Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/F2qPBJ9IzT6PViHlrm8mBngXbFA.roa
File: F2qPBJ9IzT6PViHlrm8mBngXbFA.roa (raw, json)
Hash identifier: bgtKwufK/WZuzaV8cHT+XAKZ0XeLTN1SSpR4ayaavtU=
Subject key identifier: 17:6A:8F:04:9F:48:CD:3E:8F:56:21:E5:AE:6F:26:06:78:17:6C:50
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 34FCFFDB
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/F2qPBJ9IzT6PViHlrm8mBngXbFA.roa
Signing time: Sat 01 Jan 2022 05:57:46 +0000
ROA not before: Sat 01 Jan 2022 05:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196615
IP address blocks: 93.175.147.0/24 maxlen: 24
2001:7fb:fd03::/48 maxlen: 48
2001:7fb:fd04::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888995803 (0x34fcffdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 1 05:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=176a8f049f48cd3e8f5621e5ae6f260678176c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:f4:0c:14:bf:75:10:59:38:ff:11:c8:3a:
7c:6d:02:4c:81:4a:2e:b1:7d:d6:e6:6d:58:16:c6:
9a:12:5d:c1:63:11:3c:23:27:52:8d:fa:e1:5a:86:
19:c1:f5:3f:46:52:35:d1:3a:80:9e:f7:bf:b1:07:
5d:fe:ec:42:06:55:48:83:ce:63:e3:bf:2a:64:37:
62:68:1e:0d:42:9a:84:89:11:e7:33:87:5f:1e:06:
95:4e:d7:35:2c:8f:b2:0d:ef:17:bc:6b:52:f2:94:
24:42:f8:45:bc:90:ae:ac:ff:48:b7:6e:c0:ad:45:
48:20:3d:40:e8:ed:40:1d:26:73:6e:61:28:db:b9:
39:a7:80:b5:f8:84:76:7c:77:fc:15:79:ea:c3:cc:
54:78:27:b0:0d:5c:d2:b5:92:e5:19:bf:60:35:a7:
68:d8:a7:56:9c:4f:66:f7:23:34:9e:cd:65:79:e5:
35:0e:bd:e4:aa:bc:c7:e5:9d:5d:be:8f:fc:e7:38:
ef:ca:bf:6d:0b:58:c2:6c:44:27:47:29:b3:ec:87:
6c:ee:38:46:0a:32:2e:79:8d:81:07:42:bb:d5:00:
3a:a4:55:22:bc:bc:45:10:78:f8:75:b1:15:b7:83:
9b:e5:30:29:19:cf:5a:99:a6:61:7a:93:e7:ff:ca:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6A:8F:04:9F:48:CD:3E:8F:56:21:E5:AE:6F:26:06:78:17:6C:50
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/F2qPBJ9IzT6PViHlrm8mBngXbFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.147.0/24
IPv6:
2001:7fb:fd03::-2001:7fb:fd04:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:c5:e9:ee:2e:d5:6f:23:77:0a:13:26:d0:bd:5f:9b:fa:d1:
c9:70:35:88:b8:f2:37:c3:46:7b:e8:f1:16:f5:40:31:c1:e0:
ed:54:8c:fa:ca:14:78:a0:b7:88:db:d9:4a:79:4a:82:8f:ff:
d2:2a:d1:5f:01:a7:81:76:80:ee:0a:85:0e:23:26:41:37:52:
fd:d4:f2:ed:4e:2c:30:ee:4f:36:91:40:01:6b:b2:a0:16:90:
34:08:1e:e0:61:1a:67:20:98:cd:6d:c8:39:af:9c:da:45:c0:
1b:d4:f0:e7:ee:c3:1f:c6:8f:f0:79:81:c7:d4:c1:ba:41:45:
58:9e:c7:68:2f:0f:58:21:e6:f0:7a:fd:52:10:22:39:e4:98:
bb:98:4a:bc:df:12:02:65:0e:60:8d:d9:dc:7b:ba:a2:cc:0e:
42:9c:c3:24:e4:f8:41:e9:e9:03:06:0c:72:d2:b4:9c:57:22:
db:3b:bf:95:e0:09:1f:7a:4c:71:50:8d:92:bd:55:c1:2b:a0:
cc:4b:9b:7d:d1:20:40:d4:5b:a5:a3:5e:95:58:51:fd:5c:fb:
bc:ad:da:a6:31:4d:06:84:21:c0:ee:c6:2e:f1:fd:e9:52:de:
00:3c:f6:5c:b3:31:40:cb:22:7a:ae:ef:dc:b2:f6:c3:60:fd:
f0:91:4f:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:02 2024 by rpki-client on console-fra.rpki-client.org