Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6qUfZUb9qt6JZPgJNTW0BKqbC2Y.roa
File: 6qUfZUb9qt6JZPgJNTW0BKqbC2Y.roa (raw, json)
Hash identifier: s1r3VfFFBAGQfh93ZqdM7F1S+FO4EFEDgJwp6waqOIQ=
Subject key identifier: EA:A5:1F:65:46:FD:AA:DE:89:64:F8:09:35:35:B4:04:AA:9B:0B:66
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 07574A0F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6qUfZUb9qt6JZPgJNTW0BKqbC2Y.roa
Signing time: Wed 29 Jun 2022 13:40:03 +0000
ROA not before: Wed 29 Jun 2022 13:40:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 93.152.206.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123161103 (0x7574a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 29 13:40:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaa51f6546fdaade8964f8093535b404aa9b0b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:88:dd:79:df:10:c3:bd:22:9e:e0:da:e7:
bc:96:3a:89:42:5b:4a:dd:ac:cb:bc:f3:1d:6d:55:
d6:52:43:41:96:3a:a1:85:2c:c5:10:58:d5:01:84:
ea:eb:02:8d:64:f3:73:aa:97:d0:d1:5e:8a:b6:8d:
ba:7d:89:84:a6:fa:29:93:3e:b2:ff:f8:67:25:ca:
5c:43:ef:1d:7c:dd:10:5b:f5:ab:7c:50:46:55:85:
bb:e1:80:90:81:ed:ab:9c:2d:b3:52:00:58:3c:4c:
d3:e8:26:d9:14:25:1e:ee:af:00:58:b1:7e:fe:69:
08:7b:28:74:c0:bf:bb:e6:0e:69:fc:82:4f:fe:c8:
44:ed:8a:ae:cd:76:5b:dc:90:cc:bd:a2:1d:c9:6a:
79:c4:a9:e6:f0:0c:ae:0f:f0:fe:fc:7f:4a:1a:eb:
4f:44:96:9c:4c:20:eb:b3:45:05:51:6b:b2:cb:d7:
01:2e:49:0d:89:17:f9:77:f4:0e:0b:b3:df:35:7b:
08:74:54:09:21:aa:ec:cf:b1:c6:71:f5:81:56:00:
60:a5:0e:80:53:91:4e:8b:76:47:0c:59:5c:46:1d:
a3:ba:2e:87:87:39:f9:3e:41:75:c5:6c:b2:dc:f6:
1d:a1:96:12:73:0f:62:f4:29:1d:98:77:ad:55:3e:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A5:1F:65:46:FD:AA:DE:89:64:F8:09:35:35:B4:04:AA:9B:0B:66
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6qUfZUb9qt6JZPgJNTW0BKqbC2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/23
93.152.206.0/24
93.152.208.0/24
93.152.216.0/24
93.152.222.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
41:25:f1:11:c8:ca:65:5c:5b:b6:26:e9:49:03:72:b4:ab:2c:
a7:8d:9e:54:bd:e0:2a:fb:62:4c:62:e9:5b:87:dd:07:fb:0d:
9c:55:cf:f4:11:7f:03:47:d8:10:91:cf:55:7d:4e:65:6e:01:
c5:27:b6:9e:9a:c3:25:e6:69:7b:d2:6b:4e:7c:0a:ca:6b:e3:
26:73:2d:cf:82:91:15:11:e4:93:18:5f:b1:77:9c:bc:da:24:
ac:82:62:c8:a2:7d:4c:80:fb:92:8b:5f:c8:b3:3d:89:55:26:
34:71:84:7d:ba:c4:89:f7:d2:02:41:2a:d8:5d:74:a7:cf:65:
78:0d:52:11:6b:79:c0:a7:e7:fc:da:29:69:e9:08:bc:23:73:
dc:43:4a:15:0a:f6:18:42:3c:e2:4d:3f:7c:87:c3:e5:dd:6f:
d9:16:f6:6c:78:91:67:9b:93:84:83:4f:85:8c:2b:b7:9e:f9:
31:6a:6d:c5:5b:1a:96:8a:34:57:6d:0e:2c:4e:0b:e1:55:ce:
86:de:58:d6:b2:4a:07:ec:d4:f2:5a:3b:41:74:25:a0:7e:3a:
bb:84:e3:b8:10:67:58:2d:8f:40:04:49:3d:b6:d0:b7:86:b6:
01:e5:7f:61:6f:63:88:18:ae:ac:74:41:6e:40:a3:42:f8:4b:
2d:99:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org