Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/6cmveX5BaPcTZfFohrgHa4EUGgw.roa
File: 6cmveX5BaPcTZfFohrgHa4EUGgw.roa (raw, json)
Hash identifier: MX33XgjNxhIByLbwr6MgzmfP6ZzKfXbfTwgE7Erq4Uc=
Subject key identifier: E9:C9:AF:79:7E:41:68:F7:13:65:F1:68:86:B8:07:6B:81:14:1A:0C
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 04B2DF23
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/6cmveX5BaPcTZfFohrgHa4EUGgw.roa
Signing time: Sat 01 Jan 2022 14:06:57 +0000
ROA not before: Sat 01 Jan 2022 14:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12637
IP address blocks: 93.157.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78831395 (0x4b2df23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Jan 1 14:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9c9af797e4168f71365f16886b8076b81141a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:0d:df:f7:ac:e8:78:ca:0f:8c:30:63:13:
99:d8:4a:ae:ad:87:c8:cc:48:e6:46:ff:31:ce:49:
b1:d9:59:70:05:54:0f:f0:25:4c:74:d2:d9:ac:85:
ba:ad:29:94:df:7b:a2:15:08:ad:2b:84:47:14:df:
53:e0:b8:7b:28:45:ac:e1:b2:d1:d6:b5:36:cb:e7:
a0:69:c4:51:45:7f:8a:3c:6a:f1:f6:e8:2e:0b:f9:
ff:35:0f:be:1b:2a:be:0e:49:c0:03:f8:0e:0e:20:
cb:6d:e7:8b:c6:ef:f4:e0:de:3d:01:38:8c:d9:c9:
59:8d:95:b6:71:17:e5:52:09:1e:c6:0f:fd:e4:92:
ac:38:2c:4e:a2:27:dd:ff:7c:3c:a2:08:7b:70:a6:
6a:dc:53:b4:df:3f:bc:25:78:41:80:4e:88:1e:00:
64:5a:f6:53:20:91:ba:61:b0:c1:47:78:d0:88:7f:
83:2b:49:e5:94:68:98:29:b4:17:96:ab:c6:71:bf:
3e:2b:4c:e0:b2:22:e4:6c:d8:e3:31:9b:f9:41:c7:
ba:06:67:f5:b8:c3:7f:51:c4:fd:34:61:90:cb:0d:
38:dd:7d:e4:80:3e:12:3b:8c:a4:ec:b8:03:d5:89:
7f:94:a6:7b:47:30:8b:9c:57:e2:fa:93:53:6a:b9:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C9:AF:79:7E:41:68:F7:13:65:F1:68:86:B8:07:6B:81:14:1A:0C
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/6cmveX5BaPcTZfFohrgHa4EUGgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.185.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:30:cc:22:9e:46:17:44:34:aa:ff:9f:29:86:8e:c3:53:b3:
ec:db:72:9f:8f:ab:35:c5:a4:f2:12:0c:b9:f5:59:02:b5:a2:
ae:c4:38:23:dd:f3:04:12:3a:2d:42:ac:83:f6:39:39:de:ad:
86:1a:dd:db:3f:2b:e7:17:3a:84:a5:25:07:9c:ee:0b:54:c6:
4a:b6:a0:0f:32:b1:94:c1:68:64:3b:46:0c:1f:d7:6b:fb:be:
90:7a:4d:19:87:bc:d7:28:ad:24:99:6e:d8:bb:63:48:19:68:
3a:89:08:14:71:4a:ef:ae:11:f9:d4:89:02:36:c8:8f:a3:9a:
15:51:e4:ad:11:e0:86:25:89:8b:d4:c2:4f:9d:c6:97:5f:f3:
42:c6:84:29:e4:34:2c:3e:26:0a:ca:89:7d:bf:88:16:46:44:
17:50:bc:32:a2:4f:82:af:f0:9f:d6:13:00:e3:00:ba:68:30:
09:40:ff:a4:c4:33:05:56:34:fd:9e:f0:44:2d:31:d7:c3:59:
f8:00:7e:5f:ac:46:c6:86:4a:cb:1c:fd:39:50:37:42:d0:52:
f6:a2:91:e3:17:01:cc:9d:07:05:6c:1e:24:6d:45:11:fb:98:
1e:e9:19:51:84:40:c9:f1:46:16:ea:3a:ee:93:35:51:cb:dd:
0f:89:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:03 2023 by rpki-client on console-ams.rpki-client.org