Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/k2FG-SFqSAijfHjsv1JiYWYmni8.roa
File: k2FG-SFqSAijfHjsv1JiYWYmni8.roa (raw, json)
Hash identifier: QfItCjqbp23mQSj5RDf3ygFa1H6GwcE16t4KVQ3tNfM=
Subject key identifier: 93:61:46:F9:21:6A:48:08:A3:7C:78:EC:BF:52:62:61:66:26:9E:2F
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0183E5246CE98A794B83E04DD4DF8E95C161
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/k2FG-SFqSAijfHjsv1JiYWYmni8.roa
Signing time: Mon 17 Oct 2022 08:51:53 +0000
ROA not before: Mon 17 Oct 2022 08:51:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 93.114.187.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:24:6c:e9:8a:79:4b:83:e0:4d:d4:df:8e:95:c1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 17 08:51:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=936146f9216a4808a37c78ecbf52626166269e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:ea:7e:46:30:28:52:a3:07:17:38:2f:34:
6b:3d:7b:78:ac:06:29:84:00:8e:ed:50:77:3e:f4:
37:16:54:c9:a1:8a:c8:ee:9b:52:86:5a:a9:93:be:
76:6f:1c:22:d0:64:4b:16:73:85:ba:d2:43:4b:23:
a4:cb:9c:20:13:0a:30:be:61:25:09:53:00:93:15:
81:30:01:1f:12:34:a0:c0:b2:a9:aa:3c:0d:75:49:
fd:bd:4c:e7:20:e6:0a:a3:e8:20:37:71:e0:71:b7:
d4:a3:7a:33:9b:a2:d7:ec:6c:ea:dc:e8:81:b6:8c:
f1:d7:fd:42:3b:43:ba:7e:69:67:39:dd:e8:a1:c1:
9c:25:b1:90:79:bd:83:c3:ba:20:0e:e1:5b:98:ff:
cf:6c:b3:02:4d:2c:34:8f:c1:b2:e5:b8:53:ea:3c:
61:c5:41:30:2d:63:dc:bb:4d:b0:07:f5:21:c4:80:
76:ab:03:78:aa:fd:fc:fc:cc:10:3d:20:e9:c7:0e:
21:dd:78:4e:a3:5f:bf:cb:a6:2d:a4:ff:40:51:75:
6c:07:b4:4d:02:0b:c3:19:bb:d6:94:3f:bb:a5:2e:
65:fa:ff:93:4a:68:71:ec:cc:63:51:94:a0:b8:5e:
af:a2:77:da:6b:c1:8e:1d:22:6e:6d:1e:9e:93:c9:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:61:46:F9:21:6A:48:08:A3:7C:78:EC:BF:52:62:61:66:26:9E:2F
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/k2FG-SFqSAijfHjsv1JiYWYmni8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.209.0/24
89.45.34.0/24
93.114.187.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ba:cb:c3:84:9f:25:d4:8c:1a:05:31:79:3c:ce:09:e0:e8:
4c:47:57:6b:7a:a4:c3:02:1d:95:42:45:b9:35:3f:d1:cd:ec:
0a:7c:bc:7e:07:5f:9d:d5:f2:65:c5:77:81:bc:34:87:58:84:
b3:2f:b1:ea:ae:77:17:8b:9f:7b:30:9c:61:da:f2:79:aa:c4:
63:dd:1c:9e:f7:81:c1:93:91:b5:2c:c0:17:b7:8f:05:fa:50:
9b:a9:ea:ba:dc:b9:ae:77:00:21:c7:8c:58:84:41:93:3e:41:
69:6f:f7:33:8c:1d:08:23:68:e3:c8:4b:86:84:ed:ef:64:9d:
3b:63:fc:6a:e6:fd:47:58:aa:04:07:60:a5:0c:ea:33:47:93:
78:11:84:6f:ed:c3:35:de:19:b9:4e:22:4a:dc:d4:ce:56:a8:
6f:ec:aa:93:3a:45:e7:a7:93:70:aa:c6:27:fe:9a:59:74:24:
ad:42:93:4b:ee:3c:8a:1c:39:18:d2:9b:40:55:ac:7c:1b:f5:
9f:4b:38:21:84:b3:dd:b4:f4:65:dc:cb:04:df:bd:66:f6:3a:
9f:41:d1:48:3f:76:87:d7:55:03:86:b4:6d:ab:fd:2e:bf:17:
2a:27:70:25:ec:72:33:35:b8:0d:9f:59:93:f3:ad:7c:b5:b7:
f9:98:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org