Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/vvUxkfT8J0ykPBd_G258fuzw4FY.roa
File: vvUxkfT8J0ykPBd_G258fuzw4FY.roa (raw, json)
Hash identifier: hg/pAVIBx2nKORMOf+BE3QMzhkdkH/pEfERqN/Vpbdc=
Subject key identifier: BE:F5:31:91:F4:FC:27:4C:A4:3C:17:7F:1B:6E:7C:7E:EC:F0:E0:56
Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial: 18C6A5E3
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/vvUxkfT8J0ykPBd_G258fuzw4FY.roa
Signing time: Sat 01 Jan 2022 00:55:01 +0000
ROA not before: Sat 01 Jan 2022 00:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47870
IP address blocks: 93.174.172.0/24 maxlen: 24
93.174.169.0/24 maxlen: 24
93.174.171.0/24 maxlen: 24
93.174.168.0/24 maxlen: 24
93.174.170.0/24 maxlen: 24
93.174.173.0/24 maxlen: 24
2a03:f400:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415671779 (0x18c6a5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Validity
Not Before: Jan 1 00:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bef53191f4fc274ca43c177f1b6e7c7eecf0e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:9b:b9:bb:55:4d:51:89:32:c7:84:08:55:
e3:f5:6c:63:0a:b6:dd:e8:df:3f:7c:8d:38:35:c5:
69:7f:c8:7d:19:9a:61:f1:4c:80:d0:ff:4d:7f:60:
0c:09:6c:bb:a2:91:26:42:9f:49:9a:50:d8:76:77:
91:3d:e5:2c:71:71:07:d0:d2:ab:1d:89:4d:c9:44:
f4:78:fb:30:1d:f0:19:8f:77:95:26:ca:65:c9:90:
d2:e5:e2:1d:f6:a4:0c:50:78:13:e2:32:b1:af:68:
ee:5a:fc:04:a1:9c:dc:9c:2b:f7:e1:4e:1a:74:8f:
ee:5f:3a:bf:b5:4e:74:c0:db:65:79:6a:0b:cd:ce:
08:4d:9a:c7:4d:08:e4:91:46:81:8c:3f:94:bf:0e:
82:44:c9:5b:1a:1f:29:ef:ec:e4:47:14:c9:2f:50:
ac:ab:cc:a9:e5:db:df:c2:74:2a:5c:d7:de:f7:4e:
07:f8:fb:6b:8c:c7:9c:22:12:e6:99:fd:4f:ed:11:
eb:72:cf:84:27:e8:fe:fb:56:fe:af:3d:49:a2:31:
07:e2:c3:2f:4a:5b:d1:e0:89:d0:7b:de:35:79:9f:
ae:5c:2e:bc:35:3c:94:13:f7:74:6b:86:97:05:70:
47:01:77:0b:88:91:38:bb:cc:dd:4a:f7:ab:87:47:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:31:91:F4:FC:27:4C:A4:3C:17:7F:1B:6E:7C:7E:EC:F0:E0:56
X509v3 Authority Key Identifier:
keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/vvUxkfT8J0ykPBd_G258fuzw4FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.168.0-93.174.173.255
IPv6:
2a03:f400:3::/48
Signature Algorithm: sha256WithRSAEncryption
7a:3e:7d:00:2b:52:e9:73:ff:c2:17:c6:fb:75:9e:ec:2d:eb:
1f:6e:cf:4f:45:26:9d:93:f6:bf:1d:15:7b:32:74:cf:af:d0:
92:3a:40:79:b4:7a:37:64:78:df:56:69:8e:2c:fd:27:26:c0:
7c:42:67:ac:d4:13:48:96:03:82:65:fa:18:2d:27:69:30:38:
4d:a3:c9:58:b8:bd:70:1a:23:70:b2:41:52:93:4e:ba:c3:d8:
bb:ad:ba:0c:18:07:9e:7a:21:8e:d7:ad:71:f9:0b:2c:43:b1:
e2:f1:bc:cd:62:60:15:eb:08:0d:e7:dd:fc:b5:f9:5f:b7:8c:
cf:7b:e8:1d:71:55:4d:e9:0b:6c:03:7b:4b:3d:5f:46:d4:f4:
4c:7d:e2:14:4c:44:6a:5c:94:d5:6c:d3:9f:88:c7:1b:bd:77:
75:ed:ca:ef:60:8c:8f:53:c1:12:1e:8f:17:43:35:cf:de:5b:
98:c2:56:c8:87:62:dc:2c:8e:0e:9b:57:ac:de:47:48:31:fe:
eb:2d:b5:34:32:ff:1a:61:2c:85:fb:5b:31:d4:a5:ee:19:d9:
b0:99:25:10:4d:8b:6c:02:1d:45:25:91:b6:43:c1:bb:dc:5b:
c7:5e:18:cc:88:38:f5:6d:55:d1:43:ca:d9:d2:88:2f:31:db:
ec:4c:d6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:13 2024 by rpki-client on console-fra.rpki-client.org