Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UtXjFkf9RH7tUUbOiRbBaVc_yME.roa
File: UtXjFkf9RH7tUUbOiRbBaVc_yME.roa (raw, json)
Hash identifier: IrBXRBB8U4tJuAnJTx9XM+dR0fNSkV7cuHVt0eQ4EoQ=
Subject key identifier: 52:D5:E3:16:47:FD:44:7E:ED:51:46:CE:89:16:C1:69:57:3F:C8:C1
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841938896E4EC4EF3E4DA8158C7D6F91B6
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UtXjFkf9RH7tUUbOiRbBaVc_yME.roa
Signing time: Thu 27 Oct 2022 11:34:06 +0000
ROA not before: Thu 27 Oct 2022 11:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12714
IP address blocks: 93.91.224.0/24 maxlen: 24
93.91.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:38:89:6e:4e:c4:ef:3e:4d:a8:15:8c:7d:6f:91:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 27 11:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52d5e31647fd447eed5146ce8916c169573fc8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:cd:8b:83:80:5f:3c:b3:4c:18:08:fb:7c:
a4:b9:e9:e7:7b:c3:f1:4f:3a:41:b9:e1:88:3b:ee:
f6:f8:b6:fd:b4:62:8f:b2:bc:5e:59:33:6c:51:35:
8f:c2:7d:65:4c:1e:ab:a3:12:36:93:41:e2:44:6f:
c7:df:2c:05:cf:c0:b6:33:4c:6a:70:00:1e:df:88:
a6:ff:8c:bb:d0:21:0e:68:50:45:19:2c:28:0c:15:
10:9c:50:47:90:79:ee:03:df:2a:9b:b5:7b:cc:c7:
56:a1:06:0e:52:36:66:4e:6d:d8:aa:50:f5:33:b8:
e8:53:c9:d3:32:bf:a2:f0:0a:93:a7:3b:0d:df:38:
2c:85:87:9a:e1:86:9a:e7:89:86:05:6d:06:ee:db:
6e:91:3e:d8:d3:3c:12:d9:69:33:c6:90:c6:32:67:
59:89:ad:4e:b9:98:69:d9:15:22:0d:98:14:44:93:
14:f6:f7:55:f2:0e:55:31:25:ea:fc:bf:1c:05:5a:
6c:36:68:26:b0:bc:be:92:94:11:83:6f:4f:88:1c:
b1:1b:de:f0:50:52:15:17:7c:ee:36:45:e1:36:d6:
cd:53:b3:c9:4c:a8:31:b9:6e:70:82:26:ae:29:0d:
a9:ed:b0:83:ad:75:ad:48:69:18:e9:97:e4:d0:84:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D5:E3:16:47:FD:44:7E:ED:51:46:CE:89:16:C1:69:57:3F:C8:C1
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UtXjFkf9RH7tUUbOiRbBaVc_yME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.224.0/24
93.91.232.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:28:4c:eb:14:01:5d:48:c5:d1:76:ed:83:df:9a:b7:4d:a2:
26:0c:b7:e6:ea:a5:cd:d2:55:74:3d:de:e1:3d:29:5f:60:dd:
52:0b:03:ed:30:86:38:b0:0d:ca:5d:97:bb:7c:db:a2:52:44:
30:e1:3a:79:ed:73:5b:57:3e:66:aa:e6:40:21:b8:63:5b:ac:
76:77:79:77:fd:32:99:a9:ca:67:1e:c5:b5:6f:5d:91:8e:fd:
2e:50:24:08:0a:2f:3a:81:cc:e3:4e:4c:39:78:bd:b0:fd:77:
cb:55:49:03:c0:fb:e2:e9:0b:ad:4f:a4:41:7c:d2:49:3b:54:
d8:41:f9:49:aa:85:75:07:68:82:a7:19:a0:e3:d6:0d:55:31:
d6:85:21:b6:3c:77:b6:76:70:0a:24:0e:ae:07:8a:ff:35:bf:
13:d7:01:00:de:b1:91:42:77:48:bf:8c:16:e8:4a:61:69:4a:
52:7f:69:60:42:7c:1e:26:f3:44:e9:ab:2f:94:d7:2e:7a:78:
bf:47:eb:58:6a:38:91:84:aa:51:1f:cf:d8:d7:42:38:a5:ee:
46:6b:55:fe:91:3f:1a:09:71:a2:41:6e:81:ce:99:84:a0:0c:
d3:9e:50:55:00:cf:65:05:a3:c6:66:4b:55:6f:2b:00:b0:b8:
0d:52:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org