Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gkxaP3jw0_FFyGFjqA7Qu0ADhrY.roa
File: gkxaP3jw0_FFyGFjqA7Qu0ADhrY.roa (raw, json)
Hash identifier: GDklzvqKJZy1f+N51FfloMPJIfVpJhzXEPd2KdQcDGk=
Subject key identifier: 82:4C:5A:3F:78:F0:D3:F1:45:C8:61:63:A8:0E:D0:BB:40:03:86:B6
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 05DBBFF1
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gkxaP3jw0_FFyGFjqA7Qu0ADhrY.roa
Signing time: Thu 10 Feb 2022 11:18:53 +0000
ROA not before: Thu 10 Feb 2022 11:18:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.152.210.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98287601 (0x5dbbff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 10 11:18:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=824c5a3f78f0d3f145c86163a80ed0bb400386b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:42:b8:1f:a8:f4:c7:a2:bc:49:b7:b7:67:
31:81:b4:ff:23:72:4c:60:8b:8c:04:35:2e:48:ae:
4a:6f:2a:4f:79:64:31:65:91:55:fb:de:1d:a9:7d:
a3:ba:da:2a:3e:45:2c:b2:a9:02:6b:2b:5f:fa:f9:
cd:f7:6c:9e:b0:d6:fd:3c:a7:40:95:1c:5f:34:d6:
5c:90:a1:31:3c:80:c9:30:d0:52:ff:2c:b5:79:db:
83:e6:92:05:01:ba:05:9a:52:f9:cd:c3:73:e2:96:
20:e2:fd:23:6e:13:af:cf:3e:89:12:3e:19:34:89:
03:13:6f:ea:af:72:5a:89:40:87:c2:93:53:ca:26:
71:9b:7f:68:6c:ab:91:59:1f:1a:36:b8:01:1f:94:
ea:5f:df:ec:bf:35:11:3a:13:31:be:51:4c:50:4c:
c6:16:5f:f2:cc:5d:39:1b:78:c1:b5:06:8f:db:3d:
a6:d0:a8:17:5f:34:df:f3:af:84:8a:54:ac:3d:05:
aa:89:3e:7b:c4:47:11:06:08:79:18:a5:30:b9:09:
d1:ed:01:d9:cb:f5:d7:90:a7:43:26:d4:7b:38:d0:
fd:5c:6d:6b:6b:40:32:64:19:a5:fe:bd:51:1e:11:
b9:f0:31:b2:fa:1f:43:15:2f:19:00:68:04:6a:15:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4C:5A:3F:78:F0:D3:F1:45:C8:61:63:A8:0E:D0:BB:40:03:86:B6
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gkxaP3jw0_FFyGFjqA7Qu0ADhrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.210.0/24
93.152.218.0/24
93.152.223.0/24
93.152.226.0/23
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a8:e2:dd:ec:61:b2:f4:10:af:7b:d3:d3:60:ae:0e:6d:ba:
c8:4a:92:11:d8:1e:98:4c:fe:2c:d5:90:2a:2f:67:70:21:7a:
66:59:ee:20:41:c0:9b:04:4f:03:ce:94:0d:96:c0:a3:04:30:
07:63:d7:ec:9a:a5:e9:02:1a:53:e5:77:03:50:5a:8e:5d:f8:
ce:4e:84:33:40:03:2e:09:20:9d:b4:1d:46:b1:29:9a:ff:6b:
50:b0:f5:54:d3:47:82:5a:dc:84:18:1c:79:5d:e1:6d:ee:fd:
7a:b5:c7:8e:8e:39:f6:51:20:07:e0:7c:71:46:1b:44:fb:6d:
96:b6:8e:7c:b5:ae:d1:04:86:ee:23:5c:1a:94:c0:f7:0d:0e:
d3:84:be:77:53:5e:67:76:91:ae:1e:ae:b4:65:27:5f:e8:4f:
d7:11:69:cb:cc:d8:b9:1b:c0:85:13:6d:55:4e:f3:7d:e2:57:
4d:b2:99:6d:1f:a6:d5:d1:94:9e:a9:76:0d:52:98:2a:83:20:
4d:0c:c3:76:ec:e8:1a:96:c5:de:df:09:66:74:3b:e2:0a:fc:
7b:ab:e2:a5:f6:3e:d5:85:5d:ac:ce:7a:b7:72:52:8f:ce:6f:
8f:4a:07:7c:2c:33:5a:24:f8:e2:13:e5:f3:d9:f9:b5:f3:07:
12:b8:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org