Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/2Q9bB0w40QMSmsvqKSq9D7cobRc.roa
File: 2Q9bB0w40QMSmsvqKSq9D7cobRc.roa (raw, json)
Hash identifier: FA8f6v+uoOvT6ihvpTZeeFhQMVSNRWi2K//IkTt2vzk=
Subject key identifier: D9:0F:5B:07:4C:38:D1:03:12:9A:CB:EA:29:2A:BD:0F:B7:28:6D:17
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 111DE02B
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/2Q9bB0w40QMSmsvqKSq9D7cobRc.roa
Signing time: Sat 01 Jan 2022 12:54:27 +0000
ROA not before: Sat 01 Jan 2022 12:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53856
IP address blocks: 93.157.24.0/22 maxlen: 22
93.157.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287170603 (0x111de02b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Jan 1 12:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d90f5b074c38d103129acbea292abd0fb7286d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:7d:9e:64:80:29:62:40:3b:ff:ce:74:73:
3b:cb:de:c6:2b:6a:f4:17:ef:00:5b:ac:84:78:2d:
c3:dc:db:9f:f2:b8:0b:b6:9b:b6:2f:12:44:c5:a4:
23:60:d1:7c:db:73:f6:14:e9:fc:33:83:ae:50:4a:
2a:ae:47:dc:1c:7c:23:0a:ed:a5:23:92:e7:c1:39:
e8:e2:a0:ce:a0:78:38:97:32:aa:35:1a:68:52:93:
21:8d:bc:62:a9:b2:1d:15:d0:80:7e:03:11:d0:d1:
e1:85:11:92:33:98:67:55:3e:9c:7a:51:83:40:f1:
d3:a9:a2:9c:9d:9f:54:32:f3:31:c0:ad:d0:e1:8c:
c8:be:71:59:bb:35:ce:a3:92:96:64:c1:0b:42:32:
79:fa:fd:bf:74:f3:51:08:86:b6:ee:ad:87:70:db:
6b:7d:ea:53:25:db:71:e9:b3:db:b1:34:24:77:89:
e4:5c:20:82:2c:87:ca:66:99:06:5b:d0:bc:34:0e:
fb:61:8a:4f:8a:38:f5:5b:ab:f7:6b:08:51:16:fc:
88:25:ff:12:eb:22:d6:a0:1b:18:c4:03:36:e7:fc:
a0:74:fc:06:53:4b:9d:a4:a4:72:e0:b9:7d:00:29:
52:56:b3:e2:cc:27:33:13:30:e5:60:e2:61:d4:c2:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:5B:07:4C:38:D1:03:12:9A:CB:EA:29:2A:BD:0F:B7:28:6D:17
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/2Q9bB0w40QMSmsvqKSq9D7cobRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.24.0/21
Signature Algorithm: sha256WithRSAEncryption
17:d3:13:95:3c:7a:e2:c2:78:55:0e:0a:83:e3:81:b5:ff:c6:
d7:c5:4e:12:b5:72:25:31:c3:2b:d5:62:c8:d5:1c:31:96:94:
9f:76:71:72:1d:6b:8e:ef:b8:8f:89:37:b7:68:ad:18:50:ad:
4b:4a:23:30:83:42:d2:6e:cf:5e:5d:0e:19:f1:ef:dd:34:00:
1c:96:15:72:53:02:00:45:f4:b4:96:27:1d:9d:a2:f0:d3:14:
3f:46:d7:34:cc:d4:f9:bf:8a:47:91:18:a4:38:80:25:fb:13:
5b:a2:d9:a6:10:04:3a:61:59:6b:c6:87:5b:2e:85:2a:19:5a:
81:3d:fe:56:1f:da:ec:f1:53:2c:70:49:49:b4:a5:39:03:c0:
82:9b:9c:b7:d0:c7:e7:b4:b4:87:ed:53:91:44:dd:87:d4:f2:
b2:da:c0:cb:31:39:28:93:2d:0b:16:c3:65:88:eb:2b:52:8d:
9d:4d:5d:38:f9:46:3a:1e:80:b5:8f:00:b1:ba:d9:1e:1e:d4:
0c:9c:3a:2b:37:c2:24:34:4d:d9:dc:aa:98:42:aa:2b:62:46:
7c:89:8b:96:d4:5a:09:63:dc:30:25:e6:c4:b9:81:c9:7e:68:
ec:f8:43:e1:ce:4a:b4:97:ce:65:48:d9:82:67:42:15:02:22:
bc:b4:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:54 2024 by rpki-client on console-fra.rpki-client.org