Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/4ebVa3UsAsfqclaERKvzGr0nOT4.roa
File: 4ebVa3UsAsfqclaERKvzGr0nOT4.roa (raw, json)
Hash identifier: SHJv0sLhYuDsdi4m7diS16Zl0zSr/cmI369wcFyydNo=
Subject key identifier: E1:E6:D5:6B:75:2C:02:C7:EA:72:56:84:44:AB:F3:1A:BD:27:39:3E
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 053369C6
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/4ebVa3UsAsfqclaERKvzGr0nOT4.roa
Signing time: Sat 01 Jan 2022 05:05:59 +0000
ROA not before: Sat 01 Jan 2022 05:05:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200700
IP address blocks: 185.93.31.0/24 maxlen: 24
185.93.28.0/24 maxlen: 24
185.93.28.0/23 maxlen: 24
185.93.28.0/22 maxlen: 24
185.93.29.0/24 maxlen: 24
185.93.30.0/24 maxlen: 24
185.93.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87255494 (0x53369c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Jan 1 05:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1e6d56b752c02c7ea72568444abf31abd27393e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:6c:73:5e:c8:d9:16:3a:69:41:ed:a9:7c:
b5:dd:a6:20:f6:a1:bf:39:8e:20:e0:17:d3:f1:fb:
c8:0a:c3:b8:c0:69:18:c5:cd:a9:64:d3:d6:27:2b:
46:f6:fd:15:1e:8b:40:ec:f4:bf:d9:c2:6b:e2:13:
92:ba:62:26:06:7b:36:92:5c:64:fb:b0:58:86:67:
b7:5f:cc:36:81:f9:85:e5:68:d2:83:5e:9c:66:2f:
39:07:29:4b:13:56:98:f4:3e:fa:9e:d0:6b:b2:b3:
fc:d2:1c:24:d7:7b:c8:dd:4c:06:60:c0:2b:f5:29:
12:f9:d5:1d:96:78:d8:8f:11:6f:e6:9a:6f:76:24:
41:65:82:48:cf:11:93:cf:05:9e:db:a5:03:5a:9b:
3f:48:0b:af:fc:d7:05:9a:af:ea:a4:79:44:45:94:
57:a0:0f:69:ef:fd:e8:69:1c:94:b1:2e:c7:ba:12:
91:41:43:58:6d:62:17:cf:e8:d2:0b:db:35:96:4b:
d6:7a:87:6f:55:2c:5a:ab:ef:d4:31:26:27:d8:82:
e2:da:a8:5c:95:f7:7c:34:c1:49:bf:c9:b7:5b:a6:
4c:43:df:90:b1:c9:1e:d7:5d:69:0b:75:d8:35:c0:
2d:cb:38:4d:df:8c:06:67:8c:4f:ad:a1:2e:cd:7b:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:D5:6B:75:2C:02:C7:EA:72:56:84:44:AB:F3:1A:BD:27:39:3E
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/4ebVa3UsAsfqclaERKvzGr0nOT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.28.0/22
Signature Algorithm: sha256WithRSAEncryption
20:82:9a:e8:53:5e:85:b6:bf:ba:db:45:94:94:33:22:6b:f7:
95:b4:d3:05:ee:70:c4:c3:f6:61:1b:3a:1e:ee:94:c1:ee:97:
22:49:78:e8:40:c9:f0:38:0b:c4:8c:83:eb:a0:7a:af:36:eb:
69:5f:be:a1:f8:22:53:27:04:84:34:10:7f:50:37:c7:c3:d0:
ee:b6:8f:e7:1f:5b:3a:af:2d:fd:b8:dd:46:e8:cd:20:ee:30:
55:5b:db:37:05:af:a0:c5:aa:ed:85:0c:18:3a:07:29:6b:9a:
b3:6a:80:ef:f0:3e:9f:54:fb:9e:20:d4:95:a0:dd:a6:fb:3f:
c6:3b:e4:ef:38:0f:6b:96:9a:95:6a:07:41:d6:d1:cd:8a:45:
3f:27:d9:20:fe:c3:17:a8:dd:36:61:b1:77:63:c1:6c:58:45:
4a:62:61:3e:43:7f:8c:1e:3b:4f:d2:5f:e4:ce:bb:67:33:f8:
af:b1:a5:90:7e:ce:db:49:f1:11:2e:ea:9e:b9:ea:75:84:ff:
2c:ab:f9:06:22:43:79:ea:ea:11:31:45:e7:ee:e2:83:13:03:
49:7e:43:74:58:f5:75:3b:d2:6c:f2:73:c9:9e:5f:a7:1b:1d:
08:d3:ac:3f:45:2e:37:83:33:97:de:25:11:5e:db:16:95:bd:
05:76:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org