Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/hMrvy5W3CMTzbbA8tCbwvEQt8Vc.roa
File: hMrvy5W3CMTzbbA8tCbwvEQt8Vc.roa (raw, json)
Hash identifier: u5eEJbkTB+kgBf7X/C1bma8UPICnnrOsAk9uOWb8xwc=
Subject key identifier: 84:CA:EF:CB:95:B7:08:C4:F3:6D:B0:3C:B4:26:F0:BC:44:2D:F1:57
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: DDB441
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/hMrvy5W3CMTzbbA8tCbwvEQt8Vc.roa
Signing time: Sat 01 Jan 2022 02:54:00 +0000
ROA not before: Sat 01 Jan 2022 02:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 93.191.148.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14529601 (0xddb441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Jan 1 02:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84caefcb95b708c4f36db03cb426f0bc442df157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:df:e5:69:83:f5:48:fc:c9:02:2b:5b:99:
c1:f0:59:a6:ce:0c:74:92:f2:3f:e3:72:2d:e8:c6:
7f:58:f1:4f:21:22:12:fe:0b:7e:4d:1c:56:e7:9a:
73:09:18:5b:09:77:10:d9:e7:32:9a:eb:55:75:fb:
3c:23:27:74:9b:7d:c6:07:53:28:0f:cb:fa:bd:47:
df:09:82:f9:e9:38:c5:a3:cd:c5:3a:4b:44:ca:00:
72:f8:f2:a8:13:23:d2:d8:18:1a:61:2d:08:a2:3f:
d7:3b:f7:cc:5d:92:0e:c5:32:e2:46:17:c6:50:44:
5c:fd:ae:1a:d9:27:d5:37:81:ae:23:50:f9:ce:8f:
3f:25:d2:38:17:41:7e:d9:f9:ed:7f:9e:f8:9e:b8:
06:ae:43:7b:0e:83:4d:31:77:c0:c0:76:97:ac:45:
c8:59:32:6d:38:e6:fc:83:6e:58:f2:1e:f6:05:5b:
b3:73:23:55:e4:7c:d1:31:1d:df:e4:69:72:01:23:
81:ea:ea:c0:dc:a6:2e:f7:15:91:75:f8:8a:df:87:
14:b4:fe:e3:5f:c9:24:1b:eb:15:b4:69:fc:69:69:
b8:da:4d:00:55:22:31:8e:4d:c3:cf:40:f1:1e:2b:
83:82:a7:f4:31:32:f2:64:7f:44:48:e9:3f:cd:3e:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CA:EF:CB:95:B7:08:C4:F3:6D:B0:3C:B4:26:F0:BC:44:2D:F1:57
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/hMrvy5W3CMTzbbA8tCbwvEQt8Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.148.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:44:d3:1d:3e:55:cc:12:07:98:85:93:cc:b9:00:42:14:cb:
e9:86:19:bc:49:02:f4:ac:10:a5:33:11:5c:0d:b9:07:55:a1:
cf:cb:89:f3:11:f0:03:25:16:1c:dc:9b:37:f2:39:ad:8b:d8:
eb:8a:5f:af:36:31:b7:c0:bf:a6:91:d2:a2:c1:80:ba:22:99:
cd:04:1b:34:30:72:21:3b:20:64:fc:a2:c6:cf:b0:b7:01:4d:
9a:5b:74:3a:6b:ad:fd:8d:8f:ac:75:57:d7:4d:b2:e3:4d:34:
fd:f2:aa:87:85:e7:80:ac:7d:aa:cc:14:11:5a:2c:f9:af:fd:
d0:01:fc:fa:3c:0a:f3:18:3e:d9:22:db:dd:98:3b:f1:95:eb:
7e:39:b9:85:ac:8d:f1:cc:01:ab:66:47:91:07:ae:5e:86:e6:
32:40:4b:ab:4e:ee:c2:24:a9:fc:c4:c1:d4:c5:b3:c1:8f:ff:
19:50:14:6d:66:3f:ac:48:fc:8e:ff:f1:b4:b0:ef:83:fb:5f:
14:e6:46:bf:a4:74:ca:5b:cd:50:f6:2b:2d:4a:13:87:96:1e:
93:1f:59:fd:10:0a:a9:13:67:f6:14:8b:c9:c5:07:b3:fb:1a:
41:d9:33:90:98:54:69:fb:42:00:62:15:f1:fc:5b:b9:9b:a0:
43:6e:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:29 2024 by rpki-client on console-ams.rpki-client.org