Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/s-OiLjR-0QvqN5kmqMeZfzBiV7Y.roa
File: s-OiLjR-0QvqN5kmqMeZfzBiV7Y.roa (raw, json)
Hash identifier: AYgIGMeI+XfvQS0HmhjmWpx5cCT5ZQ2XYkalV2bV7bk=
Subject key identifier: B3:E3:A2:2E:34:7E:D1:0B:EA:37:99:26:A8:C7:99:7F:30:62:57:B6
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 053CCA17
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/s-OiLjR-0QvqN5kmqMeZfzBiV7Y.roa
Signing time: Mon 10 Jan 2022 15:35:42 +0000
ROA not before: Mon 10 Jan 2022 15:35:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 93.152.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87869975 (0x53cca17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 10 15:35:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3e3a22e347ed10bea379926a8c7997f306257b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:71:73:8a:46:1a:d0:9f:e6:fd:99:8c:21:
01:9b:6e:4b:22:f5:80:0a:5e:19:b0:29:d8:7b:ba:
96:2b:fc:97:e7:f8:03:08:c9:8d:8c:76:9a:67:a4:
f5:7b:ba:86:5c:f9:12:67:4d:f6:c0:14:d3:1f:ff:
12:3a:d8:f2:0c:b9:78:24:32:fc:fa:3e:70:be:92:
ed:39:e7:d6:18:43:17:c7:e3:6b:3e:78:28:46:e1:
7a:93:ab:16:69:54:26:c0:9a:d1:5a:50:fe:9e:7a:
fd:52:98:df:c2:50:99:f9:b9:02:ba:16:22:ae:18:
c9:04:f7:37:a7:ad:16:d4:b0:ef:71:69:f3:c7:97:
ac:29:d5:93:24:a3:20:d5:69:d8:1f:6c:c8:2c:c8:
17:d0:7d:8e:ac:0d:97:62:be:99:b9:d0:bd:4a:ad:
9c:b0:55:38:f7:c8:e6:98:ab:bd:23:08:e2:5a:79:
79:b6:57:5e:27:c0:a9:93:c3:ca:60:77:e6:bc:f7:
3a:4c:45:58:e7:d6:d3:91:09:7f:f2:b0:c0:13:0b:
0f:c4:a4:48:e2:4d:f4:fa:20:a7:1b:38:6d:1e:21:
0f:61:4c:43:01:64:7f:7d:3a:af:86:a3:82:ea:d3:
45:68:e1:27:f0:54:12:8a:69:8a:e7:b7:60:6f:29:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:A2:2E:34:7E:D1:0B:EA:37:99:26:A8:C7:99:7F:30:62:57:B6
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/s-OiLjR-0QvqN5kmqMeZfzBiV7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.223.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bb:cc:38:e4:7e:a1:0e:f8:e3:7a:ec:a0:9a:f6:19:29:46:
f7:46:38:9d:fa:29:7a:89:1c:a9:38:81:d6:f2:1a:23:2b:aa:
7f:64:10:c4:1d:49:37:86:9c:a3:28:40:43:20:a5:b0:95:95:
25:2c:ac:a1:9b:7a:d0:cd:e0:31:d8:d8:da:1a:b5:bf:03:44:
61:59:63:43:72:ab:88:d8:e0:b3:80:80:49:12:dd:5d:a3:40:
97:4b:8c:1a:10:7a:7b:84:c2:a2:bb:fe:60:97:c1:b4:ec:e8:
24:0f:7b:97:70:9a:c3:1f:8c:87:f0:e9:0b:9d:b4:7e:91:68:
e2:c4:7c:4b:ed:31:5e:6b:e5:82:3e:41:ac:47:6b:b1:e4:e5:
e3:b7:2b:73:b3:6d:f6:e3:6c:cf:a8:df:a7:a4:8a:fa:5c:82:
f9:35:f3:a3:ac:20:19:06:c7:82:c7:9a:95:5e:3a:25:61:14:
97:0d:94:a2:f8:29:a2:0a:51:09:5e:6e:88:62:97:6a:af:27:
35:b0:d6:15:90:27:4d:bd:d5:89:c0:58:5f:db:a5:5c:9b:ca:
55:52:4b:8d:64:d9:0b:b3:63:45:0d:35:aa:7a:32:48:a1:34:
a7:cd:1f:82:e7:ae:ed:04:ef:c8:fd:24:c1:a3:69:e3:02:12:
c7:a9:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org