Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/A16PbBrpSIZC20Io0_VriNcvA58.roa
File: A16PbBrpSIZC20Io0_VriNcvA58.roa (raw, json)
Hash identifier: AFZn7CVaBB5YCMX0pVi4WHVgLXuqkoKa+1wBYSIpErc=
Subject key identifier: 03:5E:8F:6C:1A:E9:48:86:42:DB:42:28:D3:F5:6B:88:D7:2F:03:9F
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 0181F1BE840AAC40EC2180A84D74764E4958
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/A16PbBrpSIZC20Io0_VriNcvA58.roa
Signing time: Tue 12 Jul 2022 09:30:03 +0000
ROA not before: Tue 12 Jul 2022 09:30:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210713
IP address blocks: 93.115.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:be:84:0a:ac:40:ec:21:80:a8:4d:74:76:4e:49:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jul 12 09:30:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=035e8f6c1ae9488642db4228d3f56b88d72f039f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b1:71:34:bf:a4:00:6b:ac:bf:53:26:7b:36:
72:e2:92:72:4e:e2:8b:8b:47:c5:b4:72:e3:9b:9a:
4a:71:60:19:e4:36:d2:ad:6f:5c:61:02:33:ca:78:
25:3c:42:0a:c6:97:08:e7:cd:87:8f:74:97:27:ef:
c9:ed:cd:f7:a1:67:ee:df:4c:bb:c2:5e:ed:fb:84:
1e:de:80:e1:be:b2:0f:c7:b7:06:85:0b:00:75:66:
97:d0:53:ab:32:8a:6b:9d:c5:c1:a2:ca:33:98:0a:
05:71:1c:91:2e:6b:5d:23:89:54:dd:29:45:4a:91:
9c:9f:0a:4c:d3:44:aa:34:15:0f:17:82:49:7d:17:
5b:6b:fb:8a:69:33:16:ac:5c:c2:87:d7:bf:89:06:
f1:a2:43:86:32:28:0e:97:2e:9b:d9:c2:19:26:55:
b8:eb:cc:65:33:3f:d6:d5:38:e5:9c:6f:2f:a9:ad:
e8:8c:16:71:8c:ae:b3:62:0c:f4:07:cd:32:c4:87:
5a:5c:8b:bf:e9:c3:c8:99:82:65:98:2f:e5:14:9a:
12:e4:69:c5:06:4c:87:18:17:5e:d3:25:75:a3:1d:
30:09:b6:ea:da:5d:e6:08:85:67:de:16:6e:47:de:
99:cb:6e:57:be:71:f1:3d:f4:c3:c4:91:3b:4c:47:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5E:8F:6C:1A:E9:48:86:42:DB:42:28:D3:F5:6B:88:D7:2F:03:9F
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/A16PbBrpSIZC20Io0_VriNcvA58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.44.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:f7:98:04:b9:99:2c:ef:40:91:29:6f:e4:c0:4c:c2:23:11:
b3:b5:a5:40:db:77:b8:bd:ff:f7:4b:83:4c:aa:1d:0c:79:e9:
5d:ca:3a:df:a7:cb:dc:93:f2:36:75:6d:a2:5e:55:5a:a7:d3:
ee:8f:4e:12:40:e6:31:71:67:ca:8d:0a:0d:86:59:e6:6a:5d:
99:6e:a0:fd:1e:8f:a1:1d:fa:b0:70:a9:7e:95:18:01:85:6c:
98:2d:41:9b:8d:d7:79:eb:1c:72:7c:cd:c4:b2:e8:3f:22:a6:
dc:58:9e:88:ab:6a:a8:54:4c:3a:7c:2c:3a:a0:25:b4:aa:a9:
49:d0:8a:75:ce:9d:29:db:f5:e9:a7:b1:e8:fb:6e:f0:c2:81:
6e:6d:68:29:7d:d0:e9:f3:d3:d8:06:9c:cf:ea:41:ef:f5:46:
68:f9:c3:d5:5a:7e:3e:13:03:ba:4c:35:69:8d:12:23:14:f8:
e7:e4:fe:34:dc:fd:ac:65:19:6b:ff:06:b4:3a:c3:0e:a8:3d:
a6:cd:45:53:57:55:c8:c1:8e:f3:b4:fc:97:10:89:f4:54:16:
f0:bc:50:7b:be:a2:eb:79:69:d3:3a:99:66:c3:5e:48:18:99:
97:0f:35:c6:3d:20:6a:dd:a7:3e:67:67:a7:31:42:4c:11:9f:
32:e8:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:12 2025 by rpki-client