Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/viJre3wBvwPTMgpHe5KpkwPcpqw.roa
File: viJre3wBvwPTMgpHe5KpkwPcpqw.roa (raw, json)
Hash identifier: kX4AH07TmiRb7by9oWrNVJQwpdi2pdTvPnvX/tZAKXI=
Subject key identifier: BE:22:6B:7B:7C:01:BF:03:D3:32:0A:47:7B:92:A9:93:03:DC:A6:AC
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 0183E5C4A083CAFECDAE552C5EC125AA4E60
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/viJre3wBvwPTMgpHe5KpkwPcpqw.roa
Signing time: Mon 17 Oct 2022 11:46:51 +0000
ROA not before: Mon 17 Oct 2022 11:46:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45047
IP address blocks: 93.188.216.128/25 maxlen: 25
2a12:9dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:c4:a0:83:ca:fe:cd:ae:55:2c:5e:c1:25:aa:4e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Oct 17 11:46:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be226b7b7c01bf03d3320a477b92a99303dca6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:17:fc:38:51:af:a6:00:f5:34:be:4e:aa:
1d:5e:61:77:4d:11:b7:cd:ae:2e:7d:6c:0d:e0:be:
0b:c7:f4:43:5c:6b:04:1c:6a:10:3f:47:67:37:fb:
11:2e:25:3b:d9:d5:ed:0c:1b:21:e5:bb:d5:0f:5e:
f2:f9:44:07:ee:9b:a1:4e:89:62:e3:f9:a8:97:11:
e9:4d:79:bc:5e:78:55:12:4e:de:30:c9:0a:b0:bf:
18:e5:25:29:91:8b:97:40:f2:3a:19:71:77:d7:25:
b1:f8:d3:dc:d2:57:64:19:ad:b6:f8:08:de:05:43:
b9:97:74:c7:0b:33:cf:45:c1:f8:2f:e7:4e:c0:89:
a5:1a:49:9b:d3:7e:75:03:4a:d6:8f:29:51:ef:3d:
fa:56:90:1c:aa:55:6c:15:82:26:f1:83:7e:81:18:
2c:6e:b1:cd:8f:f8:0b:ce:f6:3d:95:85:5e:3c:bc:
1f:dc:3e:dc:dc:bb:17:54:69:ec:75:fe:82:cd:dd:
46:2f:0a:5f:c3:79:9b:dc:e3:46:2c:b8:8b:ea:8d:
26:55:37:3c:c1:e2:68:2d:e8:f6:95:41:91:15:47:
70:b9:bd:a5:16:85:34:b2:bc:d4:05:84:b3:cb:96:
36:99:f8:a1:15:62:fb:93:ad:b9:02:71:4e:c3:cf:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:6B:7B:7C:01:BF:03:D3:32:0A:47:7B:92:A9:93:03:DC:A6:AC
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/viJre3wBvwPTMgpHe5KpkwPcpqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.216.128/25
IPv6:
2a12:9dc0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:68:73:83:25:b6:71:46:3b:61:5f:11:10:b9:ac:7a:d4:fb:
e7:f3:09:dc:0b:55:ef:ea:05:bc:c9:41:55:46:da:2c:20:a0:
71:08:8f:62:29:eb:b6:ba:7e:c9:2e:7b:01:71:59:4c:4e:e8:
00:50:7c:6a:1c:4e:29:5c:f8:b0:0e:54:06:63:68:1e:f0:a1:
80:e9:ee:63:3a:2c:6d:86:f9:8a:e3:44:e8:5c:a9:c1:88:59:
fb:83:d8:02:0e:ee:0d:49:eb:03:53:50:45:44:ba:73:7a:a2:
8b:d7:ea:fa:1b:ea:9c:62:b5:e9:7e:f0:3f:9c:82:22:22:dd:
71:0d:bb:1e:f1:e0:18:ff:ec:dd:9e:ab:90:60:43:8d:ed:01:
b8:b8:a7:30:2e:07:2a:f1:17:04:07:9b:fc:19:b5:57:40:0f:
0a:50:5c:ad:48:d1:3f:b4:2f:53:4a:53:f9:58:5c:2d:0f:e1:
19:40:ab:21:b5:b5:46:4f:c9:96:79:05:37:95:be:b5:c8:0a:
74:e9:fa:6b:e5:b4:2e:3a:28:65:63:8b:2d:f8:33:7f:46:48:
67:ca:a9:7c:0e:ec:f0:97:c5:36:ba:84:37:54:6f:97:80:53:
4d:cb:0e:a5:d9:90:b8:72:bc:ee:f2:ef:4e:61:44:81:47:a3:
f9:c0:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:00 2024 by rpki-client on console-ams.rpki-client.org