Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EpmeG1Lq_JPnAHpfFEH73qONwGo.roa
File: EpmeG1Lq_JPnAHpfFEH73qONwGo.roa (raw, json)
Hash identifier: /2yTOYiaSEsjaVaZa71pAWmNDcEybvIuBU3mPJ+xhbo=
Subject key identifier: 12:99:9E:1B:52:EA:FC:93:E7:00:7A:5F:14:41:FB:DE:A3:8D:C0:6A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2820A0E4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EpmeG1Lq_JPnAHpfFEH73qONwGo.roa
Signing time: Sat 01 Jan 2022 16:09:39 +0000
ROA not before: Sat 01 Jan 2022 16:09:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201041
IP address blocks: 93.171.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673226980 (0x2820a0e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12999e1b52eafc93e7007a5f1441fbdea38dc06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:05:f1:93:1d:68:72:98:8e:f2:05:48:fb:
cf:50:f0:6f:ed:43:30:f1:ac:84:a8:17:0b:d5:24:
e8:07:b4:fc:78:19:40:04:79:69:12:80:39:2c:7e:
b2:ae:78:aa:8f:7f:4b:6e:2c:e5:d6:7c:78:55:b9:
43:d3:c1:64:a7:bd:4d:e8:c6:40:f5:5b:3a:bb:24:
d4:83:be:ad:3f:72:b9:c6:9b:19:3a:db:49:f7:16:
1b:2b:d2:bd:4a:01:79:e4:37:4a:59:fb:25:ee:99:
e3:16:b0:ef:de:de:40:7b:b7:2e:cf:37:ca:53:9f:
48:49:e0:91:4a:74:66:3d:78:72:49:be:0d:f8:05:
25:43:26:4d:54:04:ec:37:8c:b7:27:f8:a9:01:76:
da:4f:36:6c:00:59:a8:0e:e7:bc:aa:b3:8d:99:64:
6d:d6:a1:c7:01:80:79:f5:17:b8:35:28:ec:dc:81:
f0:d8:59:4b:6f:17:54:95:da:b4:a6:d7:b2:4f:a6:
f6:24:2e:31:ab:cd:2d:1f:1f:c9:51:a8:22:c3:87:
b7:bd:ce:e1:bb:25:e1:a1:d5:51:c8:2c:f0:ca:17:
18:71:07:75:67:4d:5e:f4:2b:ad:49:4b:50:75:16:
e5:0e:88:12:0c:fa:a9:33:51:33:e8:6d:bd:3b:7a:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:9E:1B:52:EA:FC:93:E7:00:7A:5F:14:41:FB:DE:A3:8D:C0:6A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EpmeG1Lq_JPnAHpfFEH73qONwGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.163.0/24
Signature Algorithm: sha256WithRSAEncryption
47:da:22:ba:e2:4b:69:46:6c:d5:69:1e:89:2f:15:b9:3f:33:
bf:02:61:f5:96:2f:b0:67:19:03:fc:29:02:72:00:5d:e6:5f:
e5:21:08:0c:88:ae:ba:a3:67:fa:da:2e:53:8e:21:b4:e2:df:
12:8b:bd:b8:8e:f2:cd:00:f8:cd:35:12:52:dc:56:1e:18:74:
79:b4:58:29:99:cc:a1:d0:3e:b8:4f:86:ab:29:ab:0e:31:f5:
e5:76:a2:c5:99:20:e4:3f:ec:5d:e4:4b:53:f9:dd:f3:ab:17:
fa:8d:49:9d:2c:c7:10:bd:b4:ca:88:99:16:46:cd:a4:06:6f:
19:a3:55:44:05:6f:0d:30:73:96:d7:bd:e4:b1:6c:08:5e:11:
b3:50:94:59:67:f7:2d:75:bc:69:5b:8c:9e:b4:f5:54:c4:22:
aa:e0:1f:cc:63:83:f0:1b:f7:f3:f8:4c:48:bf:60:2d:4b:d4:
18:73:5a:80:fb:18:eb:14:c9:00:9f:44:df:63:2b:7e:41:d3:
fa:5e:ba:e2:56:0e:5f:87:e8:b2:52:dd:b6:f4:9c:ba:9b:f7:
d2:41:86:0d:19:62:4b:e5:5c:3c:e7:e8:8b:13:89:ad:39:55:
4c:96:85:c4:16:af:01:7c:32:39:db:b2:c4:f3:20:0d:f5:ea:
8e:89:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org