Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/vXhoRpJKE4MzZdV5XJo6lrFZEcE.roa
File: vXhoRpJKE4MzZdV5XJo6lrFZEcE.roa (raw, json)
Hash identifier: WyoXLim09XYwUmIpnfzSreGxqIoReekKnEz+UG9+Ueo=
Subject key identifier: BD:78:68:46:92:4A:13:83:33:65:D5:79:5C:9A:3A:96:B1:59:11:C1
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 1CA17B8D
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/vXhoRpJKE4MzZdV5XJo6lrFZEcE.roa
Signing time: Sat 01 Jan 2022 11:01:30 +0000
ROA not before: Sat 01 Jan 2022 11:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12773
IP address blocks: 93.157.14.0/24 maxlen: 24
193.254.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480344973 (0x1ca17b8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Jan 1 11:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd786846924a13833365d5795c9a3a96b15911c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:f3:d9:3f:44:47:b9:f1:2e:0e:5e:8a:fe:
a5:03:69:f5:65:85:89:40:bd:cc:dc:6e:2c:fa:e9:
6a:4d:60:ba:f5:bc:56:c0:f0:31:18:03:c1:d4:76:
af:a9:79:a1:7c:f2:02:7d:73:78:61:b3:1d:a2:b9:
f1:92:ad:cd:bf:de:d1:ff:f4:8f:db:75:26:7a:1c:
27:6b:d3:96:08:04:47:a9:86:12:d7:7e:d2:92:4d:
2b:af:c5:70:d1:7b:fa:e6:2b:9b:34:31:9c:40:fd:
c4:f0:a1:c1:ef:a8:a5:2c:03:11:61:b7:3a:ee:52:
80:e1:17:45:9f:b9:52:02:7e:be:a7:0a:a9:61:6c:
b1:91:36:74:5e:62:c7:e6:e7:0a:16:b3:71:6a:36:
bb:58:09:b3:8c:10:44:42:bc:c4:dc:6e:e7:2a:d2:
13:0b:5b:4d:40:80:d2:ba:6f:f1:2c:2a:9e:53:25:
99:5e:08:a3:e1:e6:1d:8d:6a:ad:05:e0:7c:40:5a:
74:bd:95:29:c1:36:21:4e:69:7b:fc:0d:87:7e:f5:
a8:36:aa:f5:75:b5:8a:fe:58:5a:8f:8d:61:ca:d2:
24:94:3a:79:15:74:d8:33:45:44:31:c1:8a:27:02:
2e:d4:ac:69:99:63:f1:93:25:b8:f9:4d:67:f4:1b:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:68:46:92:4A:13:83:33:65:D5:79:5C:9A:3A:96:B1:59:11:C1
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/vXhoRpJKE4MzZdV5XJo6lrFZEcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.14.0/24
193.254.232.0/23
Signature Algorithm: sha256WithRSAEncryption
04:8c:93:54:73:8b:df:f8:0c:db:6b:bd:40:cf:eb:b8:cf:fb:
b9:85:ad:2e:20:09:30:be:e7:af:50:eb:97:1d:d1:7d:5e:63:
a2:76:99:c3:21:3a:46:59:fb:4d:c2:7e:22:9a:f9:b7:98:0e:
4d:e1:b0:54:5d:bc:bb:23:ad:97:ea:39:e3:10:83:17:42:4e:
cb:c3:05:d7:9c:cb:f4:1e:69:b9:a6:db:1d:91:61:c0:d5:8c:
4d:af:ca:1a:48:98:8d:bc:29:38:13:f6:81:55:29:d9:c1:f0:
75:bd:4c:7c:36:72:c1:89:b8:2c:55:91:f3:a0:82:92:9b:41:
aa:cd:4e:ef:d4:8b:bc:5f:98:75:5e:41:ad:39:52:80:66:c0:
65:44:3c:be:d0:1f:8b:ac:9f:3b:33:2d:46:f0:6c:be:4a:3f:
a4:e0:fb:83:32:90:b9:6d:b6:40:85:5e:3f:11:8a:dd:c3:19:
50:05:94:2f:d0:d2:5e:d0:ed:35:52:a6:9b:4c:0f:25:e3:c7:
c0:a0:55:74:61:d8:46:d2:65:b5:6d:5e:e9:9a:c5:be:eb:12:
8d:e5:15:08:48:ab:b1:d4:e2:80:b6:4d:b2:4e:b1:e4:1d:b0:
7b:de:7e:97:6d:62:da:45:ae:15:ff:d6:3f:84:58:1e:e6:24:
e9:3e:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:19 2024 by rpki-client on console-fra.rpki-client.org