Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/IbxnqgUUYOkMgsxJJT8I9hSHUAE.roa
File: IbxnqgUUYOkMgsxJJT8I9hSHUAE.roa (raw, json)
Hash identifier: B2AC4fqPGMCHIk41bpNp3zuJg+q15EtRCPNMUTPyRTg=
Subject key identifier: 21:BC:67:AA:05:14:60:E9:0C:82:CC:49:25:3F:08:F6:14:87:50:01
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 273BDAD0
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/IbxnqgUUYOkMgsxJJT8I9hSHUAE.roa
Signing time: Tue 05 Jul 2022 07:29:25 +0000
ROA not before: Tue 05 Jul 2022 07:29:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20552
IP address blocks: 93.105.74.0/24 maxlen: 24
93.105.73.0/24 maxlen: 24
93.105.75.0/24 maxlen: 24
93.105.72.0/24 maxlen: 24
178.235.240.0/24 maxlen: 24
178.235.240.0/22 maxlen: 22
178.235.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658234064 (0x273bdad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jul 5 07:29:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21bc67aa051460e90c82cc49253f08f614875001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:27:4e:99:7c:6a:dc:1e:1e:da:34:c2:bd:
ef:b5:68:d7:db:04:c6:ea:dc:e2:d1:2a:f4:82:1e:
96:b6:71:f6:d8:60:e8:96:5b:a6:4f:8c:af:eb:71:
14:c7:32:43:57:d0:e8:fe:72:79:28:50:20:ea:86:
d1:d5:a0:57:9a:eb:b5:98:9e:49:4a:87:85:23:25:
54:d9:6a:3f:29:1f:a2:2b:d6:3c:4f:2f:b8:e9:4d:
6c:bf:b3:5b:12:40:59:82:81:30:90:be:34:22:c3:
3b:b9:5c:6a:b6:ac:f2:81:9f:48:5d:28:02:80:05:
79:10:6e:65:cc:fd:f9:d9:41:8f:a6:ad:a3:96:2f:
ab:da:79:c3:5c:b7:10:4b:ed:26:f0:5a:0a:06:68:
db:ca:dc:a3:df:18:a5:c9:40:7f:62:f1:54:7d:f8:
69:89:09:69:0b:f2:bc:b6:00:3b:a3:ef:f4:0c:19:
37:54:b6:73:a5:ea:70:23:52:98:4b:55:48:47:d8:
b6:2b:10:6e:02:ac:fc:eb:d3:0d:f4:72:f3:40:e2:
19:3b:71:19:2b:06:e2:9e:54:58:3b:d4:75:b0:f2:
ee:94:90:9e:df:8b:97:b5:1d:68:bc:ed:4f:43:c2:
e4:db:6b:68:32:32:72:1c:08:85:43:54:51:a4:c7:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BC:67:AA:05:14:60:E9:0C:82:CC:49:25:3F:08:F6:14:87:50:01
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/IbxnqgUUYOkMgsxJJT8I9hSHUAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.72.0/22
178.235.240.0/22
Signature Algorithm: sha256WithRSAEncryption
00:c1:c3:44:8b:2d:93:65:c1:63:49:d3:4b:27:8c:89:f4:b4:
aa:6c:58:91:d6:46:80:f9:55:93:bb:15:75:54:2e:3d:58:e8:
ef:7a:b0:4e:7b:a9:15:67:a5:67:86:73:34:b0:8f:89:f1:44:
e4:29:34:0a:4e:cc:21:8f:cf:4d:b8:15:a0:ca:35:fa:9f:58:
b3:87:0a:da:b4:5b:85:90:46:62:88:69:50:fc:ee:2e:23:df:
5b:24:aa:1f:ca:c8:26:3a:0b:46:5f:0f:fb:d9:78:96:5c:61:
79:b6:91:d0:24:4b:6f:38:8c:60:ba:d3:df:40:35:dd:4b:f7:
d9:be:f2:80:0b:11:90:06:b3:92:0c:bd:95:af:fc:ff:d1:90:
58:9e:af:75:e3:23:70:57:b7:70:56:23:42:24:4e:44:fb:5a:
de:b2:cb:65:8a:b2:48:79:ca:07:75:5d:b9:c9:98:c3:44:bd:
8c:27:5f:5c:fc:f4:87:9e:19:1d:57:4c:50:74:da:fd:18:1c:
49:cc:8f:ca:ee:4a:8c:7f:56:39:0e:15:3c:98:f4:31:ac:23:
8a:55:02:87:c2:bc:68:67:05:7b:99:01:8c:93:58:53:c3:c7:
b8:9e:53:3d:ac:a9:54:1d:49:6b:c7:79:a8:e2:65:8f:ea:1b:
d3:b7:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:26 2024 by rpki-client on console-ams.rpki-client.org