Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/g3KUlKMBF2G-8l4JmB2RZR4SS7o.roa
File: g3KUlKMBF2G-8l4JmB2RZR4SS7o.roa (raw, json)
Hash identifier: WMRXxeA3RuXJSNecKcrfhRlicOdUFPreLx1blbS+Zyo=
Subject key identifier: 83:72:94:94:A3:01:17:61:BE:F2:5E:09:98:1D:91:65:1E:12:4B:BA
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 056FF413
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/g3KUlKMBF2G-8l4JmB2RZR4SS7o.roa
Signing time: Wed 12 Jan 2022 12:40:59 +0000
ROA not before: Wed 12 Jan 2022 12:40:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91223059 (0x56ff413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 12 12:40:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83729494a3011761bef25e09981d91651e124bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:f3:ac:18:d2:68:f1:36:2d:5f:ec:61:d9:
78:47:61:04:69:a6:46:3a:91:0c:50:68:f0:99:e6:
23:ef:74:ac:00:87:4d:ff:70:8c:13:0d:eb:83:ac:
5e:15:44:80:95:e0:c4:b1:4e:59:e2:5e:18:5f:72:
13:6d:62:2c:27:49:b9:84:00:44:47:61:8f:2f:82:
cd:fa:c1:be:d7:bc:ed:d3:c5:74:ea:04:9a:37:8b:
3a:99:2c:7b:39:15:c1:20:75:66:19:e4:43:26:fa:
12:77:cf:c8:93:cb:7e:98:7c:39:af:29:36:5c:55:
45:02:1f:c5:42:3d:31:10:cc:5f:25:a7:1e:10:a6:
ad:40:9f:65:fc:e7:64:df:f6:ca:ce:0d:a3:79:da:
c3:7d:fa:e9:24:f3:a8:8c:c8:d5:73:4a:d1:23:29:
47:9e:3c:48:bc:68:88:28:86:ba:93:0b:a0:06:3d:
d2:01:41:6b:fd:80:aa:13:38:79:3a:20:4a:83:08:
9d:79:bd:96:96:6e:a0:ea:a6:fb:17:c7:8a:0a:fa:
c6:d6:4c:10:58:77:06:f6:b6:16:7c:4c:b0:6b:63:
ab:0f:05:8a:dc:e7:db:99:c2:f3:70:52:1f:fc:1e:
e1:b2:9d:ae:9d:68:5c:76:5e:ac:ff:93:32:a3:8a:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:72:94:94:A3:01:17:61:BE:F2:5E:09:98:1D:91:65:1E:12:4B:BA
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/g3KUlKMBF2G-8l4JmB2RZR4SS7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.205.0-93.152.206.255
93.152.208.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e2:8f:86:e2:cc:6a:e0:3d:44:0c:b7:4b:69:d3:90:3d:30:
32:60:69:c8:d0:cf:70:61:6e:cd:7f:97:7e:8a:7d:aa:37:2c:
3c:96:fd:f7:21:4b:51:8c:0d:49:ea:66:d8:2e:ee:c4:d9:21:
5d:ce:38:92:e5:3c:25:74:b9:db:a0:25:75:a0:d6:b4:40:19:
18:f1:51:63:26:1d:ec:e7:ca:53:cf:05:d9:5e:1c:a8:b5:70:
ee:67:5f:8a:bd:22:ff:e5:7a:5b:0b:d2:b4:ed:57:a4:20:9e:
cd:20:1c:59:6f:5b:84:bc:8e:2b:64:30:28:29:f1:05:2c:e5:
90:5b:ca:79:a0:0d:60:84:3f:38:4a:8a:71:b0:25:f0:50:02:
66:2d:ff:85:bb:2f:3a:a7:b7:4d:a4:c4:45:48:68:9c:dd:ac:
c2:a1:a5:10:13:9b:04:d1:8c:a9:4a:56:ac:33:31:83:58:5c:
dc:97:b6:4b:8d:e5:fb:36:b3:b0:0d:68:10:06:68:4c:68:85:
05:31:b7:19:a9:d0:2c:b3:a7:ca:d1:cf:db:04:cf:b2:7a:d3:
31:8d:71:ed:9c:ac:df:17:e1:c7:ac:30:b9:e4:c0:c7:3b:97:
6f:53:d8:ff:c3:92:e5:ea:2a:39:4a:57:52:ac:e2:1d:7a:30:
95:63:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org