Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/a9HYW8OKhNTBlLpkhHbsKz991Vk.roa
File: a9HYW8OKhNTBlLpkhHbsKz991Vk.roa (raw, json)
Hash identifier: gou2I9KzRHMLml6C8Y6ifQKBQajDQjUwqPE9wd9/XQg=
Subject key identifier: 6B:D1:D8:5B:C3:8A:84:D4:C1:94:BA:64:84:76:EC:2B:3F:7D:D5:59
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 05B657F3
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/a9HYW8OKhNTBlLpkhHbsKz991Vk.roa
Signing time: Sat 29 Jan 2022 10:51:32 +0000
ROA not before: Sat 29 Jan 2022 10:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 93.152.207.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95836147 (0x5b657f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 29 10:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bd1d85bc38a84d4c194ba648476ec2b3f7dd559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:f7:72:55:13:77:ad:88:a7:23:ea:5d:2a:
00:08:2c:35:7e:5f:4e:3a:16:c4:6d:9a:39:30:27:
c4:a6:45:1a:59:83:49:a8:e7:a0:f1:91:ed:9d:86:
37:da:f2:30:81:40:90:e3:5c:ae:70:9f:0d:ee:64:
1a:6d:5e:ba:25:d5:bb:20:0b:53:f8:9e:7c:45:7e:
23:93:c0:85:bd:ab:17:d1:88:39:02:bc:6f:0d:6a:
40:aa:13:2b:9c:c6:94:8a:a8:41:af:07:d1:d4:e1:
0a:00:63:3e:12:f6:87:3a:58:82:45:2d:b8:34:7b:
a0:26:16:25:5c:ae:e2:a2:52:94:93:21:67:d6:73:
c5:2b:2a:30:1a:1d:3c:1b:bb:d0:ec:c2:02:33:74:
dd:f1:0f:6f:36:71:6e:62:be:4c:8b:77:b5:5d:22:
17:d5:91:cd:9b:7f:ed:9d:7e:d1:4a:fa:82:8d:7c:
6c:e1:bc:5e:74:5c:01:70:69:70:76:02:f2:0b:cc:
bb:0c:0b:f0:3b:7c:8c:d8:64:ba:98:f8:11:50:60:
ce:89:8d:4d:c1:ed:94:19:4c:bb:af:91:9d:9d:39:
35:a1:a7:9a:e3:d6:dc:2e:01:1a:a5:f2:83:44:66:
f0:05:15:a2:07:74:f9:75:8d:0b:d7:ae:6f:07:57:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:D8:5B:C3:8A:84:D4:C1:94:BA:64:84:76:EC:2B:3F:7D:D5:59
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/a9HYW8OKhNTBlLpkhHbsKz991Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.207.0/24
93.152.209.0/24
93.152.211.0/24
93.152.217.0/24
93.152.219.0/24
93.152.222.0/24
94.190.195.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c9:c8:cc:75:2c:4a:2e:46:13:26:9c:a6:8d:84:73:38:15:
12:ca:db:7d:d6:6e:a8:a4:01:d3:66:85:65:44:27:a8:3b:b2:
68:17:9c:f5:e7:53:88:f5:aa:6f:52:49:30:00:ae:fe:9b:9a:
bc:d4:5e:51:25:66:8b:5f:e8:37:47:c1:ef:c0:f5:a9:0c:86:
fd:b1:ab:49:8b:31:c6:b8:1a:43:18:e2:ad:16:70:e5:17:25:
72:52:d9:2e:50:cd:c3:fa:88:35:17:5f:15:7b:14:03:e6:22:
80:92:2b:1a:37:5b:ec:44:32:3b:73:96:fa:66:59:cd:68:a6:
d9:64:bc:33:64:d6:68:4d:6e:2a:b0:39:31:b3:d3:4e:ee:77:
01:ce:ca:3f:9b:56:d4:4a:7c:56:12:3c:26:31:17:08:2c:9f:
2e:ea:81:b5:ab:89:1f:7b:76:b9:39:16:6c:b7:f9:13:19:8a:
28:b6:b7:5b:86:e6:ab:66:e5:76:52:59:9d:cf:aa:45:cd:4e:
a6:ad:f8:e8:25:f3:af:22:3e:0c:fd:83:8e:18:6c:48:16:8b:
47:34:e9:e9:9a:4f:e2:7d:00:bf:e6:bc:11:1d:b7:c5:2f:83:
89:6f:2e:5d:c3:17:2d:ca:0c:fd:64:33:68:cf:00:0a:cc:bc:
5b:97:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:42 2024 by rpki-client on console-fra.rpki-client.org