Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/69yFs_NCZaOElpKH2aCZrAwbueY.roa
File: 69yFs_NCZaOElpKH2aCZrAwbueY.roa (raw, json)
Hash identifier: kcrJPBgnwit44d+iffOwK+BwkF4M6Efzrbp0vDvjRAk=
Subject key identifier: EB:DC:85:B3:F3:42:65:A3:84:96:92:87:D9:A0:99:AC:0C:1B:B9:E6
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 018480D61965205DE037FC5F25397261FA5D
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/69yFs_NCZaOElpKH2aCZrAwbueY.roa
Signing time: Wed 16 Nov 2022 14:27:05 +0000
ROA not before: Wed 16 Nov 2022 14:27:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21276
IP address blocks: 93.187.111.0/24 maxlen: 32
185.110.92.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:d6:19:65:20:5d:e0:37:fc:5f:25:39:72:61:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Nov 16 14:27:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebdc85b3f34265a384969287d9a099ac0c1bb9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:ae:8c:0b:63:b5:b9:77:65:07:0e:0e:c6:
57:ed:2a:32:21:95:e5:e6:08:35:1b:b1:88:98:fd:
55:df:39:03:62:24:1a:81:35:5d:24:17:33:52:48:
0a:c0:60:e6:a1:b4:81:60:80:3c:b9:cb:eb:64:12:
01:5f:d4:12:7b:a7:67:a2:8e:22:3a:cb:21:ed:f6:
82:09:d0:29:31:24:81:18:cc:26:f6:f9:8e:cb:84:
dc:f9:3d:8b:67:6a:64:f3:bf:7e:29:30:0e:05:c0:
c6:f2:44:6b:b3:76:44:4a:07:c2:21:05:85:1a:b1:
e7:de:e8:03:aa:b7:ca:92:d6:3a:2e:bb:f3:b4:3b:
24:fb:e6:76:49:5f:6a:dd:41:ec:b0:d8:46:b4:d0:
89:78:8f:00:bd:f9:15:eb:60:5a:f6:b5:83:c3:ba:
42:38:2d:22:8b:6a:1e:04:9c:0d:cf:c3:c1:ea:c7:
d3:bb:db:b1:3a:2f:8c:cd:df:2b:3b:de:4c:5a:bd:
ef:c6:d1:54:31:e4:5e:46:ad:73:b6:67:29:56:f5:
54:8b:c0:0d:cc:ea:04:57:25:0a:a9:98:05:05:d7:
ba:17:6c:62:1f:5f:c1:3c:bc:e3:75:9c:02:a9:b4:
21:0d:86:0b:e6:7f:18:57:fc:fa:c0:44:f3:e7:db:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:85:B3:F3:42:65:A3:84:96:92:87:D9:A0:99:AC:0C:1B:B9:E6
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/69yFs_NCZaOElpKH2aCZrAwbueY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.111.0/24
185.110.92.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b9:cb:2e:09:bf:46:31:b9:c4:8b:6f:39:73:10:3a:7c:13:
99:e7:61:96:bc:b4:07:2d:e8:77:4c:d2:7f:d4:55:e1:f2:d8:
67:da:e1:cb:91:7e:c4:ae:0b:ee:c0:77:9a:37:cf:88:78:6a:
21:3e:e0:3f:17:ad:5b:68:2f:68:32:75:eb:8d:61:08:7d:15:
55:7f:d9:68:cb:e4:bf:59:2c:af:1f:c3:aa:be:ef:cd:9f:bf:
07:bd:0e:d6:25:a8:9d:30:d5:73:55:94:fe:e1:52:ca:4e:60:
94:65:dc:8f:4b:a8:a7:10:97:3c:23:ab:14:f2:ec:1e:cc:5d:
9f:67:02:7c:d4:01:b9:1b:f7:de:c0:3d:79:cb:bd:7a:bd:6a:
2b:d2:e9:10:e7:e8:b9:ef:2f:ff:b8:13:36:3e:b9:58:9e:a7:
38:dd:e5:58:1b:a8:04:92:0c:10:83:35:b7:54:14:fe:79:eb:
e3:15:f7:be:8f:83:74:bd:ef:d2:4f:cd:c3:e2:e6:bd:7e:24:
b9:e0:49:3d:3a:69:3f:1a:95:84:3a:c7:73:72:09:4d:41:27:
9a:ca:ad:1b:97:ee:c0:c7:c5:1d:fb:af:56:a9:5c:6a:a9:8f:
b7:95:22:4b:92:bb:81:c8:da:cb:ae:b7:10:87:f3:26:cf:99:
ba:ab:1f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:56 2024 by rpki-client on console-ams.rpki-client.org