Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/JFHO0qdiPCXceJo8Kf6AzgvCTHw.roa
File: JFHO0qdiPCXceJo8Kf6AzgvCTHw.roa (raw, json)
Hash identifier: 1KFYuSIadJ6aqHNGGcBszD8n42uEj/BZ24jacTDlMCw=
Subject key identifier: 24:51:CE:D2:A7:62:3C:25:DC:78:9A:3C:29:FE:80:CE:0B:C2:4C:7C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 075C2E5B
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/JFHO0qdiPCXceJo8Kf6AzgvCTHw.roa
Signing time: Thu 30 Jun 2022 18:37:24 +0000
ROA not before: Thu 30 Jun 2022 18:37:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 93.152.219.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123481691 (0x75c2e5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 30 18:37:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2451ced2a7623c25dc789a3c29fe80ce0bc24c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:f3:3b:5d:91:42:26:7c:fe:f2:00:1e:a7:
65:36:3a:87:0f:75:de:b2:a1:0a:25:46:eb:68:7c:
88:91:bf:dd:0f:34:65:c0:06:f7:30:e6:76:35:78:
c1:10:11:a5:8e:20:91:a7:42:f7:26:96:9a:e9:86:
e8:bd:c1:30:92:c8:3f:ba:e7:8f:02:2b:a0:33:90:
19:5f:7b:65:99:75:85:18:77:b0:2e:a3:24:b9:01:
9f:6b:b1:1d:b0:42:01:43:a7:cc:21:2a:c4:9c:78:
5e:c0:40:ca:0c:5c:4a:0a:ef:9a:01:37:a8:7c:0a:
6e:9e:52:39:7e:29:b6:c0:ab:e1:fc:69:ba:32:fb:
61:e1:90:e0:99:14:18:3b:97:ae:ac:d6:fe:9b:a5:
ba:98:1d:1c:01:b3:04:36:0e:99:c9:a0:3d:6e:1e:
be:f7:e6:2c:c7:39:43:c6:46:09:3c:93:ff:37:8d:
0b:5f:66:f2:f2:39:41:ef:59:db:af:54:45:c4:11:
37:b9:53:d7:01:f4:e5:9c:45:de:6d:31:fe:8f:be:
6f:c0:2e:75:a5:de:94:76:1d:9d:10:47:e4:d0:9a:
91:f8:66:77:52:c7:9c:38:59:c6:a6:ca:73:e2:97:
1a:26:e6:a5:ae:c0:8d:8a:a0:1c:7e:71:5b:d1:32:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:51:CE:D2:A7:62:3C:25:DC:78:9A:3C:29:FE:80:CE:0B:C2:4C:7C
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/JFHO0qdiPCXceJo8Kf6AzgvCTHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.217.0/24
93.152.219.0/24
93.152.222.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6e:e9:c4:2b:f7:77:42:65:74:43:3c:ea:e4:6b:71:06:80:
26:44:83:26:ba:b5:ee:97:9d:33:f5:48:af:45:a6:e8:d5:6a:
3c:4b:ab:d7:eb:0d:51:55:28:81:b8:35:74:e3:7b:76:3a:b3:
ec:b1:17:0f:26:d4:00:b0:c5:66:01:e4:39:36:12:8e:1b:47:
a2:23:b0:df:cd:13:8f:a7:41:74:27:7e:ab:7d:43:8b:71:25:
8c:72:22:f0:1c:ab:19:c4:77:80:51:54:74:39:e7:d0:e1:5d:
ed:01:48:9d:51:66:80:99:06:e8:5c:05:fc:6c:75:0d:67:1c:
75:d2:2e:b0:36:a7:ff:be:7b:a6:61:2b:80:ee:07:ff:3b:15:
e6:b9:00:4c:34:22:f0:72:ad:36:21:94:6e:8b:30:5a:28:5b:
3c:24:e4:a0:c9:41:71:0b:02:0c:0b:fa:1e:4c:d6:e5:71:39:
33:b0:36:d8:77:3a:ff:e7:b4:12:3d:ee:5f:74:e8:97:88:e9:
f6:29:51:f4:29:26:6c:a0:ef:d8:95:3a:73:43:43:4d:70:20:
fc:af:07:bd:d4:ea:6c:c3:65:52:ec:d9:a1:5f:4c:a6:ce:c7:
01:f3:de:4d:42:b7:3a:2b:3a:2f:8e:21:0c:3e:1e:4d:9e:8f:
c0:c8:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org