Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hi6RC5qn7eV6pI06QTtmjflyk30.roa
File: Hi6RC5qn7eV6pI06QTtmjflyk30.roa (raw, json)
Hash identifier: qbnpo5/KGAOP41Oj75q2Rarino4mn+DSYO/5D8pc7CE=
Subject key identifier: 1E:2E:91:0B:9A:A7:ED:E5:7A:A4:8D:3A:41:3B:66:8D:F9:72:93:7D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28217A5A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hi6RC5qn7eV6pI06QTtmjflyk30.roa
Signing time: Sat 01 Jan 2022 16:09:40 +0000
ROA not before: Sat 01 Jan 2022 16:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201069
IP address blocks: 93.170.187.0/24 maxlen: 24
93.170.96.0/24 maxlen: 24
95.47.119.0/24 maxlen: 24
95.47.139.0/24 maxlen: 24
95.47.137.0/24 maxlen: 24
93.170.27.0/24 maxlen: 24
93.171.218.0/24 maxlen: 24
95.47.63.0/24 maxlen: 24
93.171.13.0/24 maxlen: 24
2a02:128:14::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673282650 (0x28217a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e2e910b9aa7ede57aa48d3a413b668df972937d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:eb:28:e1:9c:33:b8:cf:c0:13:05:57:aa:
fc:cd:12:b5:71:73:b1:07:36:39:85:fc:2e:9d:ce:
72:22:a2:fe:28:0b:95:54:70:85:85:2f:37:5f:1d:
ad:f7:25:f1:e9:62:13:f7:39:69:63:c3:0e:d7:16:
e1:96:1d:07:8d:48:48:2f:00:87:11:72:a3:39:9c:
66:c7:e0:00:75:5e:64:f5:46:13:22:4b:c7:0a:8b:
6d:de:1b:17:a6:4c:4b:c4:e3:70:3b:5e:98:68:b4:
f8:0d:63:d9:0c:cd:64:31:0b:a3:1d:d3:d8:22:4a:
d8:d8:55:b4:13:c0:29:0b:ea:46:fd:39:29:c5:cc:
e1:ac:cb:b5:24:ab:48:1d:8b:b3:09:0e:34:f8:d2:
53:7d:73:39:2e:09:13:7a:86:73:39:83:0e:21:e9:
34:4e:45:98:58:a9:86:3a:6f:d1:4c:f1:55:74:b4:
50:24:1c:15:9b:23:75:3d:e9:70:5f:a7:cb:7b:d1:
b8:ff:c3:14:b7:d7:31:d0:fe:60:44:27:8c:68:1d:
8f:54:de:0b:11:4a:d8:07:8e:c8:b2:df:45:fe:8f:
36:72:08:5d:95:22:c3:a7:52:16:51:b6:f9:fa:ee:
50:19:72:81:39:d6:78:1a:72:98:61:4d:a7:77:5b:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:91:0B:9A:A7:ED:E5:7A:A4:8D:3A:41:3B:66:8D:F9:72:93:7D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hi6RC5qn7eV6pI06QTtmjflyk30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.27.0/24
93.170.96.0/24
93.170.187.0/24
93.171.13.0/24
93.171.218.0/24
95.47.63.0/24
95.47.119.0/24
95.47.137.0/24
95.47.139.0/24
IPv6:
2a02:128:14::/48
Signature Algorithm: sha256WithRSAEncryption
7d:a1:91:85:7f:f9:90:fe:23:93:78:58:2e:de:a1:11:93:52:
83:94:61:ad:77:4f:b3:84:e8:eb:6b:cb:56:e8:82:bd:d0:74:
b5:68:c4:8d:8c:d2:d5:97:b9:5c:3f:f8:d2:7d:69:21:34:97:
60:8c:1a:44:99:8f:ab:4f:c3:2d:ef:21:71:40:1f:bd:26:25:
8e:06:7e:16:e7:04:e8:80:f2:cb:df:d5:91:40:66:ca:2a:3a:
90:ba:2f:ff:32:1d:fb:dc:4e:58:47:d2:a5:dd:ef:2b:2d:02:
7e:7e:58:c2:ab:57:c7:cf:1a:d4:bc:b8:d0:ad:b3:ae:05:e8:
11:4c:8f:8a:df:e0:ba:e3:b5:02:15:cc:f3:fb:e7:46:b4:24:
78:d7:22:2f:85:09:08:a7:1f:2b:be:d0:27:94:72:fa:5d:b4:
2d:97:aa:bb:8b:1e:7f:bd:0d:d3:ab:ad:a7:98:dc:d0:09:42:
21:cd:a4:2e:3c:03:f3:30:5a:a5:c1:79:7d:fa:73:47:da:79:
2f:8e:73:bf:aa:82:b3:a1:e7:8e:50:65:6b:f9:04:1a:c2:32:
cf:33:6d:12:50:e5:f1:81:85:57:1d:ad:aa:4b:37:7c:2f:72:
04:32:1f:4c:57:64:a6:72:8c:f5:39:81:7a:cc:d5:35:23:12:
f4:cc:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org