Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/e_-XXo9Uqe2FLJxIUMAEcP56530.roa
File: e_-XXo9Uqe2FLJxIUMAEcP56530.roa (raw, json)
Hash identifier: lAyzqdiPYv6cOC2DhO4zGD5gQdRvuAYLLYc3ke89Ars=
Subject key identifier: 7B:FF:97:5E:8F:54:A9:ED:85:2C:9C:48:50:C0:04:70:FE:7A:E7:7D
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01840ED5A02325AE5A3D5C7799529BC351FA
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/e_-XXo9Uqe2FLJxIUMAEcP56530.roa
Signing time: Tue 25 Oct 2022 11:09:51 +0000
ROA not before: Tue 25 Oct 2022 11:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 93.114.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:d5:a0:23:25:ae:5a:3d:5c:77:99:52:9b:c3:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 25 11:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bff975e8f54a9ed852c9c4850c00470fe7ae77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:fb:6b:72:c3:a7:ff:63:1d:68:b4:3c:48:
d7:df:49:01:b0:c8:03:39:28:6e:a8:1e:bf:70:30:
76:b1:81:c0:6f:b5:78:0f:d9:1c:c2:b7:e9:26:49:
71:58:4d:15:49:88:56:21:48:cf:f1:d6:a1:0c:2f:
55:83:c0:fe:3e:e3:1b:66:0b:eb:21:1e:5a:55:e5:
cb:b1:d2:50:dc:b9:d3:21:c8:f8:24:55:61:78:2e:
00:04:8f:43:17:84:1b:be:9d:16:8f:4e:64:80:e3:
1f:43:65:64:f7:d2:26:e5:1e:53:43:d9:4d:42:cc:
70:40:d6:0e:94:0f:39:ae:b0:e6:83:31:fd:aa:e7:
07:e8:fa:ab:89:61:77:cf:7f:84:68:46:c8:62:1b:
13:f9:81:8a:39:61:ef:01:0f:46:61:c3:28:2a:5f:
16:53:99:95:9b:94:7b:b1:89:cd:c5:fe:24:44:c3:
7e:ac:c4:35:39:aa:54:a3:54:9d:70:b0:de:94:99:
1f:7d:fb:41:92:3b:3d:7e:b5:19:cf:c2:e0:6e:5a:
c0:cd:18:48:43:4c:d7:39:41:82:14:5a:9d:d2:38:
74:b7:f4:88:05:52:10:29:f4:f1:e5:c4:b2:d7:f3:
66:e0:0f:9b:40:80:d8:e4:9e:12:ee:a2:f3:6b:8e:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FF:97:5E:8F:54:A9:ED:85:2C:9C:48:50:C0:04:70:FE:7A:E7:7D
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/e_-XXo9Uqe2FLJxIUMAEcP56530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7f:c0:cf:7a:82:a2:27:16:e3:7e:d2:ef:e1:80:e3:b2:81:
f3:97:45:33:54:81:4f:0f:da:58:a7:1c:55:ac:17:ac:60:4e:
97:40:9f:b3:7a:e8:b6:5c:4c:27:28:5c:7e:3a:6d:a3:a7:cc:
64:6f:54:4d:aa:c5:5b:8a:49:58:e8:30:35:cc:3d:e3:2c:52:
73:2f:51:61:22:a9:d7:1c:22:a0:d7:0e:b5:60:fd:02:f2:2c:
5f:9c:ea:4e:cc:55:95:dc:78:c3:70:78:42:49:25:66:8c:e6:
94:f3:9d:8a:ee:97:ac:8a:75:a5:34:7a:66:7b:56:0b:f9:8d:
9d:8a:d2:65:97:81:fd:9e:fb:ba:e6:f5:d0:ac:04:92:b7:62:
8d:5f:d3:6b:2f:2a:e8:19:71:0d:2d:2c:fc:a1:8f:3e:53:2d:
55:30:2f:95:38:b4:99:6a:4b:40:42:2c:b5:36:d2:41:14:97:
bc:da:2d:c0:e7:b7:a6:c7:20:dd:ba:d8:64:cf:10:43:a8:77:
0c:18:f3:3b:a0:4e:2f:99:62:5c:9f:69:b1:1c:83:5f:7b:aa:
44:7f:9c:d2:cd:d7:57:96:58:e0:d2:dd:b9:87:e3:60:86:d6:
09:86:3f:2c:0f:08:91:d0:6b:13:0b:8d:69:4e:bc:7e:d9:ee:
25:13:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org