Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FYZB2CQ8KSmVW8LBodgVxV9uz2M.roa
File: FYZB2CQ8KSmVW8LBodgVxV9uz2M.roa (raw, json)
Hash identifier: DUeCRsj7qAJLwpFUEfdAwzyVbqsskO8+2B5oO175ZLY=
Subject key identifier: 15:86:41:D8:24:3C:29:29:95:5B:C2:C1:A1:D8:15:C5:5F:6E:CF:63
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 286664FC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FYZB2CQ8KSmVW8LBodgVxV9uz2M.roa
Signing time: Sat 01 Jan 2022 16:10:25 +0000
ROA not before: Sat 01 Jan 2022 16:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262254
IP address blocks: 93.171.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677799164 (0x286664fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=158641d8243c2929955bc2c1a1d815c55f6ecf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:d9:03:dd:b7:20:41:c9:72:e1:f0:a6:1c:
be:e8:1a:f8:85:30:0c:8a:24:05:0e:67:45:6c:84:
b9:8d:03:87:37:8c:bd:5d:3e:ea:18:39:21:0d:4c:
b9:61:df:c8:a5:18:c9:99:1c:38:b1:ad:1e:17:af:
b7:e3:70:e0:80:17:7a:99:ba:5d:b2:32:bf:36:76:
de:d2:6e:da:e7:31:cf:24:47:72:ff:22:24:f2:17:
70:9f:1d:61:d2:f8:67:15:da:80:bd:d8:23:01:ed:
d0:f0:ee:b7:88:0c:c7:8f:89:ac:9b:16:60:7d:71:
34:64:50:f4:47:d0:c5:b7:7c:b5:50:ec:65:d7:22:
ea:9b:2f:a2:75:93:e0:b9:c5:73:3c:0b:be:a9:35:
6e:c6:db:b0:d3:68:af:2e:16:ad:8a:76:28:9b:f3:
0f:70:86:fc:bb:ca:31:8b:de:ff:55:32:69:4d:43:
24:4c:b1:55:ab:82:4b:93:34:51:8f:9e:d2:f2:bb:
46:39:74:5d:68:46:82:02:63:5e:e2:80:e4:a6:2f:
e3:94:81:0b:bd:e5:a6:82:3a:c0:79:21:fb:c2:17:
1d:fe:ad:6f:6f:59:e4:cd:68:81:12:f7:12:bd:24:
10:14:98:0c:67:cc:25:98:b4:51:08:a3:ca:59:de:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:41:D8:24:3C:29:29:95:5B:C2:C1:A1:D8:15:C5:5F:6E:CF:63
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FYZB2CQ8KSmVW8LBodgVxV9uz2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.200.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ab:2f:d5:f5:4e:78:3c:04:21:b3:3b:c1:94:18:39:93:73:
00:6f:00:80:5d:3a:a1:00:ae:35:fc:7f:1c:b6:1b:e3:fb:db:
86:a0:a3:02:4a:93:55:1f:47:56:08:24:2f:5e:a5:dc:11:6c:
26:2f:1e:49:74:5a:dc:52:4b:97:02:7d:c3:bb:99:e3:c3:cc:
76:e0:d7:2b:ef:7e:1c:c7:12:4e:9a:9a:47:54:ec:97:dd:69:
a3:25:d9:88:81:c3:23:2b:9c:00:3e:1a:a2:5f:de:8b:d3:8d:
f1:eb:e8:a3:96:9d:d9:c4:8d:6e:c2:9a:c6:e1:06:ce:c6:79:
66:f9:44:96:d3:be:ef:b3:18:79:0d:17:33:ce:05:fb:22:05:
5b:91:be:de:81:7a:ef:c3:d2:92:82:75:04:d9:90:bb:94:4b:
3d:1e:f7:da:39:31:9e:93:75:ca:aa:2e:7a:5a:00:02:0f:92:
dd:59:70:10:99:a2:bc:fc:aa:df:0c:b0:d1:51:70:15:c2:15:
f1:77:33:81:cb:b0:0f:82:b5:cd:2e:70:b8:dc:f1:6e:bb:c0:
2c:0a:ce:5a:2d:1d:36:57:59:e3:b1:0f:00:5e:d7:d2:8f:53:
8a:0d:c5:66:3b:7f:8a:86:c8:84:d5:ac:68:62:4b:03:07:61:
fb:4d:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org