Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/a3AWM6VEIiuWFy4sDxOIdpk_MWw.roa
File: a3AWM6VEIiuWFy4sDxOIdpk_MWw.roa (raw, json)
Hash identifier: TwMucAj1AXKHGbHjNwFpNZeBa62ghxeyB5zFoJoxMZg=
Subject key identifier: 6B:70:16:33:A5:44:22:2B:96:17:2E:2C:0F:13:88:76:99:3F:31:6C
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 05A2D457
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/a3AWM6VEIiuWFy4sDxOIdpk_MWw.roa
Signing time: Sat 01 Jan 2022 07:04:05 +0000
ROA not before: Sat 01 Jan 2022 07:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57691
IP address blocks: 93.174.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94557271 (0x5a2d457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b701633a544222b96172e2c0f138876993f316c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:c6:9b:ea:40:53:25:2a:2d:28:8e:42:82:
ae:7c:52:a4:2c:10:d2:e8:b2:42:4d:7a:fa:2a:d9:
34:9e:7d:99:3c:51:c5:db:31:e2:86:3c:e2:a6:01:
e0:54:0b:c9:6c:c0:e2:7a:83:40:0e:69:4c:60:d6:
02:07:cb:0a:41:ba:59:fd:13:cf:13:3c:3c:c2:cb:
26:e6:e6:da:78:c1:22:ed:7b:56:3c:27:5e:cb:e3:
69:73:98:cb:0b:1c:24:59:48:cb:dd:2b:af:53:a0:
0b:ed:5b:f0:3f:79:d7:ad:80:9e:64:39:53:ac:3b:
94:2b:44:0f:d9:7f:c6:c2:aa:28:e2:4e:7f:96:bb:
99:8e:a1:2f:0f:54:51:5b:f5:03:4a:71:e0:66:c9:
9d:18:7f:c7:dd:29:8b:70:72:92:af:53:f0:38:dd:
7a:04:df:e6:14:ff:77:13:dc:00:8f:79:4c:14:e1:
c4:c1:fd:89:d9:92:fa:37:c7:40:c8:5b:6f:09:3a:
4a:50:62:37:22:9a:7e:0e:77:bf:a1:f0:03:d0:86:
01:3b:57:17:6e:93:dd:f8:99:53:4b:41:c2:e9:8e:
a7:15:46:4a:b3:8c:f2:40:b4:76:a1:b5:23:c4:ce:
f4:2c:a4:4d:c9:14:f2:58:8e:81:b5:87:78:78:44:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:16:33:A5:44:22:2B:96:17:2E:2C:0F:13:88:76:99:3F:31:6C
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/a3AWM6VEIiuWFy4sDxOIdpk_MWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.162.0/24
Signature Algorithm: sha256WithRSAEncryption
06:70:54:1b:40:51:5c:ed:8f:5d:e4:af:1a:d9:c5:be:9a:9a:
cd:a9:01:74:8b:a4:3a:8c:ba:f3:19:db:61:c3:27:05:93:0d:
ef:9c:75:95:7d:22:56:63:10:b5:c1:0c:a1:48:35:92:ef:9c:
00:8f:55:c7:44:05:0b:5c:eb:3c:8a:23:af:24:26:e3:4b:9d:
38:bd:3e:b1:cb:68:b1:95:78:21:d8:da:f6:6c:d9:a4:61:08:
8f:46:57:dd:42:36:b4:b9:46:9b:94:66:e5:28:92:a5:c4:3e:
cb:32:75:68:65:f1:4a:16:a3:4b:9f:2c:89:31:e7:12:ec:f1:
6f:e6:46:ab:a8:d6:53:e2:81:c7:5f:40:db:1a:bb:45:00:b1:
5c:bb:ae:2a:1f:a5:27:6a:24:15:2f:73:4a:91:34:51:a0:89:
6b:94:85:7a:2e:20:f4:48:d9:96:b7:06:1b:24:a5:6f:7a:52:
f7:d6:f2:d6:f2:bc:c6:90:18:32:e5:ff:9d:d9:2a:18:0a:bf:
45:e5:43:8d:40:bb:63:ed:a8:8c:f3:c6:60:d4:6e:ba:87:30:
d3:bc:eb:f0:90:09:7f:31:a5:3a:fc:a3:88:74:f1:0e:03:55:
07:ee:00:59:cd:27:7f:d0:a1:b8:5d:5f:af:3a:3b:1d:50:b6:
97:59:4e:ba
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBaLUVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2VmNThkNGNmYTM1NTQzZjg0ODhhMjc1NmU2OTI0ZTY0N2I0NTg5MB4XDTIyMDEw
MTA3MDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmI3MDE2MzNhNTQ0
MjIyYjk2MTcyZTJjMGYxMzg4NzY5OTNmMzE2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANB/xpvqQFMlKi0ojkKCrnxSpCwQ0uiyQk16+irZNJ59mTxR
xdsx4oY84qYB4FQLyWzA4nqDQA5pTGDWAgfLCkG6Wf0TzxM8PMLLJubm2njBIu17
VjwnXsvjaXOYywscJFlIy90rr1OgC+1b8D95162AnmQ5U6w7lCtED9l/xsKqKOJO
f5a7mY6hLw9UUVv1A0px4GbJnRh/x90pi3Bykq9T8DjdegTf5hT/dxPcAI95TBTh
xMH9idmS+jfHQMhbbwk6SlBiNyKafg53v6HwA9CGATtXF26T3fiZU0tBwumOpxVG
SrOM8kC0dqG1I8TO9CykTckU8liOgbWHeHhE7t8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRrcBYzpUQiK5YXLiwPE4h2mT8xbDAfBgNVHSMEGDAWgBTc71jUz6NVQ/hI
iidW5pJOZHtFiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNPOVkxTS1qVlVQNFNJb25WdWFTVG1SN1JZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8x
L2EzQVdNNlZFSWl1V0Z5NHNEeE9JZHBrX01Xdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
ZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8xLzNPOVkxTS1qVlVQ
NFNJb25WdWFTVG1SN1JZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2uojANBgkqhkiG9w0BAQsFAAOC
AQEABnBUG0BRXO2PXeSvGtnFvpqazakBdIukOoy68xnbYcMnBZMN75x1lX0iVmMQ
tcEMoUg1ku+cAI9Vx0QFC1zrPIojryQm40udOL0+sctosZV4Idja9mzZpGEIj0ZX
3UI2tLlGm5Rm5SiSpcQ+yzJ1aGXxShajS58siTHnEuzxb+ZGq6jWU+KBx19A2xq7
RQCxXLuuKh+lJ2okFS9zSpE0UaCJa5SFei4g9EjZlrcGGySlb3pS99by1vK8xpAY
MuX/ndkqGAq/ReVDjUC7Y+2ojPPGYNRuuocw07zr8JAJfzGlOvyjiHTxDgNVB+4A
Wc0nf9ChuF1frzo7HVC2l1lOug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org