Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/yftnvpK_pgSbfPzR-K9bsGa0Okg.roa
File: yftnvpK_pgSbfPzR-K9bsGa0Okg.roa (raw, json)
Hash identifier: 1F86D0d+QZ06GOVW0YN4f4BxCzInyu6fpo4O9/90GhU=
Subject key identifier: C9:FB:67:BE:92:BF:A6:04:9B:7C:FC:D1:F8:AF:5B:B0:66:B4:3A:48
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0653ED6E
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/yftnvpK_pgSbfPzR-K9bsGa0Okg.roa
Signing time: Tue 19 Apr 2022 14:02:46 +0000
ROA not before: Tue 19 Apr 2022 14:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47510
IP address blocks: 93.179.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106163566 (0x653ed6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 19 14:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9fb67be92bfa6049b7cfcd1f8af5bb066b43a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:43:24:20:f2:8f:a5:b0:b5:d9:58:f4:5f:
1e:b6:6f:89:e0:b3:e2:1f:c9:33:6e:b1:58:e6:56:
fe:08:9e:29:22:a2:5a:00:b1:f4:07:69:b1:66:26:
3e:99:d9:37:44:82:95:bf:85:94:be:0d:d1:90:55:
d2:73:f2:b9:f5:72:d5:4d:e3:aa:c1:d6:17:00:98:
df:02:98:07:92:7b:e8:b8:53:84:6c:6a:f7:0e:51:
e8:63:11:6f:30:f0:c2:13:40:1e:c1:48:7d:f7:27:
ca:1a:02:28:56:8f:01:30:42:ae:bc:55:c9:40:ef:
ff:47:15:4e:b9:7c:ef:cf:3b:cb:2d:e5:0f:d7:cd:
3e:28:bd:d9:ed:42:d2:ec:f3:64:9a:a5:8e:d8:81:
59:d9:42:09:35:09:c9:bf:15:b7:b7:94:05:1a:dc:
9e:68:f9:40:2e:eb:e8:9b:81:f3:59:a2:0c:a8:7b:
5b:ed:88:ba:e1:d8:d1:a8:67:06:cd:5c:fa:8b:1d:
ed:8d:6c:19:76:e4:7e:86:f4:33:0c:97:e8:37:ca:
fa:f7:a7:ac:ee:d4:e9:65:95:a9:68:55:4a:66:f9:
93:6d:10:8f:a3:c8:24:20:de:d4:fb:bd:63:ae:16:
97:47:a2:bd:6d:b1:26:3c:23:82:cd:73:48:15:f8:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FB:67:BE:92:BF:A6:04:9B:7C:FC:D1:F8:AF:5B:B0:66:B4:3A:48
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/yftnvpK_pgSbfPzR-K9bsGa0Okg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.120.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:02:bf:36:11:f2:cd:8c:c2:97:5f:c9:f7:90:77:76:c6:65:
25:d1:0c:de:ae:9d:a0:50:b5:16:bc:3d:0a:00:ce:79:be:63:
69:68:b4:0a:79:30:a3:a0:c4:47:6a:e3:55:c8:88:1d:8f:fa:
3d:65:8e:fd:50:63:09:22:84:eb:5b:64:3b:51:86:40:80:c5:
60:35:a1:dc:a3:8c:49:c8:16:42:46:e6:95:89:1e:2a:43:24:
2d:ae:67:a0:23:cd:6c:62:ff:d0:70:37:a8:64:98:2e:b8:55:
18:83:6e:2f:dd:cb:3f:58:53:18:94:73:62:55:0a:4f:63:64:
d5:e9:88:4b:9b:1c:4a:e0:5c:e2:dc:af:50:de:36:ef:41:0d:
2b:da:a1:5b:65:3b:1b:6b:ce:af:52:73:6b:34:2b:82:98:1c:
89:01:f7:80:eb:37:3d:6a:41:96:b9:db:8e:3b:fc:93:90:0b:
ce:79:b7:21:75:1b:75:f6:0a:7e:ed:df:86:2b:28:35:72:f5:
ce:44:0a:a4:7b:24:31:93:db:9c:59:2b:f2:c6:12:24:78:54:
a1:d7:b3:88:99:c3:52:b6:e0:ea:d8:62:0d:4a:05:9e:9a:a6:
81:0d:38:12:08:f0:32:fb:b7:bc:bc:97:7d:72:83:89:8d:bd:
fb:7a:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:23 2024 by rpki-client on console-ams.rpki-client.org