Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/1-ia5DpuwhfR7CKNSu_uSK4q1pQc.roa
File: 1-ia5DpuwhfR7CKNSu_uSK4q1pQc.roa (raw, json)
Hash identifier: 0qRzX3q3uqLs5xj1yZL7tSzWVdx2bMs61iYD5K1BirM=
Subject key identifier: FA:26:B9:0E:9B:B0:85:F4:7B:08:A3:52:BB:FB:92:2B:8A:B5:A5:07
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 1CA434CB
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/1-ia5DpuwhfR7CKNSu_uSK4q1pQc.roa
Signing time: Sat 01 Jan 2022 11:01:31 +0000
ROA not before: Sat 01 Jan 2022 11:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213375
IP address blocks: 93.157.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480523467 (0x1ca434cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Jan 1 11:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa26b90e9bb085f47b08a352bbfb922b8ab5a507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:97:52:d9:60:1b:02:4d:66:ef:0c:64:96:
06:90:c5:34:47:65:fb:c7:71:cf:f9:fb:04:33:e1:
37:73:41:2b:c9:da:8a:16:13:aa:fc:2f:72:17:05:
67:a3:ff:e7:41:7b:cc:fd:b0:35:14:b7:c6:3e:03:
24:df:b1:33:28:bf:c6:7a:cd:4c:43:8d:71:07:09:
e3:35:50:59:67:d6:c3:b5:3b:6a:78:a6:70:b6:ff:
25:ec:e6:55:f2:5c:78:c4:c0:5d:e5:b9:a3:07:50:
cc:55:b9:03:7c:85:f5:be:79:dc:eb:4c:ee:42:b2:
6b:32:29:ca:58:df:da:a4:02:35:a0:52:e2:33:fc:
0b:fd:b5:e9:e2:28:c1:72:8e:6e:87:b2:04:0f:fb:
a6:21:fd:d6:66:82:a3:48:35:35:8d:ce:fc:93:b3:
73:43:44:75:61:68:0c:b7:5a:f4:2c:49:a1:67:a9:
e3:03:ba:65:d2:64:d0:38:18:28:b0:ae:ff:8a:5f:
35:e5:18:54:dd:af:66:7b:29:04:63:c8:13:30:61:
0f:4a:de:e6:af:d2:d9:ad:b9:a0:e9:5f:5d:ad:2e:
a0:fd:66:13:a8:0d:aa:ef:fd:58:fc:5b:7f:19:bf:
d2:29:d0:25:d8:1f:3b:71:dd:fb:20:49:1b:52:96:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:26:B9:0E:9B:B0:85:F4:7B:08:A3:52:BB:FB:92:2B:8A:B5:A5:07
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/1-ia5DpuwhfR7CKNSu_uSK4q1pQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.12.0/24
Signature Algorithm: sha256WithRSAEncryption
93:57:87:75:1c:02:4b:73:de:9c:d2:79:1b:5e:15:a0:4e:96:
4e:52:71:4c:82:7b:33:57:13:43:cd:5a:90:1d:1a:91:ed:11:
da:6a:78:6a:42:5f:16:72:29:50:4f:2e:e6:7d:57:ad:91:d9:
46:05:b4:1b:58:2a:4d:51:9d:2b:ad:d5:07:71:3b:ed:7e:79:
f6:53:41:57:e8:af:7e:ce:27:33:ee:f9:18:99:27:7a:1d:7b:
09:47:13:23:19:6d:64:7f:17:31:5d:49:24:19:be:d7:e2:16:
74:7d:f9:5d:eb:14:3e:15:43:ce:fa:6d:7e:7c:fb:3b:20:90:
99:78:1f:d8:05:07:3a:d2:1c:5e:5d:c9:ac:a0:47:32:91:27:
e2:cb:98:94:cc:9b:aa:cd:8e:59:02:4f:0b:8c:54:c5:50:0a:
b9:c2:03:23:16:f2:10:b6:9f:53:c8:2a:2c:84:1f:bc:da:e2:
05:a5:11:4c:c6:9c:b1:3f:a9:bd:87:55:d6:50:59:c1:4d:22:
ac:06:23:dc:62:b2:7a:f9:40:46:cf:17:14:0b:d6:44:c8:1d:
ff:e1:1e:32:46:42:fb:b6:1b:93:fc:3d:ea:c1:d1:43:06:99:
78:d5:10:2b:08:0c:9d:85:cd:30:42:e1:54:3e:e3:bf:fe:45:
20:68:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:19 2024 by rpki-client on console-fra.rpki-client.org