Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/b-P4Y-USzJcva75llDLfCehRZmo.roa
File: b-P4Y-USzJcva75llDLfCehRZmo.roa (raw, json)
Hash identifier: lRJy6ThJGuX3uDLbk/EI9oQVO6ljITYxDX4LT6NP/bw=
Subject key identifier: 6F:E3:F8:63:E5:12:CC:97:2F:6B:BE:65:94:32:DF:09:E8:51:66:6A
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 6A9A4B
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/b-P4Y-USzJcva75llDLfCehRZmo.roa
Signing time: Sat 01 Jan 2022 03:52:42 +0000
ROA not before: Sat 01 Jan 2022 03:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210693
IP address blocks: 188.93.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6986315 (0x6a9a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Jan 1 03:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fe3f863e512cc972f6bbe659432df09e851666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:a9:3d:43:e7:ec:0f:8a:cd:42:12:89:80:
23:84:32:f7:7c:01:dc:a5:65:82:a2:df:76:00:22:
76:18:b0:f6:4a:22:a0:3b:03:eb:8e:d0:59:bf:d9:
73:e4:a3:3b:27:3e:96:8c:5b:b8:e9:2e:c1:1c:45:
e2:83:77:d9:3b:43:b9:64:b4:25:e9:79:ea:cb:7e:
39:f8:66:de:a6:1b:a7:3c:fe:e2:f7:6f:f4:3a:5f:
b5:d0:c9:a6:55:a8:52:e4:78:d1:44:db:1d:30:3b:
47:2d:08:49:50:a9:91:bc:40:db:49:d1:60:76:d9:
9e:cf:04:bd:f9:60:57:39:b6:9a:b0:6d:26:05:26:
53:da:31:d0:ad:54:34:c7:1b:1e:87:57:37:cd:18:
60:96:11:80:10:ee:e8:08:e1:dd:ec:ab:19:0e:96:
bc:bd:d5:95:d2:61:91:df:2c:ef:97:46:f3:6a:09:
b2:a6:a4:b2:f4:6a:01:c4:a1:8c:cb:5e:da:2d:f2:
c4:99:d3:a1:8a:0b:b8:74:e0:f4:14:03:27:ba:1b:
34:40:00:af:1e:6e:dc:e3:86:41:d6:f4:c3:56:65:
1b:6f:ff:37:90:24:6c:45:9e:89:2b:b1:40:53:66:
9b:06:98:2f:90:b5:f3:13:33:20:97:09:64:40:ff:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:F8:63:E5:12:CC:97:2F:6B:BE:65:94:32:DF:09:E8:51:66:6A
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/b-P4Y-USzJcva75llDLfCehRZmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:21:4c:38:70:7f:4a:fb:50:0b:f4:74:9a:e1:fd:62:89:bf:
3a:20:73:fc:22:04:e4:69:6d:10:84:1c:18:50:1a:0b:48:a7:
f1:4d:be:83:80:22:2d:90:a0:f0:1a:e7:4b:ad:b1:bd:24:14:
04:12:33:c8:5d:ee:fa:53:6f:f4:3f:39:ae:2e:b1:f1:57:d7:
e8:6e:1e:6e:96:62:8a:56:b5:b5:1a:11:7c:c1:5f:0b:6d:bc:
b5:76:18:40:4e:5f:b6:fa:4b:47:9d:e7:1f:e0:1a:c3:14:66:
f2:04:83:f0:56:79:53:2b:ca:9b:9e:db:16:5e:cc:52:fc:09:
6d:95:c0:cb:14:b9:e0:a7:0a:22:47:95:2f:23:5f:57:d0:ef:
82:24:2d:e7:ef:2b:b4:8b:ba:7d:4e:18:07:b5:85:10:f4:a5:
8b:bc:11:a7:ad:bb:7b:6a:d6:e1:45:5b:e5:bd:41:7e:29:f2:
dd:30:0f:dd:2e:de:02:8b:a2:8a:47:30:38:3a:13:f4:ee:48:
2a:b5:a3:3c:99:d7:17:0f:b3:bf:35:82:a5:40:7c:fa:0d:37:
cb:c3:54:d0:53:0f:ea:22:da:5a:a0:8b:54:a3:f2:38:8a:22:
40:76:26:30:6e:fc:a6:93:56:3b:10:c8:22:e7:63:c9:28:d5:
c9:3b:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:41 2024 by rpki-client on console-fra.rpki-client.org