Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/k3aAEvfySZfj8oSjHxg4jQrFpk0.roa
File: k3aAEvfySZfj8oSjHxg4jQrFpk0.roa (raw, json)
Hash identifier: 9k83/Na2qHwRWqqPBe6URUwbdG7LT1cYubHUeKYTLV0=
Subject key identifier: 93:76:80:12:F7:F2:49:97:E3:F2:84:A3:1F:18:38:8D:0A:C5:A6:4D
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1757C623
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/k3aAEvfySZfj8oSjHxg4jQrFpk0.roa
Signing time: Sat 01 Jan 2022 16:03:57 +0000
ROA not before: Sat 01 Jan 2022 16:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61139
IP address blocks: 93.113.34.0/24 maxlen: 24
89.39.126.0/23 maxlen: 23
86.106.129.0/24 maxlen: 24
86.106.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391628323 (0x1757c623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93768012f7f24997e3f284a31f18388d0ac5a64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:c4:01:ac:d7:2a:7c:df:53:56:d4:6d:97:
69:6d:0c:be:13:8c:f9:96:65:db:c3:8a:31:12:bf:
9e:f7:6e:01:82:f4:1f:85:6e:2b:ad:30:8c:3a:4a:
cb:68:33:c2:8b:74:bb:b2:1c:7e:99:4c:15:57:26:
2d:d2:b1:25:d8:25:41:c8:5f:0a:77:53:dc:21:a9:
50:c1:22:04:95:15:8c:17:03:c4:e3:b4:93:b0:6d:
e8:0b:92:6e:aa:70:24:bb:b8:8d:c0:e9:ce:4d:1b:
3b:f1:52:df:b5:f6:69:66:8d:84:ab:30:f7:d8:c9:
91:04:0c:09:a4:35:30:73:12:10:b9:c4:2b:aa:6b:
b5:f4:ff:1e:d1:40:e0:c5:70:ab:9f:45:19:18:61:
51:93:0c:3f:78:c8:ba:5b:f6:7f:d5:95:a8:86:5e:
f1:d8:dc:42:6d:e9:a5:5c:7a:b8:11:41:3e:49:54:
17:af:e1:d9:06:5b:5e:3d:ed:98:64:b0:5e:01:e8:
52:1a:15:bb:66:a5:29:6f:03:e8:89:d0:11:9e:24:
b0:28:63:b4:bf:05:b5:0e:71:0d:39:56:99:d4:18:
1a:51:0f:88:4a:52:07:fe:df:9a:25:fe:dc:08:de:
71:dd:55:3c:39:a1:30:08:64:bd:7e:c7:6e:d8:d9:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:76:80:12:F7:F2:49:97:E3:F2:84:A3:1F:18:38:8D:0A:C5:A6:4D
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/k3aAEvfySZfj8oSjHxg4jQrFpk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.129.0-86.106.130.255
89.39.126.0/23
93.113.34.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a6:05:f2:0b:20:07:10:b3:65:51:15:ea:95:35:ae:ba:4d:
b3:49:e3:af:50:fd:3b:80:b1:e8:01:30:30:4d:a5:6f:8c:fb:
35:95:1d:ca:9a:62:ac:c0:37:34:91:f0:e5:3a:02:37:8d:9b:
e6:27:67:11:72:04:7d:82:3f:88:e8:c9:36:14:b7:99:5a:bb:
c5:e4:47:af:1a:d9:1e:f0:51:85:b1:2d:24:ec:a3:17:12:58:
63:bc:71:41:69:22:2b:aa:89:ad:ac:69:82:37:df:c4:42:b8:
0f:61:ba:4a:66:49:b2:e3:e1:b3:3e:fa:04:63:15:7c:73:e1:
7c:c4:8b:dd:e7:63:7d:d3:81:73:cf:57:4a:c3:d2:2a:51:72:
b9:f1:66:a1:db:96:3f:32:91:a8:ca:2d:d9:94:96:5a:e4:70:
1c:4a:8d:82:f6:52:e9:39:62:ad:66:85:be:96:bf:bc:d4:ad:
79:e7:c4:f1:4d:8b:1a:ad:6a:4f:00:54:f5:db:98:40:db:16:
23:c8:90:d5:5d:4f:5c:e7:83:0e:13:07:b6:56:14:01:95:7d:
2d:6d:95:65:55:7b:89:e1:3f:67:20:8d:8c:b6:83:89:4c:ee:
fc:40:ed:04:3c:f5:cd:0a:5b:fb:1a:81:90:88:f6:ac:54:55:
c4:20:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:29 2025 by rpki-client