Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/1-1gFeyTkVNTIjLZrBi33R1_B-ak.roa
File: 1-1gFeyTkVNTIjLZrBi33R1_B-ak.roa (raw, json)
Hash identifier: Vvd1+qMK97L6c71jD6MLJNp90aO2+nxIn/IA5toX3bs=
Subject key identifier: FB:58:05:7B:24:E4:54:D4:C8:8C:B6:6B:06:2D:F7:47:5F:C1:F9:A9
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0AAE0BC5
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/1-1gFeyTkVNTIjLZrBi33R1_B-ak.roa
Signing time: Mon 04 Jul 2022 08:24:25 +0000
ROA not before: Mon 04 Jul 2022 08:24:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210058
IP address blocks: 93.175.247.0/24 maxlen: 24
212.21.131.0/24 maxlen: 24
212.21.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179178437 (0xaae0bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jul 4 08:24:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb58057b24e454d4c88cb66b062df7475fc1f9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:95:2b:fc:c4:4f:ab:65:54:78:03:40:9a:
ff:9d:ac:25:6f:ca:e8:f7:cf:31:5b:05:e5:b9:94:
92:09:13:da:63:9e:ef:b8:d3:7b:cb:98:39:84:a9:
6e:46:8b:18:a5:2f:ae:75:a9:07:5f:27:bf:61:b5:
2d:0f:f7:51:7c:75:ac:d2:9b:77:cb:43:12:2c:41:
99:22:a0:12:2c:0b:12:0c:3e:05:99:e6:59:ef:eb:
09:9c:31:41:9c:5e:af:76:35:68:9b:eb:87:40:3f:
ea:c8:88:ba:19:d0:6c:8b:fe:a9:92:e6:17:0d:5c:
e6:fa:1c:ee:0d:bb:91:84:fe:b5:33:1d:7d:64:8f:
0c:1b:60:01:48:54:d8:27:5c:e4:73:cd:72:d0:28:
eb:49:87:b0:12:e5:c7:14:c1:78:93:aa:eb:73:ab:
91:fc:b3:9a:66:95:a5:fa:92:87:04:c1:19:05:4c:
af:0b:7b:59:30:7b:bd:08:4f:56:11:96:9a:a9:21:
aa:b8:9a:51:18:9c:69:6c:04:1e:1c:d3:7a:6a:2f:
4d:61:9b:24:48:2b:e9:61:1d:66:6c:df:ce:d8:03:
73:1b:f0:b9:7f:f0:41:3f:23:ce:12:14:6f:3a:47:
6f:e1:c8:9c:ac:ff:cd:59:bc:e7:15:d8:6c:1f:11:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:58:05:7B:24:E4:54:D4:C8:8C:B6:6B:06:2D:F7:47:5F:C1:F9:A9
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/1-1gFeyTkVNTIjLZrBi33R1_B-ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.247.0/24
212.21.131.0/24
212.21.135.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:b7:74:1b:d1:2f:7a:9e:a1:a4:11:9c:71:d8:d1:84:da:f1:
77:eb:84:81:c1:95:f2:8b:d6:9b:c2:d1:7e:09:2a:c5:8a:33:
05:84:c4:8c:72:ed:94:3c:15:0b:a5:00:6e:11:b7:32:3a:1f:
19:24:9f:25:d4:50:47:65:57:f5:9f:bc:00:15:5c:c2:09:f5:
14:19:08:16:71:b9:52:9c:44:91:34:60:ac:ce:87:56:a6:4b:
b8:43:ca:df:24:0f:ad:bc:93:ef:02:c5:ed:ac:48:71:42:70:
9a:bb:0e:3c:96:b1:7c:15:4c:b8:4c:09:2c:99:7c:dc:25:d1:
9e:42:a6:26:78:d1:6e:42:4c:4e:00:2d:ee:b5:2e:ca:1b:eb:
58:a9:44:aa:8a:cc:67:ee:d6:ad:f1:5d:9a:db:51:0a:d1:d4:
14:b9:6e:c4:08:ea:8b:48:86:18:34:66:64:b1:43:8f:46:e4:
32:ee:37:6d:95:02:44:1c:0c:46:b0:de:bd:12:f6:ec:2c:05:
ef:d8:aa:57:8d:24:f9:94:d1:ef:8f:4b:33:0e:2b:76:99:13:
61:91:50:b5:6f:3b:6a:4e:9d:cd:69:e5:a4:a0:0f:fd:d2:e9:
f3:e8:1f:e1:3d:76:03:e1:35:0d:09:b4:4a:3f:b8:ca:24:4f:
df:0a:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org