Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/5pPXQHv50rXWQkfIX3J18u3aqvI.roa
File: 5pPXQHv50rXWQkfIX3J18u3aqvI.roa (raw, json)
Hash identifier: vlEqla3pNlXgOlch+c1/85xLjOFb+bIck4AeW3AJwec=
Subject key identifier: E6:93:D7:40:7B:F9:D2:B5:D6:42:47:C8:5F:72:75:F2:ED:DA:AA:F2
Certificate issuer: /CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Certificate serial: 164D3209
Authority key identifier: 47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/5pPXQHv50rXWQkfIX3J18u3aqvI.roa
Signing time: Sat 01 Jan 2022 00:52:52 +0000
ROA not before: Sat 01 Jan 2022 00:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47178
IP address blocks: 93.188.112.0/21 maxlen: 21
185.99.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374157833 (0x164d3209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Validity
Not Before: Jan 1 00:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e693d7407bf9d2b5d64247c85f7275f2eddaaaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:33:de:23:f4:5b:22:86:8d:1e:f3:95:9c:
1a:51:0f:58:ca:c3:f9:d2:e3:9b:9e:be:20:27:65:
89:9c:80:e1:9a:e6:9b:9c:3d:f2:a6:df:a0:97:55:
c2:77:4a:25:86:51:b6:cb:ab:f5:d9:31:67:6f:5a:
37:48:13:1e:a0:68:c4:3b:62:02:81:a2:71:6d:e1:
d1:73:c0:e5:6c:c2:5e:9c:3c:46:86:eb:d1:97:c6:
86:35:7b:14:af:70:17:0c:20:81:99:d6:35:5f:7b:
9c:7c:83:e7:16:02:33:b4:a4:1b:68:66:56:5a:04:
26:bf:06:66:08:39:1a:74:72:51:c4:50:82:4d:57:
ab:9b:85:bd:e5:a3:ff:53:e4:6a:b5:7a:74:58:1c:
70:45:ed:e8:47:d4:ea:bf:5f:26:a2:55:f7:be:93:
6a:ed:66:bd:c1:e8:4c:91:96:24:85:bc:c1:dd:89:
77:90:d7:ce:0e:00:89:f2:e9:bd:b2:f9:91:bb:ee:
e3:9d:1d:3e:58:40:44:75:44:32:90:ba:57:ce:54:
1d:27:e1:19:e1:63:ff:66:ca:ae:fd:2e:6e:42:b0:
8d:f7:78:04:7b:92:e8:e7:fe:bd:5b:3d:0a:b5:63:
f4:60:d4:42:be:71:9b:3c:50:9d:f5:c4:8e:78:2c:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:93:D7:40:7B:F9:D2:B5:D6:42:47:C8:5F:72:75:F2:ED:DA:AA:F2
X509v3 Authority Key Identifier:
keyid:47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/5pPXQHv50rXWQkfIX3J18u3aqvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.112.0/21
185.99.224.0/22
Signature Algorithm: sha256WithRSAEncryption
17:02:87:82:ab:c5:63:69:92:86:11:37:c8:1a:c4:9e:e3:dc:
51:60:23:dd:c2:2e:cd:dd:b8:66:5d:50:e7:34:0c:a3:a0:22:
ab:86:eb:3b:c7:69:1e:cd:9e:52:b6:62:10:a6:e5:cf:cd:f8:
fa:78:66:d0:33:72:da:d9:34:02:97:a6:59:9d:24:ac:b2:c2:
20:b2:2c:7d:08:68:69:ab:b8:e0:38:dd:56:95:6f:be:24:7f:
ba:86:06:8b:ba:15:16:40:cf:2d:4a:1f:7a:c2:0d:91:02:8e:
ac:56:df:d3:d5:0b:47:95:4c:11:8c:a9:dd:43:44:e6:57:c1:
1c:1f:13:23:d9:c9:9e:ad:b4:34:6c:5e:8d:ca:11:c0:fb:60:
54:0f:3f:7a:71:4f:ee:5a:f1:f8:20:4d:57:72:ac:8e:86:54:
94:67:7b:c5:17:e5:fb:12:14:4e:83:1d:c6:3d:52:6c:03:25:
e2:d4:85:41:1f:47:04:d7:c8:17:07:35:0e:d0:58:fd:3a:2c:
ec:25:73:07:52:a0:0f:0c:ae:98:fc:eb:2c:77:cc:33:91:c7:
9e:64:bf:7a:48:27:0f:4d:85:a4:62:78:fa:88:a4:9a:88:b6:
70:80:61:72:f8:13:f3:69:ff:02:54:c1:20:3d:01:b2:22:e1:
3d:8d:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:11 2024 by rpki-client on console-fra.rpki-client.org