Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/51LqELgAQHx1_OgqHNBloboVQzc.roa
File: 51LqELgAQHx1_OgqHNBloboVQzc.roa (raw, json)
Hash identifier: fdhyjiDHD6UEkZpYOyWUfXbKFBoYx8ZMP9WeIkuxsD4=
Subject key identifier: E7:52:EA:10:B8:00:40:7C:75:FC:E8:2A:1C:D0:65:A1:BA:15:43:37
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 074F600D
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/51LqELgAQHx1_OgqHNBloboVQzc.roa
Signing time: Mon 27 Jun 2022 09:25:40 +0000
ROA not before: Mon 27 Jun 2022 09:25:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 93.152.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122642445 (0x74f600d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 27 09:25:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e752ea10b800407c75fce82a1cd065a1ba154337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:14:2b:b8:9e:18:94:94:95:6f:bd:a8:fc:8e:
b3:b8:94:30:aa:9f:59:53:ac:07:a6:e1:26:6b:e3:
17:0d:fe:4a:5e:5a:13:63:a5:e3:ac:c6:85:1c:d1:
0d:84:85:8f:14:4e:4c:85:2f:ce:20:83:7d:be:f2:
ff:67:db:1a:46:d5:c1:68:aa:ca:8a:59:16:5f:7c:
49:d5:db:0e:37:40:d6:55:eb:58:a7:00:31:69:fe:
1b:78:2e:09:77:bc:08:7a:dd:a6:76:26:7c:9d:d2:
4b:89:8a:f1:3b:e5:73:7c:6d:ed:d8:16:5c:84:81:
dc:36:7b:d0:00:ba:b4:d2:85:f0:67:61:c9:5b:bb:
4b:a8:4f:83:59:d4:2a:01:b5:aa:c2:2f:1b:f0:3b:
2b:ec:7b:ab:bf:b2:ae:c7:17:cd:aa:87:47:92:78:
22:ac:86:0b:84:93:f5:fa:89:44:2a:a1:a0:24:6b:
4a:05:4f:1d:12:26:4a:bb:d5:f4:bc:c6:58:d0:a8:
f8:31:3c:9f:5a:68:04:45:a3:7d:70:3d:c0:66:54:
1d:ef:c6:8b:5d:52:ab:b3:69:e0:2f:b7:5f:87:87:
07:21:c6:90:71:1f:6c:be:a3:76:6f:ce:a8:d7:9d:
08:6a:78:8d:85:77:fc:ba:de:8a:81:28:70:e9:14:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:52:EA:10:B8:00:40:7C:75:FC:E8:2A:1C:D0:65:A1:BA:15:43:37
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/51LqELgAQHx1_OgqHNBloboVQzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:50:ef:f1:e8:a8:08:b9:96:73:42:86:8a:d7:f7:51:90:8f:
40:6b:4a:49:ee:fd:9a:68:4d:ad:f6:db:39:90:f6:79:5f:5e:
17:85:46:f4:6b:6c:ad:8f:e3:09:7f:a1:4d:fb:dc:b1:36:85:
11:68:ae:34:12:6b:50:5f:79:0d:f4:73:d3:37:1c:4f:36:5f:
59:66:52:25:dc:e6:25:87:4f:5d:dd:c9:42:0c:56:7e:4a:35:
57:50:c2:e8:48:00:5e:43:5e:9e:ff:1d:37:0c:c4:e6:c4:f5:
62:e1:73:bc:25:9f:25:77:db:b5:89:99:a5:ed:a2:15:fe:8d:
d1:4a:5b:da:dd:d2:24:f6:33:f7:b7:29:4d:a3:2f:a9:1c:30:
36:33:0f:29:90:97:80:42:4c:89:63:f8:48:4b:65:79:c3:2c:
33:ac:aa:c9:0b:c6:a8:90:32:af:72:6c:87:0f:f6:d6:0c:a0:
c3:3c:79:2d:49:45:e7:c9:cc:9a:d8:00:7d:d7:a3:f1:9a:50:
5d:e1:d9:07:e8:2a:61:cd:2c:cf:8f:42:fa:29:47:17:46:5b:
1c:bd:01:a8:63:0e:6c:70:76:8a:a2:0b:40:eb:8c:13:cd:f0:
24:9f:f2:5b:ca:58:1a:8f:e9:19:d5:b5:02:3d:16:f4:c4:3b:
42:ba:58:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org