Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/J4jaEs0lg6JuzXu05Udv3-BKXFo.roa
File: J4jaEs0lg6JuzXu05Udv3-BKXFo.roa (raw, json)
Hash identifier: r0aHxif926Htojni+sJPF+veeoyEvBZz/g3rS6QusXo=
Subject key identifier: 27:88:DA:12:CD:25:83:A2:6E:CD:7B:B4:E5:47:6F:DF:E0:4A:5C:5A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 075C5285
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/J4jaEs0lg6JuzXu05Udv3-BKXFo.roa
Signing time: Thu 30 Jun 2022 18:37:24 +0000
ROA not before: Thu 30 Jun 2022 18:37:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 93.152.207.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123490949 (0x75c5285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 30 18:37:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2788da12cd2583a26ecd7bb4e5476fdfe04a5c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:05:c1:f6:ff:ad:2e:2e:46:73:cb:0f:bf:
99:e5:4f:18:ab:73:44:e9:70:94:a1:42:c3:be:b4:
d9:8b:bc:cd:98:47:a4:c9:91:da:14:3a:74:53:99:
cb:60:15:04:4a:52:29:86:14:6d:65:77:67:28:68:
4b:ad:a2:28:6a:df:44:69:13:de:c3:80:c4:8b:cb:
6c:3d:e3:b8:c8:8f:32:03:67:52:cb:0e:d0:49:85:
e5:4e:84:87:47:0a:09:ec:6d:fb:a6:95:8a:25:dd:
ed:02:e2:15:c0:51:c2:d2:ab:6f:ea:a4:ea:1c:a8:
df:43:6a:41:85:4a:41:32:8a:cc:6e:46:77:8e:b3:
d1:8b:0e:36:09:10:8f:2b:65:c8:10:ab:84:ac:f5:
15:ba:e1:24:e6:33:b8:ec:ac:c3:f5:59:19:a2:53:
cb:8c:5e:bc:a3:8e:df:6b:b5:41:95:01:29:60:16:
59:7c:c3:01:43:fc:80:cb:0e:b9:a0:29:85:53:78:
fa:1a:41:91:56:90:eb:71:28:14:db:c7:3c:dd:2e:
c3:87:60:da:39:3a:ad:e7:9b:00:d9:60:71:46:98:
99:04:87:e5:6a:af:5b:d4:6b:fd:41:81:e8:7b:ea:
71:f1:29:c6:41:13:ae:db:de:4e:3f:76:8d:64:00:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:DA:12:CD:25:83:A2:6E:CD:7B:B4:E5:47:6F:DF:E0:4A:5C:5A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/J4jaEs0lg6JuzXu05Udv3-BKXFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.207.0/24
94.190.195.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3e:1e:4b:9a:40:6d:1d:92:c9:04:fb:e1:e6:d1:2b:92:1f:
e4:df:20:50:e6:50:9a:29:d2:aa:d5:e8:ba:24:ce:fd:9c:2c:
96:c7:30:9d:d3:0f:7c:e3:48:6e:20:b8:94:8c:48:c0:60:25:
a1:b5:d1:e4:27:25:5b:19:69:3d:97:c4:47:ce:41:79:92:af:
24:b7:37:06:fd:39:34:0b:fd:49:10:22:19:42:3d:4b:f7:62:
09:84:bd:e8:36:93:41:02:9d:87:7a:3c:e6:4a:45:14:17:47:
92:c5:ff:79:5f:aa:0b:3f:e0:dd:9a:06:50:0a:b6:fc:21:ef:
50:bb:cb:c8:98:7e:4c:cc:a8:aa:19:25:c6:8c:a2:73:d2:ce:
05:98:47:cb:f9:90:5e:20:56:36:ee:8e:d7:13:c9:0e:0a:2a:
eb:a6:f6:cd:88:7b:13:25:f5:e2:fb:a2:50:6a:27:93:f7:2c:
c4:de:a3:f4:63:cd:3d:76:98:92:06:e0:40:12:95:8a:f6:1d:
56:d2:6d:bf:ee:66:e2:d3:65:9f:24:71:dc:99:89:d2:63:68:
3a:5c:45:5b:f0:e8:82:33:46:94:a3:6b:7d:e6:da:b6:2f:4d:
b7:b4:a4:7a:d3:63:eb:14:e5:04:3e:bb:fe:cf:d9:9a:fc:e8:
ea:70:c3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org