Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0Z_u3FEtO5Pdb873otkdxKQFgE8.roa
File: 0Z_u3FEtO5Pdb873otkdxKQFgE8.roa (raw, json)
Hash identifier: dOIqyopE6fIRaXUN2clcS82HiG3XKd9UFrGELUTz9DI=
Subject key identifier: D1:9F:EE:DC:51:2D:3B:93:DD:6F:CE:F7:A2:D9:1D:C4:A4:05:80:4F
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0564CDD7
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0Z_u3FEtO5Pdb873otkdxKQFgE8.roa
Signing time: Tue 11 Jan 2022 18:17:34 +0000
ROA not before: Tue 11 Jan 2022 18:17:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207249
IP address blocks: 93.152.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90492375 (0x564cdd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 11 18:17:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d19feedc512d3b93dd6fcef7a2d91dc4a405804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:6a:50:c3:99:94:d8:75:af:23:18:93:67:
bf:df:2b:2f:39:59:a0:bb:d8:e2:af:a7:37:10:37:
42:fc:8b:ec:cf:c8:20:b0:89:5b:fb:0d:97:bd:6d:
0e:90:05:eb:80:01:b3:02:be:e5:05:5d:27:cf:90:
1e:c2:a9:16:ed:11:ee:7e:ec:9c:56:76:4e:da:6a:
57:f8:a8:1a:2e:c3:64:b7:01:2e:2b:35:bc:f5:0a:
05:38:34:ca:3a:b7:18:da:c8:b4:62:be:00:94:6a:
95:c5:11:a5:19:19:e9:39:58:0a:90:16:f4:a1:08:
f1:31:4c:24:36:cc:94:39:f9:58:35:aa:2c:72:af:
f8:54:74:23:1d:58:a3:8e:0d:37:58:af:70:08:50:
86:fc:5d:2d:3c:e1:ff:17:93:f2:48:b7:62:d3:cf:
a1:d3:dd:95:e5:2d:ef:1b:7d:59:d1:88:02:68:2b:
3f:8b:3a:be:35:09:d2:07:fa:30:41:ba:5c:d8:4a:
ed:d5:61:56:81:df:7b:e4:90:61:4c:5e:0b:f9:d0:
74:8c:49:27:21:2c:2f:c3:bf:6a:44:b0:b7:96:d9:
a1:2e:62:f2:11:cf:b8:de:c6:f4:9e:50:49:6c:e8:
b5:1c:2b:6f:97:55:a1:6c:1b:b9:d2:9e:96:1a:7f:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9F:EE:DC:51:2D:3B:93:DD:6F:CE:F7:A2:D9:1D:C4:A4:05:80:4F
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0Z_u3FEtO5Pdb873otkdxKQFgE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.233.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:d7:9a:12:74:84:a0:9f:cf:f3:83:a1:e1:f5:f6:76:72:
d8:8c:65:af:50:f1:84:4b:88:2f:a9:34:87:0c:a0:be:01:33:
c2:ce:17:89:d2:b3:1d:df:8c:6a:8c:e5:59:df:f4:4f:0b:8e:
68:90:07:fb:5e:88:64:3a:92:d6:76:68:8b:6d:e6:54:7e:41:
4e:3f:32:15:cd:ad:b6:ed:4d:01:94:4d:bf:8b:f1:a5:22:fd:
34:dd:d4:7d:f8:df:3c:a0:2e:9c:b2:b5:ea:cc:54:f2:64:38:
50:e3:a8:d6:42:67:01:5e:35:c4:7c:70:84:e2:d9:a3:a2:73:
46:6b:d1:67:72:36:a5:a6:87:4b:be:2c:40:db:19:56:64:92:
35:a0:83:cd:7c:ad:fb:95:43:c5:8a:e5:7d:68:55:c0:e5:db:
4f:25:22:3a:2a:ce:0e:bd:44:f7:15:e9:09:ad:de:c5:b7:d9:
93:22:b8:4b:1c:2a:87:59:f6:77:98:4c:a3:e2:bb:85:1d:b2:
40:c7:86:58:50:46:82:3c:d0:9f:51:02:32:cf:64:18:3f:4a:
7f:16:32:f5:e1:b9:7e:d7:15:2b:20:43:58:2c:b1:ef:11:b9:
32:25:f7:1f:4a:a3:b7:cd:d5:0d:43:95:7f:eb:b3:19:90:0a:
f9:81:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org