Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4L6rmNK3v79R8EzdgM0TgiYse9g.roa
File: 4L6rmNK3v79R8EzdgM0TgiYse9g.roa (raw, json)
Hash identifier: KFjglwOlJgeFNzy0x9FGdu71zK9fSv5VpWNGEhwTOzQ=
Subject key identifier: E0:BE:AB:98:D2:B7:BF:BF:51:F0:4C:DD:80:CD:13:82:26:2C:7B:D8
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 42DC9DD3
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4L6rmNK3v79R8EzdgM0TgiYse9g.roa
Signing time: Wed 04 May 2022 07:20:48 +0000
ROA not before: Wed 04 May 2022 07:20:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39383
IP address blocks: 93.114.82.0/24 maxlen: 24
188.212.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121754579 (0x42dc9dd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 4 07:20:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0beab98d2b7bfbf51f04cdd80cd1382262c7bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:77:d2:e7:c6:00:0a:23:bf:14:51:96:97:
a4:09:ab:30:51:9e:6c:b0:f0:e0:5a:ba:54:15:13:
b3:4d:fb:cc:87:e1:11:99:8f:9e:08:a8:05:40:6a:
71:09:ee:ff:19:ab:b7:26:45:d2:09:8a:2c:c0:91:
df:97:b1:9d:ad:5f:dc:02:24:c0:9f:99:97:cc:1a:
80:07:88:95:71:c1:e5:6f:6b:cf:1b:63:c4:2f:f1:
7c:fa:3b:67:e7:d5:38:9f:3a:34:28:4f:39:91:2d:
82:d9:4c:36:7b:79:2f:9b:c1:7c:2d:0f:78:8c:e2:
00:35:87:9e:93:07:1d:48:89:4e:09:0b:6e:a0:f5:
1d:e2:b6:80:8b:86:fa:6e:86:42:94:ac:65:7f:7e:
5c:cb:6a:bd:46:df:fd:07:d7:d5:d6:af:2e:d4:43:
eb:1b:de:7d:72:49:6c:40:55:15:c3:ca:40:94:ca:
f9:58:b6:7e:7e:3c:a8:e9:0c:64:6b:a9:2b:7c:73:
ac:55:5d:bb:77:81:37:c2:ea:69:11:cf:df:79:d1:
26:41:ab:df:fc:93:79:be:a4:43:ad:8b:ab:7c:0a:
91:9e:f5:4d:37:86:0e:56:61:76:6f:31:a6:2e:d8:
e0:ed:aa:38:49:a9:b5:01:68:42:bc:c0:af:cf:74:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:AB:98:D2:B7:BF:BF:51:F0:4C:DD:80:CD:13:82:26:2C:7B:D8
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4L6rmNK3v79R8EzdgM0TgiYse9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.82.0/24
188.212.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:cf:29:d0:a9:7a:8d:94:38:5e:f3:1d:66:37:dc:27:2b:7e:
e0:27:9a:9c:1e:38:c3:dd:06:eb:f8:d2:97:6c:03:7f:5c:7a:
6b:8a:db:a1:cf:fa:fe:bd:b3:44:d5:06:85:23:7c:52:94:2d:
1e:f1:48:ef:03:b0:c1:b1:8c:d3:14:27:f0:e5:23:a1:83:3e:
1a:90:99:fe:e6:b7:02:b3:ea:f7:0b:ef:4a:5c:5f:58:ca:6e:
27:e5:3d:bb:b4:0e:d1:8f:a8:a8:9b:08:d2:47:e1:85:a5:bf:
9a:bd:32:d1:9b:3e:b0:64:c1:83:65:9b:4d:35:af:5b:c3:29:
be:18:ba:64:14:d9:81:6e:10:0b:a8:34:b3:cc:34:03:19:67:
34:68:5e:9c:04:3e:c4:26:91:60:f9:a9:44:13:95:d4:ce:66:
c5:ce:80:af:71:a6:0f:eb:24:d7:b7:4e:9d:c5:1a:54:44:10:
c5:e6:bb:38:42:d7:a0:17:66:04:36:05:86:6e:a5:4b:06:f2:
d0:a0:61:b6:c8:95:4c:0b:b3:38:fa:0c:50:11:af:47:3f:2a:
21:f0:9e:31:95:31:97:1d:51:af:41:c9:59:85:62:b1:95:84:
8f:45:9d:d0:a7:ab:7a:bd:78:b3:66:50:f5:1d:5f:a6:64:f9:
4d:43:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org