9:20:f2:2a:9c:72:53:
7e:c5:a8:f4:a0:92:b9:d1:11:c6:58:6e:b5:c7:10:7f:9f:1a:
b8:cb:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:21 2024 by rpki-client on console-fra.rpki-client.org