Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/sNias0lxhwBwboOINmatC3XDiTI.roa
File: sNias0lxhwBwboOINmatC3XDiTI.roa (raw, json)
Hash identifier: H2ksC3Z66OHjHA7k1vyYS5VTTApJvZ6aFs1LwCPuJ98=
Subject key identifier: B0:D8:9A:B3:49:71:87:00:70:6E:83:88:36:66:AD:0B:75:C3:89:32
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 0183C3839555EA8A9EBDD269FAB2AF035C1A
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/sNias0lxhwBwboOINmatC3XDiTI.roa
Signing time: Mon 10 Oct 2022 20:08:44 +0000
ROA not before: Mon 10 Oct 2022 20:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59545
IP address blocks: 93.157.0.0/21 maxlen: 32
195.5.163.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c3:83:95:55:ea:8a:9e:bd:d2:69:fa:b2:af:03:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Oct 10 20:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0d89ab349718700706e83883666ad0b75c38932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b8:4f:2b:a9:54:cd:af:b5:27:e0:65:9c:60:
58:29:60:68:05:71:32:b1:94:6f:1f:b7:5d:90:17:
6e:fc:8c:b5:53:07:6e:11:b1:ae:24:20:bf:ba:91:
a3:23:be:af:e0:c8:e6:0c:0e:50:ce:55:b8:ca:07:
03:a3:a9:bc:a1:2f:0e:50:30:23:b0:08:ee:46:12:
7d:ff:66:6a:3b:3a:40:32:a7:7a:51:37:31:61:36:
e8:e9:e2:30:a3:f0:c4:ea:cf:29:ed:51:f2:c7:f1:
29:f3:0f:ae:b4:3d:d4:cd:ed:a4:70:b9:f3:a9:72:
af:6b:6c:ba:1f:cc:a6:1e:8c:12:7b:bb:5c:e7:18:
04:e6:4b:2b:58:72:33:a8:4e:e3:a0:b0:6d:90:d0:
34:aa:b1:6d:f6:c3:f6:1d:8d:72:7f:0d:80:93:6a:
ba:01:11:a7:d8:ad:75:24:65:0f:69:6f:50:e8:cd:
09:53:0a:90:93:ee:f8:97:63:d0:30:8b:5b:d5:8b:
91:a9:24:2d:8f:61:47:25:b1:97:89:20:c2:08:34:
f1:b9:68:22:9d:c6:ff:d8:b6:c4:90:77:ca:26:f2:
d3:87:da:9f:5f:97:23:e2:51:8f:17:64:00:be:fb:
0c:bb:10:28:88:09:77:36:22:aa:62:fa:73:ec:b4:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:9A:B3:49:71:87:00:70:6E:83:88:36:66:AD:0B:75:C3:89:32
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/sNias0lxhwBwboOINmatC3XDiTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.0.0/21
195.5.163.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0e:5b:0b:b6:04:6b:ce:59:4a:7e:c0:e9:88:64:f6:d1:06:
4f:30:d7:51:bd:f4:4f:af:d5:ee:e0:94:df:e2:cf:b7:cb:6e:
4b:f0:62:80:26:c5:9a:39:b5:9d:49:2b:0e:48:3f:72:ac:47:
be:72:67:5d:cc:92:22:33:cf:5a:86:a6:7f:3b:42:47:e5:d6:
f2:74:14:e8:dc:66:fa:c9:30:c0:5e:e1:ed:3c:ce:92:af:86:
72:db:8c:33:0a:80:01:83:62:38:18:ee:36:71:ca:8b:46:2d:
f5:53:be:80:24:33:a8:71:f6:86:8b:72:e0:94:dc:10:99:ce:
fa:f4:f0:d6:43:2d:03:57:90:30:20:9f:23:5b:05:92:f3:3d:
0b:30:d9:06:62:d0:7c:39:1b:54:d3:1f:7e:f4:70:bb:77:ba:
b8:bc:2d:d0:be:12:e4:61:80:db:a1:4b:3e:49:cd:c0:90:39:
6c:71:33:74:53:01:90:cd:24:64:b1:5f:e6:70:8e:40:d2:1e:
dc:a4:28:b9:16:70:d8:96:d1:bc:e8:2f:97:2c:85:a2:75:02:
d0:cb:13:82:32:be:05:d3:24:21:e6:47:77:b4:bc:4b:24:af:
ca:dd:d4:36:4c:f9:b3:4c:e4:5f:86:94:5b:26:91:a8:8e:f7:
c7:b1:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org