Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XLvIdXB5y1b0pwI8zapSEVcibfc.roa
File: XLvIdXB5y1b0pwI8zapSEVcibfc.roa (raw, json)
Hash identifier: p7PTRMVEnafYSDJn+w9TrHUrycdjOYQZ9SMwdV7NNL8=
Subject key identifier: 5C:BB:C8:75:70:79:CB:56:F4:A7:02:3C:CD:AA:52:11:57:22:6D:F7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 283D6EF3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XLvIdXB5y1b0pwI8zapSEVcibfc.roa
Signing time: Sat 01 Jan 2022 16:09:55 +0000
ROA not before: Sat 01 Jan 2022 16:09:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207340
IP address blocks: 93.171.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675114739 (0x283d6ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cbbc8757079cb56f4a7023ccdaa521157226df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:14:da:7e:40:ee:c8:91:49:59:dd:a8:75:
91:76:02:da:f9:20:52:fe:9b:a9:07:b4:4f:79:a6:
1e:c9:66:98:ca:13:a2:8c:8a:8d:8c:84:6f:24:ff:
c8:3c:90:25:59:9d:22:55:fb:dd:27:28:c2:77:e2:
14:21:35:22:97:ce:74:c7:19:02:10:47:3a:ca:fd:
11:45:e0:1b:39:9a:fa:37:93:e1:7f:d1:df:4e:e6:
2f:af:8d:2d:9a:03:05:8b:ef:ba:c8:73:81:6c:e5:
48:0e:7e:82:39:0d:c4:ee:1c:1e:74:f8:15:5e:fb:
5a:48:b4:5e:28:d7:78:42:53:33:fb:fa:1b:5e:28:
63:20:54:36:fa:bc:34:54:df:21:14:72:f5:9a:1e:
34:33:36:ba:44:c8:9a:68:3c:df:95:b9:bd:7a:12:
bb:fc:fc:b2:20:1a:c8:03:7d:87:3e:0e:22:0f:54:
79:ad:be:c3:e4:ca:52:2c:05:2b:da:94:c6:5b:37:
8a:d2:e5:49:31:6f:59:5e:40:e7:2b:ac:d8:6a:82:
b7:1b:10:bb:1c:b3:af:8f:a4:a1:b3:cd:6c:24:70:
c4:10:6d:e2:f1:f0:27:fd:34:3e:8e:f4:b8:ad:35:
fa:9e:f1:84:a1:8c:20:33:54:70:29:6a:2b:d6:49:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BB:C8:75:70:79:CB:56:F4:A7:02:3C:CD:AA:52:11:57:22:6D:F7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XLvIdXB5y1b0pwI8zapSEVcibfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:28:86:da:27:da:e0:2a:ae:e9:da:d9:90:13:cf:63:75:f7:
c0:bf:46:0f:36:87:7b:e8:2c:d0:42:6b:0d:a2:13:2a:1e:c2:
0e:3e:9f:ec:e8:68:bc:95:07:23:49:e5:89:9d:d0:cc:0d:fb:
9a:6a:dc:5a:41:ba:e1:db:3d:0b:57:cb:38:af:15:41:43:a0:
c6:7c:33:e3:c3:e5:8f:f9:af:6a:43:95:92:36:fb:b8:ea:ef:
1d:0c:45:61:62:ed:68:24:8d:90:0f:ab:b7:8d:ba:c0:b7:d8:
c8:75:95:4d:49:3d:5d:b6:f2:b3:cc:e9:eb:37:ca:a1:d8:0e:
52:0a:38:30:4b:1c:2a:74:5d:d9:35:18:0e:20:b3:fb:f6:cb:
a4:e9:22:de:6f:d3:36:ec:4f:47:f9:e2:ca:37:91:03:de:6b:
8f:c5:5c:00:63:8c:b6:32:d2:c8:8e:2a:49:23:15:57:98:d1:
95:f9:40:f7:aa:91:40:67:ac:80:68:50:40:0f:01:4f:29:71:
3a:e9:7c:78:10:3e:3c:4d:a8:d4:e0:47:81:d4:84:2d:a8:6d:
f3:b0:b4:a2:25:c4:57:fc:e0:9a:6d:78:b6:da:ba:f1:6d:2f:
a4:99:10:36:ea:51:59:af:6a:fe:02:38:a5:a0:f0:6a:a8:1a:
85:d0:0d:3f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKD1u8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDk1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWNiYmM4NzU3MDc5
Y2I1NmY0YTcwMjNjY2RhYTUyMTE1NzIyNmRmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJU+FNp+QO7IkUlZ3ah1kXYC2vkgUv6bqQe0T3mmHslmmMoT
ooyKjYyEbyT/yDyQJVmdIlX73ScownfiFCE1IpfOdMcZAhBHOsr9EUXgGzma+jeT
4X/R307mL6+NLZoDBYvvushzgWzlSA5+gjkNxO4cHnT4FV77Wki0XijXeEJTM/v6
G14oYyBUNvq8NFTfIRRy9ZoeNDM2ukTImmg835W5vXoSu/z8siAayAN9hz4OIg9U
ea2+w+TKUiwFK9qUxls3itLlSTFvWV5A5yus2GqCtxsQuxyzr4+kobPNbCRwxBBt
4vHwJ/00Po70uK01+p7xhKGMIDNUcClqK9ZJUOcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRcu8h1cHnLVvSnAjzNqlIRVyJt9zAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1hMdklkWEI1eTFiMHB3STh6YXBTRVZjaWJmYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV2rAjANBgkqhkiG9w0BAQsFAAOC
AQEAXSiG2ifa4Cqu6drZkBPPY3X3wL9GDzaHe+gs0EJrDaITKh7CDj6f7OhovJUH
I0nliZ3QzA37mmrcWkG64ds9C1fLOK8VQUOgxnwz48Plj/mvakOVkjb7uOrvHQxF
YWLtaCSNkA+rt426wLfYyHWVTUk9Xbbys8zp6zfKodgOUgo4MEscKnRd2TUYDiCz
+/bLpOki3m/TNuxPR/niyjeRA95rj8VcAGOMtjLSyI4qSSMVV5jRlflA96qRQGes
gGhQQA8BTylxOul8eBA+PE2o1OBHgdSELaht87C0oiXEV/zgmm14ttq68W0vpJkQ
NupRWa9q/gI4paDwaqgahdANPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org