Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xIB-5oTXSkNBgU6xTpf4EDJdyFE.roa
File: xIB-5oTXSkNBgU6xTpf4EDJdyFE.roa (raw, json)
Hash identifier: l6HWXON+r9ShOziUPYxx0VzqBxAUPctyWfcwq9Sxvic=
Subject key identifier: C4:80:7E:E6:84:D7:4A:43:41:81:4E:B1:4E:97:F8:10:32:5D:C8:51
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD52B703C53F762F495DEA2652B9E9E
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xIB-5oTXSkNBgU6xTpf4EDJdyFE.roa
Signing time: Mon 02 Jan 2023 00:15:19 +0000
ROA not before: Mon 02 Jan 2023 00:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50660
IP address blocks: 93.115.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2b:70:3c:53:f7:62:f4:95:de:a2:65:2b:9e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4807ee684d74a4341814eb14e97f810325dc851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:31:6c:4a:49:ee:3d:f0:f7:2b:9e:ab:64:
c1:55:51:75:57:bc:38:82:bf:df:ff:70:8b:c3:dd:
d1:83:b2:a6:97:ea:7b:e8:10:6c:6b:4a:d6:df:00:
b9:92:4e:66:23:f9:aa:08:a6:ce:6c:6b:df:1d:eb:
cf:42:54:6d:10:a0:c5:d6:40:43:23:83:68:fc:ee:
c0:70:05:88:96:0c:62:84:57:d0:15:70:9c:c2:50:
0a:a1:53:9b:dc:01:fe:b5:1c:4e:08:45:cd:eb:6a:
9e:22:bd:5c:da:ba:3e:b4:98:f3:92:b2:38:72:f3:
96:c9:5b:70:99:ce:d7:14:8b:95:b2:2e:b7:e1:9f:
76:56:aa:87:b3:47:ec:95:f0:b2:ee:bc:57:70:26:
ff:fa:68:90:7a:6d:18:71:22:0d:3e:5a:b3:ad:86:
4f:89:c8:c3:15:0d:bf:aa:ee:02:aa:12:c7:eb:7f:
76:6a:45:85:09:86:1d:a1:75:63:a9:56:9b:69:14:
20:08:dc:f2:23:f2:bc:0b:21:df:5e:62:2d:ea:3c:
1c:5f:64:55:f8:fd:b9:44:e7:de:8d:ea:2c:ff:60:
c5:b0:77:21:38:41:e6:74:14:e6:f3:a7:59:12:1c:
42:8f:a9:c3:8d:6a:ed:88:68:37:4f:98:f8:3a:c4:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:7E:E6:84:D7:4A:43:41:81:4E:B1:4E:97:F8:10:32:5D:C8:51
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xIB-5oTXSkNBgU6xTpf4EDJdyFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.153.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0b:f5:77:40:60:4b:82:b0:d5:e7:fe:6f:72:f0:ff:b0:b4:
19:07:59:6d:69:5e:4b:f0:7b:f8:c6:b9:dc:55:73:90:c0:a2:
4d:0e:9e:95:db:43:0a:93:19:6f:ed:81:e0:c6:50:0b:f2:a4:
86:95:68:e7:76:4c:26:fb:02:fb:f1:09:56:b8:f0:da:9a:07:
1b:d8:37:84:76:88:49:ff:c6:fc:04:42:f7:38:9e:3f:72:dd:
b4:47:c1:5b:0c:d3:fe:da:fe:1d:33:39:1c:37:2b:b4:ca:60:
37:6a:a8:0d:6f:43:b8:fe:7f:1a:5a:55:3d:6b:5c:db:5a:97:
2e:b7:56:60:08:d7:86:24:9e:84:7d:47:14:0f:5e:89:e5:5a:
bb:36:05:31:c2:5a:c4:94:22:0d:37:b1:0e:a5:49:93:15:50:
77:b7:93:1e:b2:c0:8e:81:28:26:a5:69:21:7d:ac:95:8c:97:
84:c8:8a:e4:00:99:fb:7c:93:f1:ba:25:6f:4d:ae:18:43:8f:
b9:3c:67:8f:bc:fb:32:54:89:40:68:24:91:6d:d1:24:8d:df:
d0:e3:f8:ac:9c:61:d4:d2:03:0c:94:f1:8c:0b:a4:4d:4c:9a:
ee:7d:ae:0f:b9:4c:de:11:9e:24:13:35:f4:e8:63:bc:2b:05:
06:a8:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:26 2025 by rpki-client