Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Y5mBorY6VGazMXF9hOuTB18R9Q4.roa
File: Y5mBorY6VGazMXF9hOuTB18R9Q4.roa (raw, json)
Hash identifier: qZpoTya4wWLVE/ScRebmD84nw+wqxURtjc/s8T7l/mw=
Subject key identifier: 63:99:81:A2:B6:3A:54:66:B3:31:71:7D:84:EB:93:07:5F:11:F5:0E
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0182648E9FEB4E44BCE19A1EA2F799F7942D
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Y5mBorY6VGazMXF9hOuTB18R9Q4.roa
Signing time: Wed 03 Aug 2022 16:34:04 +0000
ROA not before: Wed 03 Aug 2022 16:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 93.152.206.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:8e:9f:eb:4e:44:bc:e1:9a:1e:a2:f7:99:f7:94:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 3 16:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=639981a2b63a5466b331717d84eb93075f11f50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:e0:40:a0:8f:8a:ae:89:0d:ee:c0:0d:26:
2a:fd:0e:d8:f1:cc:3f:fd:01:16:db:4e:18:cd:f3:
52:fd:0a:8a:28:de:60:ca:26:0a:85:1a:08:a6:a5:
e3:1a:c2:d9:e0:01:9b:b7:03:df:73:19:32:67:32:
77:ae:de:e7:1c:15:df:6f:ad:91:c5:7d:de:53:ae:
93:47:d6:42:71:1b:f3:7f:e0:d4:16:e7:6d:85:63:
92:dd:bc:6a:73:78:84:41:01:23:72:54:2c:4a:ee:
23:4a:20:36:97:17:7d:60:69:aa:50:22:a5:3e:c1:
e1:7d:32:7f:6a:39:d1:28:c3:25:8b:09:9d:e5:f9:
28:0e:37:a9:5b:40:53:cf:96:32:02:e8:1f:ba:e8:
6c:fb:50:70:f2:c0:16:5f:28:50:d7:33:3f:03:e4:
0f:59:01:54:09:6a:fa:af:3d:21:52:61:18:e6:60:
43:32:c9:d0:73:e5:7d:51:a7:1c:7d:70:34:7b:32:
f9:d4:f4:7d:27:e7:15:8f:24:37:02:c2:03:40:e5:
c2:a8:a0:2d:52:f6:90:be:09:e4:7f:17:17:a0:03:
11:7d:64:47:69:9a:33:87:61:b5:ec:82:ff:37:47:
fb:35:f6:25:8e:dd:fa:04:ce:49:74:6d:08:90:0c:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:99:81:A2:B6:3A:54:66:B3:31:71:7D:84:EB:93:07:5F:11:F5:0E
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Y5mBorY6VGazMXF9hOuTB18R9Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.235.0/24
93.152.206.0/24
93.152.208.0/24
93.152.216.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0c:f0:10:7d:f1:a7:8a:ec:c0:a4:6f:8c:93:29:46:d2:0e:
f0:79:b6:ff:6b:4a:7f:0b:39:65:23:48:74:95:25:ac:97:76:
8a:2b:40:e2:55:9e:ad:d6:05:37:83:6e:5f:17:8e:26:11:b2:
74:7c:91:88:12:f8:69:31:ab:94:f2:fd:97:61:ff:de:0e:b4:
20:dd:76:c0:36:86:f0:78:8d:8e:3b:9d:e1:fd:2c:ca:73:7c:
ef:e3:cb:2b:31:a3:69:51:c4:6b:7a:31:10:49:a0:49:a0:aa:
ea:fa:50:24:70:20:64:33:26:8e:52:1c:c4:47:35:a1:9a:8e:
69:be:29:0f:9a:d5:5c:7e:46:b9:a3:3a:d8:b4:f9:4c:2a:4b:
55:99:67:5c:96:ed:7a:66:97:f5:d2:02:58:b6:06:fd:ab:f9:
9e:0d:7d:8d:78:81:ab:4c:4b:bb:04:34:c9:a9:b0:fa:f0:f8:
6f:1f:ea:8f:c5:0f:34:b9:e1:06:49:30:d3:f6:54:1c:c4:03:
41:e3:c0:bc:dd:58:57:1c:22:50:2a:a3:ec:3f:39:3f:53:c8:
7c:f6:eb:31:12:08:2d:0a:06:15:d8:15:a1:71:fc:69:1a:22:
c9:cf:4e:a8:34:f6:bc:55:4b:de:2b:44:17:72:30:e1:05:98:
2b:d1:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org