Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FPeim9As7GGzVClp6FBWYQwp7oo.roa
File: FPeim9As7GGzVClp6FBWYQwp7oo.roa (raw, json)
Hash identifier: Lyjc6XqUkvKiTtVRXQuIVwZjggB1V/by7/q3Nb60ktA=
Subject key identifier: 14:F7:A2:9B:D0:2C:EC:61:B3:54:29:69:E8:50:56:61:0C:29:EE:8A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 05A8D33F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FPeim9As7GGzVClp6FBWYQwp7oo.roa
Signing time: Thu 27 Jan 2022 19:00:17 +0000
ROA not before: Thu 27 Jan 2022 19:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207461
IP address blocks: 93.152.210.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94950207 (0x5a8d33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 27 19:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14f7a29bd02cec61b3542969e85056610c29ee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:e0:68:34:6d:96:ee:1f:97:26:f1:f2:31:
1d:b3:f5:06:4b:3c:df:6f:43:6c:a2:11:59:c8:61:
d5:90:bd:ff:d6:c5:84:59:f8:17:ad:78:88:ac:b3:
a5:ed:c3:39:f1:6c:5e:64:30:3e:90:7c:8a:9e:3e:
02:f5:b4:7d:f9:d2:d7:ce:b4:76:2e:72:83:c1:fb:
89:d7:96:9b:71:42:f7:44:cc:41:a0:39:8e:d1:ab:
a6:3a:d9:60:2b:2f:df:73:6a:66:72:41:d6:8a:0f:
47:82:90:75:01:0d:21:79:af:9e:92:72:9e:ff:f8:
80:45:8b:a1:67:c0:6f:f9:2c:40:88:a1:9a:07:e5:
3f:a6:a4:68:0f:39:c9:43:c6:8b:d4:8f:6d:5d:75:
45:8e:31:14:6e:c8:74:94:2b:61:a5:46:d8:46:0e:
25:b1:8e:50:a8:30:06:f5:34:9e:9e:51:2c:ae:f3:
cf:0b:01:b4:40:14:2d:e2:3e:b9:57:4f:d7:2d:3a:
45:3c:95:fa:53:b9:a5:15:f0:8f:c5:5c:5a:c6:ea:
ba:0d:cd:2e:1b:8a:2b:51:e9:fb:8d:e3:26:09:35:
f5:34:7f:3b:2a:51:da:3c:1e:ce:3e:f3:6b:ff:6d:
e3:11:1a:c3:f1:88:02:f8:54:a6:6d:68:6c:d9:50:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:A2:9B:D0:2C:EC:61:B3:54:29:69:E8:50:56:61:0C:29:EE:8A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FPeim9As7GGzVClp6FBWYQwp7oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.210.0/24
93.152.218.0/24
93.152.223.0/24
93.152.226.0/23
Signature Algorithm: sha256WithRSAEncryption
70:ed:c9:da:0e:55:e2:40:e4:c4:6f:c0:2c:d2:0f:ae:6e:bd:
02:f3:a7:2c:6e:70:e8:ba:65:f4:40:9e:14:a6:fb:2f:67:0c:
58:8e:d5:0a:a0:2e:1d:bf:c2:e6:4b:eb:ee:27:02:cf:ea:dc:
c7:15:06:3b:63:24:19:bd:2d:fc:84:66:52:2a:f9:c2:ab:67:
75:c8:da:5d:95:28:32:c3:d9:4a:f8:fd:14:1c:96:29:2b:9a:
06:66:78:db:a8:d5:f1:5d:f3:13:da:d8:b1:d5:31:56:da:46:
f5:c1:dd:dc:b2:9c:1a:52:e0:ca:3d:c0:64:4e:f4:6e:10:95:
5b:fc:95:3a:84:24:d3:13:4d:6f:45:de:22:75:05:c3:14:2e:
1c:9f:8d:81:a8:6e:35:c8:ea:a9:b0:ad:df:dd:22:1b:a3:59:
81:78:cf:63:22:56:13:01:e6:a7:a8:8e:90:62:a4:d9:43:99:
59:cd:fb:28:7e:19:2b:80:b2:21:14:74:99:ed:24:41:3e:fa:
ea:a3:24:d2:22:1f:d5:24:30:2c:9a:8a:bc:ad:6f:3f:e5:45:
8b:dd:42:b9:7e:52:94:44:78:ec:54:a5:e2:5f:7f:f4:59:6d:
7c:1e:fc:28:88:c1:a2:ae:2c:28:78:57:44:08:38:bd:c3:15:
26:42:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org