Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/k0lGbVTec6bQLLRpF5n4k5bdsL4.roa
File: k0lGbVTec6bQLLRpF5n4k5bdsL4.roa (raw, json)
Hash identifier: zA8Rq5/S02jkiwPgi/7IQoRqtZrI13/6Pwa2ofMEDE4=
Subject key identifier: 93:49:46:6D:54:DE:73:A6:D0:2C:B4:69:17:99:F8:93:96:DD:B0:BE
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 356E8601
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/k0lGbVTec6bQLLRpF5n4k5bdsL4.roa
Signing time: Sat 01 Jan 2022 15:55:17 +0000
ROA not before: Sat 01 Jan 2022 15:55:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199774
IP address blocks: 93.159.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896435713 (0x356e8601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 15:55:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9349466d54de73a6d02cb4691799f89396ddb0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:68:22:13:f1:55:08:2f:80:d0:9a:14:14:
a9:7a:a6:d5:fd:48:fd:8d:48:98:c4:c2:7f:c7:37:
4f:b8:e5:b3:bc:e4:44:bf:55:f7:81:d0:97:80:fd:
3f:ee:6b:56:a8:be:22:12:f9:fc:3e:e6:f0:03:08:
66:63:e2:b1:53:f6:aa:a2:7c:33:e5:57:fc:a8:3b:
32:27:b9:95:4f:b9:e5:8e:25:b2:9f:ee:f8:22:95:
05:92:37:f5:6e:7c:51:04:df:c8:5d:84:dc:8d:0e:
76:bb:a0:ac:e5:fd:c6:d3:ec:47:f6:45:01:83:2d:
62:b8:4a:57:55:d7:ab:b4:b3:75:ec:b8:a3:25:9c:
2c:54:c5:d9:d3:90:22:6e:3c:b8:39:e2:3a:66:31:
43:37:c6:54:fa:48:fb:f9:1a:78:fb:f0:fb:51:3c:
a0:e0:35:68:a3:02:8e:86:51:99:ee:91:09:e2:bc:
48:98:d5:41:37:67:58:e4:24:aa:99:40:f6:44:45:
4a:b9:e7:bd:9d:ca:ba:e4:26:4c:93:b2:2a:15:73:
bf:0f:4e:2f:5c:1e:17:59:f7:3d:5a:4b:2b:0b:0f:
69:f2:99:2f:c5:14:6d:5e:9c:f7:41:cf:c1:24:29:
17:c9:68:24:8a:24:b2:92:bf:ec:ad:dc:04:d8:0a:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:49:46:6D:54:DE:73:A6:D0:2C:B4:69:17:99:F8:93:96:DD:B0:BE
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/k0lGbVTec6bQLLRpF5n4k5bdsL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:fa:48:dd:82:20:47:73:a0:73:f5:6d:b0:56:94:5c:22:2e:
26:a1:98:df:b7:bc:bb:28:a5:43:8c:23:f0:ef:73:94:69:d2:
d2:87:fc:09:3a:54:aa:cc:f5:61:8d:2a:1d:58:7b:56:a1:85:
d8:25:36:db:32:43:07:78:89:d9:0e:d4:45:92:99:5f:9c:db:
04:18:2e:15:4c:34:ac:42:82:e1:0a:9a:fc:aa:df:4f:3a:18:
ef:24:a0:14:fa:a2:68:a7:ff:bd:dd:9f:c1:5e:a4:d9:1e:a4:
c0:d5:37:d5:2c:35:ab:66:bf:d5:34:2d:18:b6:d2:5f:19:fe:
7e:04:da:ac:dd:8d:78:4a:e8:31:8b:01:39:91:aa:a0:7f:0b:
79:0a:78:8b:c9:3d:70:30:85:ac:e1:aa:a5:db:ec:15:29:b8:
84:8b:48:d6:95:08:57:0b:c6:f6:33:bd:1a:52:ab:6f:79:68:
96:60:65:13:68:d9:39:8a:fd:84:69:f8:a5:89:41:a1:a5:2d:
25:2b:ac:e4:b8:76:ae:49:18:7f:5a:af:52:a5:b0:7a:ae:05:
bc:51:bd:c2:75:b2:14:39:09:6f:92:95:58:ca:51:87:cf:c2:
08:92:e4:9a:a1:f8:5d:fd:8a:6f:3e:f0:20:18:0f:d5:6d:62:
d4:9e:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org