Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0egKvgiUT9CmXrTD1gNtYxe7HKk.roa
File: 0egKvgiUT9CmXrTD1gNtYxe7HKk.roa (raw, json)
Hash identifier: TiiserQe+VVx6W+9F+U2bmPMITA5d99gyWPjAi6xpU8=
Subject key identifier: D1:E8:0A:BE:08:94:4F:D0:A6:5E:B4:C3:D6:03:6D:63:17:BB:1C:A9
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01891AEF4EB1FB33CCE0D7B1FD3A07C15577
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0egKvgiUT9CmXrTD1gNtYxe7HKk.roa
Signing time: Mon 03 Jul 2023 08:47:18 +0000
ROA not before: Mon 03 Jul 2023 08:47:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212953
IP address blocks: 93.152.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:ef:4e:b1:fb:33:cc:e0:d7:b1:fd:3a:07:c1:55:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 3 08:47:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e80abe08944fd0a65eb4c3d6036d6317bb1ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:db:e8:7d:b4:88:7f:69:6c:26:ea:a7:ff:
6a:8a:aa:a2:ed:83:08:42:96:84:8c:d4:d0:ad:ae:
87:52:68:a4:ae:0c:8e:6b:a4:d9:ec:23:f6:40:96:
0f:e7:52:df:a1:0d:13:76:31:18:4d:be:46:40:96:
31:c3:97:bd:ff:e9:67:5a:b8:47:fc:dc:ec:bf:90:
4e:e9:3c:6a:22:c1:4c:33:c9:d6:e0:53:df:7a:b4:
4b:fa:ab:ec:8e:20:93:30:dc:0e:7f:24:1b:49:a8:
5a:62:d3:a1:01:7c:4e:c6:76:62:fa:d3:c8:13:22:
d1:0c:1a:b4:d4:0c:22:d2:47:14:be:80:60:7d:64:
a3:58:3d:c1:81:7c:1a:8a:a8:bd:cd:25:07:c6:fd:
05:41:c1:4b:2e:88:c5:ee:4b:76:3a:89:ad:6a:6a:
b0:ac:7d:32:fb:da:1c:7e:bb:fc:6d:13:94:21:22:
ad:58:d4:e6:9f:bf:a7:98:0f:84:05:50:e4:97:69:
05:74:8b:f8:43:ef:c2:97:c3:96:c9:75:f2:ab:c0:
78:00:72:ba:d1:ee:64:09:92:b4:5c:23:ad:6a:6a:
67:a9:b4:ee:a7:28:62:ea:a6:04:96:e3:51:46:ed:
d6:b7:fd:9a:07:0d:e3:75:66:f0:88:5f:c7:07:cd:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E8:0A:BE:08:94:4F:D0:A6:5E:B4:C3:D6:03:6D:63:17:BB:1C:A9
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0egKvgiUT9CmXrTD1gNtYxe7HKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.224.0/24
Signature Algorithm: sha256WithRSAEncryption
07:67:e0:4a:ab:4c:9a:3e:98:da:db:cb:c8:3f:db:34:3d:e8:
5b:3d:e2:2d:31:f3:52:f5:a9:3c:8f:0c:19:db:b1:e1:3e:ee:
26:bc:65:65:eb:19:a2:5d:ab:b0:9c:2e:62:5f:09:30:e1:3f:
b5:a4:3b:d9:ff:51:40:8d:92:48:28:35:c2:38:e0:c6:5e:18:
68:90:5f:10:a3:42:0e:a4:20:5e:b1:fd:48:97:1d:d9:27:8e:
e3:f2:da:28:7b:bf:9c:ba:ec:b9:a7:8f:d7:84:0b:93:ae:42:
0f:14:31:15:f2:16:5e:80:85:a5:6c:72:79:6e:d6:ee:0a:90:
78:e0:6e:17:f4:99:5e:a3:e1:f4:da:51:c8:cf:03:d6:aa:67:
d6:60:5a:4b:fd:c5:23:b6:a8:58:bc:01:87:61:44:44:68:a9:
6b:36:b5:99:25:ab:f7:19:c4:e6:52:34:9d:e8:c4:d4:68:d9:
63:81:15:75:90:7f:ae:02:89:6a:45:e1:12:46:c0:c2:cf:e7:
6b:ef:ae:ca:16:29:52:1d:66:96:c8:33:07:d0:c0:ca:d3:26:
77:11:fd:61:44:bb:5a:be:e3:34:a1:42:e9:82:46:df:4e:6c:
4d:43:97:c7:20:38:64:3e:1f:40:f4:2d:80:60:9e:c7:5a:3c:
8e:1f:24:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYka706x+zPM4Nex/ToHwVV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjMwNzAzMDg0NzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWU4MGFiZTA4OTQ0ZmQwYTY1ZWI0YzNkNjAzNmQ2MzE3YmIxY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGfb6H20iH9pbCbqp/9qiqqi7YMI
QpaEjNTQra6HUmikrgyOa6TZ7CP2QJYP51LfoQ0TdjEYTb5GQJYxw5e9/+lnWrhH
/Nzsv5BO6TxqIsFMM8nW4FPferRL+qvsjiCTMNwOfyQbSahaYtOhAXxOxnZi+tPI
EyLRDBq01Awi0kcUvoBgfWSjWD3BgXwaiqi9zSUHxv0FQcFLLojF7kt2Oomtamqw
rH0y+9ocfrv8bROUISKtWNTmn7+nmA+EBVDkl2kFdIv4Q+/Cl8OWyXXyq8B4AHK6
0e5kCZK0XCOtampnqbTupyhi6qYEluNRRu3Wt/2aBw3jdWbwiF/HB834BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNHoCr4IlE/Qpl60w9YDbWMXuxypMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvMGVnS3ZnaVVUOUNtWHJURDFnTnRZeGU3SEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZjgMA0G
CSqGSIb3DQEBCwUAA4IBAQAHZ+BKq0yaPpja28vIP9s0PehbPeItMfNS9ak8jwwZ
27HhPu4mvGVl6xmiXauwnC5iXwkw4T+1pDvZ/1FAjZJIKDXCOODGXhhokF8Qo0IO
pCBesf1Ilx3ZJ47j8tooe7+cuuy5p4/XhAuTrkIPFDEV8hZegIWlbHJ5btbuCpB4
4G4X9Jleo+H02lHIzwPWqmfWYFpL/cUjtqhYvAGHYUREaKlrNrWZJav3GcTmUjSd
6MTUaNljgRV1kH+uAolqReESRsDCz+dr767KFilSHWaWyDMH0MDK0yZ3Ef1hRLta
vuM0oULpgkbfTmxNQ5fHIDhkPh9A9C2AYJ7HWjyOHyTY
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:42 2025 by rpki-client