Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/e4NrJSw01BlCxfvjycVWiMGAAKU.roa
File: e4NrJSw01BlCxfvjycVWiMGAAKU.roa (raw, json)
Hash identifier: ZGGW56O7MT2wBhPX33wYG/a0H38xIzkwRKCct7AWkIU=
Subject key identifier: 7B:83:6B:25:2C:34:D4:19:42:C5:FB:E3:C9:C5:56:88:C1:80:00:A5
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 018203C6B3E17D30966F05C3A1026796C15D
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/e4NrJSw01BlCxfvjycVWiMGAAKU.roa
Signing time: Fri 15 Jul 2022 21:32:09 +0000
ROA not before: Fri 15 Jul 2022 21:32:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12773
IP address blocks: 93.157.12.0/24 maxlen: 24
93.157.15.0/24 maxlen: 24
93.157.14.0/24 maxlen: 24
193.254.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:03:c6:b3:e1:7d:30:96:6f:05:c3:a1:02:67:96:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Jul 15 21:32:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b836b252c34d41942c5fbe3c9c55688c18000a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:f8:57:65:08:cd:df:13:a0:9e:63:f6:06:
37:4d:00:a7:9b:de:1e:f6:11:6a:be:3d:cc:86:6e:
ca:18:40:f9:4b:58:64:d8:82:e0:f4:72:6b:19:3d:
97:2e:7b:9a:dc:3d:2c:26:d7:26:e2:c1:4b:7b:49:
ec:62:e5:d0:86:d6:56:b3:dd:77:70:6a:5d:31:02:
ee:3b:76:6b:1b:db:ea:01:26:d3:fd:7c:48:75:1f:
51:e9:2f:00:6d:45:04:d1:71:3d:5f:3f:9b:4f:11:
56:eb:69:71:16:f0:06:8d:09:97:1d:e3:35:54:1a:
c2:b6:6a:b8:04:49:9e:f4:05:7d:b6:87:46:c4:55:
c2:ca:97:53:5d:11:b0:92:d1:97:16:34:b6:ea:8e:
25:20:c7:48:7a:ea:db:bd:44:47:81:e0:57:a1:48:
c4:d5:04:3b:19:3c:39:b3:eb:37:12:04:7e:f5:24:
dc:bb:5f:ff:a7:e4:18:d6:ce:b9:0f:13:fb:70:45:
bf:95:8c:2b:8a:54:bd:93:0a:42:51:d2:47:cb:c5:
41:5c:43:68:a4:a1:71:b5:b3:35:ec:21:b7:a3:ad:
5c:3e:f1:34:27:be:9b:7d:da:64:d9:ba:fd:35:d4:
02:7a:c9:0a:15:2d:72:52:36:a7:b9:2c:86:f7:1c:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:6B:25:2C:34:D4:19:42:C5:FB:E3:C9:C5:56:88:C1:80:00:A5
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/e4NrJSw01BlCxfvjycVWiMGAAKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.12.0/24
93.157.14.0/23
193.254.232.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:0a:07:d1:22:5a:0d:cb:a1:ad:6a:f7:3d:a5:08:9c:64:73:
cb:61:c2:79:6f:a0:26:9d:dc:1b:bf:12:bc:ab:37:a8:06:d3:
6e:ea:9a:91:99:c6:74:9d:aa:c5:f3:63:8d:f2:d3:48:09:f9:
cb:57:9b:e4:b6:5f:2d:d1:ea:0b:68:92:2c:89:7c:e2:a3:3f:
2f:94:4c:0a:7e:42:5b:36:6c:6c:e6:c5:76:7d:45:71:3a:46:
33:59:12:b3:7e:6e:33:cc:ab:60:5a:3f:43:9c:f2:cd:3a:f6:
30:cd:46:a7:ff:22:dd:d6:d5:58:e1:c6:02:54:a8:d2:83:f3:
3b:19:30:c5:83:ec:82:ff:2e:7a:1c:e0:6c:68:f5:e8:a3:0c:
53:62:12:a4:a5:17:f9:1c:46:0a:ce:71:ce:05:2e:13:65:65:
c7:f2:89:e6:92:6d:85:b4:71:df:17:e5:6b:3f:36:ad:02:fe:
65:63:c8:78:90:c3:17:1c:3e:85:20:7a:44:f3:47:5c:b4:cb:
14:a6:d9:ed:1f:17:22:88:3b:51:54:79:c6:91:a4:f6:83:78:
42:c2:4b:35:19:3b:e4:83:24:6f:b0:ed:34:35:13:06:8f:06:
20:0f:55:33:2c:c7:3d:1a:66:38:c0:95:3b:26:55:89:de:ef:
25:35:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:16 2023 by rpki-client on console-ams.rpki-client.org