Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fs9IzwcjufykbGSbcK_X9ZN3xaM.roa
File: fs9IzwcjufykbGSbcK_X9ZN3xaM.roa (raw, json)
Hash identifier: uSa0DYp0VZoMDgaLYT78t3tPZGLEAy4OuPBG5n5kMtk=
Subject key identifier: 7E:CF:48:CF:07:23:B9:FC:A4:6C:64:9B:70:AF:D7:F5:93:77:C5:A3
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0B4CD216
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fs9IzwcjufykbGSbcK_X9ZN3xaM.roa
Signing time: Wed 16 Feb 2022 18:14:56 +0000
ROA not before: Wed 16 Feb 2022 18:14:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212249
IP address blocks: 185.85.236.0/24 maxlen: 24
93.190.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189583894 (0xb4cd216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 16 18:14:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ecf48cf0723b9fca46c649b70afd7f59377c5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:b4:d7:5f:32:50:99:fc:dc:ef:10:10:78:
05:dc:35:24:14:7c:db:11:79:46:7c:e4:94:54:7b:
ab:f1:81:2b:8c:67:01:f7:1d:ee:92:4a:04:f0:65:
bf:0e:cc:ea:77:88:b7:d4:8b:12:ca:bc:12:65:7f:
53:df:b5:75:6b:51:e4:9e:7b:8e:53:58:2a:80:24:
50:31:c1:48:17:b4:d0:2f:9b:47:ae:1e:60:c0:da:
e9:3f:89:b0:72:95:ba:e9:ce:ce:eb:66:7d:14:15:
7c:8b:dd:61:e1:7d:22:b0:be:a6:5d:1b:04:5d:ca:
6c:c2:20:e6:bb:10:be:bb:79:1d:31:e0:4e:aa:dc:
80:f0:63:42:af:0a:bb:eb:6a:e5:c4:2f:c0:06:79:
bf:c3:0e:f7:44:5c:aa:d1:14:d9:71:d1:ed:e8:57:
16:9c:33:77:b7:24:af:bb:02:5b:a1:cf:ae:11:9a:
98:98:89:aa:50:99:ee:97:7b:55:cf:19:b2:95:d1:
cf:d4:99:63:42:be:80:96:87:67:e4:6a:13:37:20:
6f:09:02:4a:85:60:04:f1:2a:6b:20:ad:6a:a3:6b:
a8:d0:aa:0b:71:71:e7:b6:92:23:b3:8e:c2:db:50:
5d:12:e1:e6:f4:c9:83:ea:99:e8:71:44:ac:6d:a8:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:48:CF:07:23:B9:FC:A4:6C:64:9B:70:AF:D7:F5:93:77:C5:A3
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fs9IzwcjufykbGSbcK_X9ZN3xaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.15.0/24
185.85.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:50:eb:48:d9:b9:39:99:c4:d9:57:13:97:46:e2:69:3a:bf:
22:43:20:a4:08:27:7b:40:29:04:59:3e:98:f1:e3:a0:81:7a:
f6:ee:5e:19:6c:58:99:cf:e8:c6:c2:d0:44:68:98:98:86:60:
64:a7:65:00:de:f4:10:55:80:b9:f6:de:ad:8d:a9:3d:0a:87:
24:20:34:fc:f1:99:97:62:32:aa:25:e9:c5:52:4f:af:19:bd:
b9:ff:e7:2c:db:cc:22:03:cb:00:d4:41:a8:96:55:33:4a:cc:
18:ae:84:54:13:ea:3d:e2:f8:99:b1:98:f8:31:38:fa:f3:fb:
0b:85:81:82:6c:a9:03:5a:75:b8:86:a8:40:95:6b:26:95:b8:
ff:43:88:9a:9e:76:f5:7f:86:dc:ad:ac:11:63:c2:ef:53:da:
d1:86:45:d2:7d:1f:95:a3:7a:7e:78:e1:47:0a:fb:c7:56:82:
6f:fb:68:3e:a9:84:ba:e3:52:d3:58:2e:d2:19:6d:cc:88:05:
f1:43:ef:11:4d:6f:b9:c6:f6:a7:ed:ce:3e:88:18:d2:ba:40:
ea:6b:8e:ad:87:80:33:0a:22:7b:d8:b6:7b:3d:14:b0:0e:82:
38:c9:74:f8:95:07:09:34:32:f5:d5:ac:fb:33:b1:3a:57:2b:
8c:f7:3f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org