Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/SMFfqE2vDdKT31xRnVYauNLZY2g.roa
File: SMFfqE2vDdKT31xRnVYauNLZY2g.roa (raw, json)
Hash identifier: F99gPZS73q4mlCsQuOKcD+OMxPTJfdxgQ9mTJr+VaMY=
Subject key identifier: 48:C1:5F:A8:4D:AF:0D:D2:93:DF:5C:51:9D:56:1A:B8:D2:D9:63:68
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 0183E6478EC512A660B3CFCC6398CAE6DD4B
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/SMFfqE2vDdKT31xRnVYauNLZY2g.roa
Signing time: Mon 17 Oct 2022 14:09:52 +0000
ROA not before: Mon 17 Oct 2022 14:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45047
IP address blocks: 93.188.216.0/21 maxlen: 21
93.188.216.128/25 maxlen: 25
2a12:9dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:47:8e:c5:12:a6:60:b3:cf:cc:63:98:ca:e6:dd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Oct 17 14:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48c15fa84daf0dd293df5c519d561ab8d2d96368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:bd:43:22:89:74:b5:d6:98:50:b2:67:f4:
7d:ba:05:b2:39:fd:dc:0f:27:12:b0:88:b6:50:a1:
35:2e:68:85:b7:81:1d:2b:ed:8a:bb:6d:a8:a6:9a:
95:b9:7c:02:18:8a:36:90:63:2c:69:8a:02:9b:b4:
b2:a5:1b:de:99:a1:ca:21:33:7c:78:d3:97:da:2d:
81:7a:10:a7:6e:ec:d8:6f:0f:a5:27:8f:bc:8b:a0:
4d:b3:9c:b8:d7:31:73:23:4d:a9:35:35:e6:c8:63:
51:57:0c:ac:79:88:1c:11:fc:ca:de:58:6a:a6:cc:
e4:cf:ed:ef:1e:88:8b:01:fa:04:89:29:7e:13:46:
cf:e3:9b:aa:f4:10:97:7f:a1:61:21:66:bb:97:82:
3b:11:f8:44:28:c7:02:95:fc:c2:44:19:14:5a:05:
40:22:22:36:dd:9b:45:4c:fe:d5:ae:40:bd:53:a1:
e6:3b:9e:c4:ec:b8:4d:23:b6:e3:70:18:e0:3a:4a:
24:49:6c:8f:7a:b6:0b:7c:24:c2:92:2a:b5:9b:1c:
06:30:5a:e6:ce:05:df:a7:c5:5e:87:66:74:be:76:
79:23:92:c5:46:ce:1a:c3:f8:ca:20:7f:9a:3f:0b:
32:9e:89:c0:3f:58:c0:45:c5:a2:0f:f2:ff:6a:c2:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:5F:A8:4D:AF:0D:D2:93:DF:5C:51:9D:56:1A:B8:D2:D9:63:68
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/SMFfqE2vDdKT31xRnVYauNLZY2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.216.0/21
IPv6:
2a12:9dc0::/29
Signature Algorithm: sha256WithRSAEncryption
31:3c:b5:1a:0f:f0:f4:83:52:4a:fe:50:76:62:47:d3:51:77:
11:3c:13:2a:57:fd:80:9d:de:a7:b9:44:d6:ed:f9:3a:85:9e:
6d:bd:3c:b1:2b:83:f0:08:83:9d:43:e4:a2:35:d0:c7:25:f8:
78:c6:b6:90:a5:26:5f:14:fb:ff:2a:9c:10:e2:9a:b2:53:d9:
4e:f9:ba:bd:e8:3a:90:ea:fa:70:a5:e0:2f:e9:cc:9f:f1:23:
b0:df:f4:43:97:6b:69:fe:ba:80:bc:c9:57:41:46:b5:b7:02:
71:2c:f0:a0:0f:dd:43:25:3e:a9:9e:b4:e7:20:6c:3e:ee:f2:
0c:a6:87:e9:83:77:0b:39:9d:3f:ae:49:f8:85:8a:4c:1e:e0:
ec:b3:0d:96:ae:60:11:d4:93:ec:32:cc:d7:2f:2a:f3:ac:33:
df:b5:54:26:a7:d2:66:82:8d:2a:ea:1c:6e:4b:c8:1a:07:7a:
8b:73:c4:85:87:25:19:c9:7b:50:93:dd:a0:3b:30:fb:b5:0d:
3d:50:db:78:11:fe:87:8b:f5:c3:a0:b3:bc:be:dc:7e:b2:d0:
4f:d3:8c:89:6d:a7:b3:1d:f0:03:c7:cb:e0:bf:93:d0:11:8b:
25:1e:aa:22:08:53:60:8e:8f:18:c1:9a:b9:66:61:c0:cf:20:
bc:60:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org