Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/CSuFfn8ilvafXOVhz2gk79aN6XI.roa
File: CSuFfn8ilvafXOVhz2gk79aN6XI.roa (raw, json)
Hash identifier: 6n5WGwidMuDeMICkzjDdEVAiOFzXed2SLky+fAi/suY=
Subject key identifier: 09:2B:85:7E:7F:22:96:F6:9F:5C:E5:61:CF:68:24:EF:D6:8D:E9:72
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 01843EFE1630595607E16ADDF67591A1D25F
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/CSuFfn8ilvafXOVhz2gk79aN6XI.roa
Signing time: Thu 03 Nov 2022 19:35:50 +0000
ROA not before: Thu 03 Nov 2022 19:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204166
IP address blocks: 93.115.196.0/22 maxlen: 22
185.107.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:fe:16:30:59:56:07:e1:6a:dd:f6:75:91:a1:d2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Nov 3 19:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=092b857e7f2296f69f5ce561cf6824efd68de972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:60:dc:44:e3:18:b6:1a:4b:b4:ad:c0:15:
3b:39:6c:e6:1c:cc:38:39:90:a9:b1:2b:b5:60:a1:
c8:72:f1:2b:bc:02:aa:66:56:8a:5e:bb:26:8d:fb:
33:10:7c:d6:6f:2c:72:23:ae:0a:91:9b:c1:5e:a7:
62:f8:de:5e:43:c3:ff:27:29:2c:fb:e3:28:7a:b2:
2f:79:19:bc:1c:5c:55:2b:79:29:19:d2:79:83:dd:
19:53:2f:d0:85:60:78:a3:b1:0c:6a:33:83:af:42:
2f:8c:c9:72:99:7d:ca:af:7b:e2:25:c0:95:ae:10:
a1:7b:b9:4f:8c:7f:a1:b1:27:7d:70:50:85:0d:4f:
50:a3:b4:5d:5d:e5:ae:53:a0:e8:f6:44:0a:ac:44:
88:18:c3:3b:a7:4a:f3:a7:56:6a:7a:99:7e:18:10:
62:61:2c:4f:22:d3:3a:7d:19:33:59:c9:ec:bb:10:
6f:f5:b9:2b:c5:2e:2b:0c:33:f5:d5:d4:ad:9c:13:
a4:bb:4c:c0:52:06:91:82:d5:d0:98:c2:a9:58:6c:
3a:59:df:9d:bb:34:28:26:4d:32:bc:18:17:19:72:
71:a3:92:b3:d8:41:3d:db:fc:fe:f6:00:48:68:c9:
c1:29:83:3b:4b:cf:35:6a:8b:71:4e:90:af:91:f1:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2B:85:7E:7F:22:96:F6:9F:5C:E5:61:CF:68:24:EF:D6:8D:E9:72
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/CSuFfn8ilvafXOVhz2gk79aN6XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
185.107.0.0/22
Signature Algorithm: sha256WithRSAEncryption
30:76:29:22:1c:54:0e:c8:96:43:d7:71:3a:0a:27:37:56:d5:
51:af:a3:d0:6e:0c:87:33:d2:aa:9f:4a:82:e0:8b:97:fa:21:
a0:e1:c2:a4:53:28:09:1b:4a:4a:4d:2c:aa:af:fc:c2:92:16:
cc:93:5f:a3:c6:22:9c:73:16:90:75:d0:f7:63:ac:1b:45:ad:
bf:69:0b:02:14:d6:e0:bf:d0:5f:0d:b1:d8:20:72:2f:03:a0:
2a:4e:c7:a7:d2:43:e3:d1:27:d6:a8:d7:a8:7f:d6:2e:9d:ef:
79:08:77:4a:65:26:07:51:80:b7:b6:ca:dd:f8:5c:39:72:0b:
37:30:71:b6:c3:3f:ca:73:32:9f:62:3e:e9:77:09:2e:d3:e0:
24:d7:7b:c6:8b:43:e0:ff:2e:77:83:1a:87:0b:91:81:09:34:
f0:15:d2:2b:f9:67:ba:c5:0a:b5:f2:fb:b7:6e:21:bf:bd:fe:
63:3a:0f:b7:85:70:d8:e6:bc:9c:7f:79:a7:fa:97:3a:b4:f4:
81:79:d6:9d:d5:f5:7e:9e:d8:99:cb:d9:01:c8:b8:ed:5f:d1:
17:c6:3c:99:f1:48:84:37:bc:fc:7e:27:fb:25:6b:52:dd:2a:
81:1c:cd:c7:88:7d:bb:34:8c:57:e4:7c:fe:4d:50:32:0a:48:
44:ea:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:38 2024 by rpki-client on console-ams.rpki-client.org