Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/KgkSo4uuu7zQxr433w4LBimRN-c.roa
File: KgkSo4uuu7zQxr433w4LBimRN-c.roa (raw, json)
Hash identifier: HvPAD2+OlbrqGN9HMNekOeKQDJqV+RsSC4NNRj94ljg=
Subject key identifier: 2A:09:12:A3:8B:AE:BB:BC:D0:C6:BE:37:DF:0E:0B:06:29:91:37:E7
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 06EBE42F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/KgkSo4uuu7zQxr433w4LBimRN-c.roa
Signing time: Wed 18 May 2022 07:36:17 +0000
ROA not before: Wed 18 May 2022 07:36:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 93.152.219.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116122671 (0x6ebe42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 18 07:36:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a0912a38baebbbcd0c6be37df0e0b06299137e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:0c:e8:06:b8:86:6d:65:46:7d:04:fa:21:
cd:d0:66:de:05:66:1c:da:ac:d2:24:bb:48:c9:28:
5f:eb:9a:07:98:ef:5a:f5:dd:3a:cb:e9:06:ad:3d:
1f:14:6c:77:f2:20:14:bb:04:57:da:5f:21:3d:f9:
bb:e3:32:94:95:3b:5f:d7:66:40:ab:7b:9a:b4:82:
48:fd:98:df:13:ed:2c:2c:a3:c9:dc:0a:3e:42:51:
55:36:10:d3:35:21:69:a5:57:10:d1:77:da:10:ef:
2e:e7:9c:ec:7a:35:45:10:00:ff:b5:ce:02:25:76:
54:0e:43:a2:37:ac:ee:19:dd:bb:ee:ba:1f:7d:ee:
1c:36:cd:0a:e6:c4:3f:ff:45:1f:7b:bd:ae:e4:1f:
a9:8a:3e:27:9e:5e:0e:0f:cc:6b:d7:65:22:7f:6c:
e8:92:65:b3:b1:75:d5:0b:1c:72:1e:30:52:54:f6:
51:d8:fe:f5:30:8f:fd:43:df:1d:dc:84:9a:2a:29:
38:61:67:0c:30:48:d9:01:e2:1d:8e:27:6a:7d:a9:
e1:d5:4c:57:c3:bb:5b:ad:1a:83:e0:59:09:52:0a:
36:8a:e2:e5:56:a0:30:9c:54:32:a1:c2:82:e6:42:
b7:99:15:9a:a4:3e:93:4d:c1:c3:f0:95:6b:f7:18:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:12:A3:8B:AE:BB:BC:D0:C6:BE:37:DF:0E:0B:06:29:91:37:E7
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/KgkSo4uuu7zQxr433w4LBimRN-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.217.0/24
93.152.219.0/24
93.152.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:eb:ca:8d:2f:84:1a:18:8c:69:e1:cb:e5:3d:31:6d:70:f6:
d7:12:cb:9a:23:a2:60:b3:7e:99:78:eb:cf:f8:aa:6e:90:df:
c5:7a:ef:cd:c7:b6:54:66:4a:2b:b4:32:02:4d:b0:02:13:33:
17:b4:4c:be:6d:3d:09:55:08:8e:56:33:83:a7:76:f1:4a:e6:
82:0a:7d:5a:36:84:d2:03:99:0c:2a:1d:d4:29:07:d0:0b:fd:
09:c2:7f:a3:9f:a6:ef:41:b3:eb:89:e9:1d:19:5b:eb:bf:1c:
e0:e5:72:28:35:f6:c6:e3:bc:e4:4d:64:8e:a7:f8:32:13:b8:
23:48:a5:91:e9:ef:55:d2:83:61:2c:bf:91:fd:7d:63:93:5c:
62:39:44:65:37:92:da:22:d2:2d:7b:ed:da:da:42:5c:6c:99:
3b:81:5f:36:6a:2a:ea:04:26:d6:ac:ae:b5:11:7d:28:36:04:
a0:ef:7c:bc:f9:4b:aa:a4:c7:30:10:d6:21:bf:12:a3:56:15:
19:a9:b6:25:76:4d:a5:e1:c2:bb:6d:8c:85:03:b5:1b:fc:c0:
00:57:bd:29:07:98:7d:b3:37:26:6c:0a:29:82:30:66:9a:fa:
85:a9:c6:09:cd:f1:27:d6:04:d1:40:19:65:7f:9b:72:d8:8e:
64:69:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org