Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/9pVBRsy2SdT8JsLhCjU_pqoEaZo.roa
File: 9pVBRsy2SdT8JsLhCjU_pqoEaZo.roa (raw, json)
Hash identifier: 2FwIA93nLbOVh++0+eyjXDsgB4ddgJvMgLoF7tS8q6w=
Subject key identifier: F6:95:41:46:CC:B6:49:D4:FC:26:C2:E1:0A:35:3F:A6:AA:04:69:9A
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01842DEE7CE346C3C075BB0420E987F75FFC
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/9pVBRsy2SdT8JsLhCjU_pqoEaZo.roa
Signing time: Mon 31 Oct 2022 12:05:15 +0000
ROA not before: Mon 31 Oct 2022 12:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25144
IP address blocks: 81.93.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:ee:7c:e3:46:c3:c0:75:bb:04:20:e9:87:f7:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Oct 31 12:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6954146ccb649d4fc26c2e10a353fa6aa04699a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:b1:1f:be:99:84:a6:73:c6:28:89:de:78:
f9:7f:03:5b:7a:c1:4f:0e:70:db:64:1e:15:39:06:
b1:ad:40:03:ae:41:d9:9d:bf:a1:bb:2a:19:17:4c:
db:d3:73:c3:c6:52:07:4b:8f:ff:9a:63:bd:c4:a8:
9d:cd:39:9f:34:5d:3d:fd:ea:5d:f5:43:29:b6:e8:
e0:a4:c6:1f:6b:6f:b2:e6:33:34:ea:be:21:b9:3a:
d8:c9:19:c2:77:65:af:84:9c:29:04:d8:af:2b:0c:
52:da:2e:13:4e:0e:71:c3:ee:dd:d6:1b:3d:ca:6e:
43:76:d0:a2:f3:fb:9a:e2:96:18:f0:0c:6b:0c:44:
94:f3:63:2c:12:24:ff:0b:18:59:89:e8:67:bf:9d:
0d:ae:d8:74:df:f6:f8:b1:2e:94:b4:0f:32:c8:07:
54:ae:05:04:5d:4f:14:a0:e7:3c:bb:a3:92:41:29:
5f:92:3d:87:cb:23:9a:ea:46:c9:a2:19:d5:d4:c4:
42:a5:e7:c2:35:e6:58:bf:20:64:07:77:6b:30:7d:
78:0b:d9:a5:0c:21:97:8b:11:b6:fd:82:5e:20:99:
a9:a4:bf:3b:0e:77:b1:88:45:00:24:25:23:ef:f8:
3e:68:52:7b:bb:2e:29:4d:03:eb:79:20:6d:54:63:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:95:41:46:CC:B6:49:D4:FC:26:C2:E1:0A:35:3F:A6:AA:04:69:9A
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/9pVBRsy2SdT8JsLhCjU_pqoEaZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:3c:b0:6f:70:cb:71:7e:f8:f1:31:ce:da:77:7a:ec:5c:47:
dd:b7:0d:82:b2:21:ae:ff:ff:4f:2f:34:93:4e:81:d5:a7:5a:
36:ef:5e:81:8d:68:3b:31:0c:81:75:7d:9d:98:fc:09:aa:53:
06:85:0c:65:c1:69:a7:09:cc:2a:f9:a5:f5:0b:06:ea:fa:74:
21:8a:a9:f1:4d:39:20:37:71:d5:e9:09:55:72:4f:56:87:e7:
dc:a5:00:5d:01:51:c6:a1:6f:24:0c:c4:d5:78:17:25:bb:6a:
25:7c:a7:e5:85:db:ba:b9:7b:33:e4:62:54:dc:48:ed:a6:2a:
37:69:e0:1f:09:bd:08:8c:33:c3:c3:76:cd:03:f3:29:89:20:
3b:c7:86:e8:13:b9:36:d0:23:58:16:29:d7:a5:10:8e:03:81:
0e:50:18:5c:04:be:f6:64:b8:64:27:d6:8a:b2:00:6b:31:aa:
78:a0:e5:d4:ef:b2:b8:f6:2f:3e:74:dd:a8:c2:87:a5:3c:18:
79:da:48:ac:36:da:ec:fe:79:31:d4:a7:74:9c:a9:50:cd:2b:
bf:01:78:99:c3:1a:b5:1a:42:f6:10:2c:bd:7d:c6:e1:2c:22:
cd:73:d8:03:4a:ef:4e:45:05:93:e9:95:1e:6b:b9:57:fc:f8:
52:dc:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:28 2024 by rpki-client on console-ams.rpki-client.org