Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7CH_6exNdDM-yzWQ1agH0mfjwPU.roa
File: 7CH_6exNdDM-yzWQ1agH0mfjwPU.roa (raw, json)
Hash identifier: tYyq3ndwgqpNfnhqYPrKrQjWb2NlxECBsK5f2dLeuhA=
Subject key identifier: EC:21:FF:E9:EC:4D:74:33:3E:CB:35:90:D5:A8:07:D2:67:E3:C0:F5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0182EA80D1B516005273594B8BE02E83BB8D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7CH_6exNdDM-yzWQ1agH0mfjwPU.roa
Signing time: Mon 29 Aug 2022 16:48:06 +0000
ROA not before: Mon 29 Aug 2022 16:48:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208870
IP address blocks: 93.171.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:80:d1:b5:16:00:52:73:59:4b:8b:e0:2e:83:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 29 16:48:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec21ffe9ec4d74333ecb3590d5a807d267e3c0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:b0:c8:b8:d8:09:02:de:9c:32:39:46:4c:
b7:3d:78:da:a9:b0:1d:89:53:2f:58:9e:5d:c3:36:
ae:69:d6:5d:34:d5:78:dc:77:79:ce:9d:42:98:32:
a5:00:02:1d:93:f0:6d:31:91:43:c3:d6:60:b4:ef:
be:bb:e5:6a:3a:94:cf:2f:4a:39:c0:c6:dc:c1:0a:
ae:f8:05:64:6e:dd:fc:e0:95:f2:d0:c5:21:49:2a:
88:83:ce:4f:1e:bf:57:c8:e6:92:5e:9c:22:f9:0f:
4d:cf:c9:eb:34:26:a8:81:a4:0e:35:1c:7d:5e:7f:
b0:01:59:5d:98:9e:33:98:d7:e3:ab:62:cf:a7:8a:
3f:69:7a:a6:e3:30:c9:8d:b9:d6:d7:5d:f3:72:7f:
cc:8a:fd:86:3d:10:9a:ae:de:80:18:40:5c:b7:f8:
d9:57:06:9e:c6:56:f8:5b:ae:de:05:00:a6:a6:09:
51:2b:8f:ee:af:00:5c:0d:32:4a:0d:5b:73:29:90:
1f:6a:78:d9:56:36:6f:4b:a1:68:9c:6e:51:30:44:
26:2e:9c:3d:9f:02:16:f1:2e:7e:fa:b6:f2:75:c2:
94:34:0e:b9:e9:cf:ac:d4:89:91:a8:d6:e7:29:75:
07:cb:8e:a9:67:8d:61:c9:ca:1d:82:c0:40:5a:e9:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:FF:E9:EC:4D:74:33:3E:CB:35:90:D5:A8:07:D2:67:E3:C0:F5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7CH_6exNdDM-yzWQ1agH0mfjwPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.238.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9a:3d:b5:05:de:74:c6:57:53:cc:6a:83:11:74:44:12:c7:
ab:f8:da:c9:32:5b:62:00:2a:bb:ff:84:b9:e3:fa:46:c9:d6:
37:8f:b1:21:2b:f9:35:e6:00:68:ff:6f:73:da:68:13:87:6e:
0b:05:50:80:4b:e8:89:0e:2d:a2:6c:f7:7a:99:6e:8e:f1:98:
79:c2:44:98:a0:b7:1b:5d:93:d3:db:9b:27:0f:60:10:75:26:
cc:a4:8c:fb:a5:97:9d:3b:f8:83:e1:70:80:38:69:10:f5:be:
19:34:fa:ec:f7:4d:44:09:d4:e5:67:af:8e:fe:20:7a:4f:97:
29:34:36:10:d2:96:3c:ad:96:60:69:13:3e:08:1e:8b:77:38:
f1:86:58:3f:88:21:e3:3f:87:3f:41:bd:d8:b9:56:a8:fd:5b:
e9:4b:ae:f7:32:7f:4a:b6:19:79:1f:e2:fc:c9:6f:60:03:85:
b5:68:52:37:50:e6:bb:36:b8:3d:e0:c9:1d:f6:35:41:0c:31:
6b:7e:e1:3e:74:be:33:73:2d:c2:f1:b0:de:1e:60:1f:b6:4d:
ce:71:f8:77:31:e7:c5:93:2d:c4:60:ca:e2:dd:cd:d9:cc:0c:
e2:01:c7:29:86:ae:ed:e8:cb:c0:b4:1b:6b:4a:e4:f8:11:86:
b1:aa:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org