Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/tSqIrYYVQr9yA3v3KLqrsWYS8oM.roa
File: tSqIrYYVQr9yA3v3KLqrsWYS8oM.roa (raw, json)
Hash identifier: SjMfd39HgCxFTy1Jl4NBTyRVVHTTXaCMRu/jnBsIA6g=
Subject key identifier: B5:2A:88:AD:86:15:42:BF:72:03:7B:F7:28:BA:AB:B1:66:12:F2:83
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 09A8405C
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/tSqIrYYVQr9yA3v3KLqrsWYS8oM.roa
Signing time: Sat 01 Jan 2022 04:55:56 +0000
ROA not before: Sat 01 Jan 2022 04:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8953
IP address blocks: 93.113.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162021468 (0x9a8405c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jan 1 04:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b52a88ad861542bf72037bf728baabb16612f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:14:37:4b:3e:cd:3a:f0:99:6d:16:c5:c8:
89:59:47:91:0e:65:0f:6c:72:f1:87:c6:a0:7c:d1:
2e:86:30:69:98:6e:21:7a:5b:a6:c6:af:f1:d7:47:
7b:9c:69:d1:2b:16:d4:8e:bd:10:68:ba:23:75:ac:
b8:95:8a:45:37:ba:76:87:9d:6c:97:57:b3:59:db:
db:ce:1a:3c:97:8f:6c:3f:92:9b:31:0e:80:b4:0d:
07:b0:c5:0d:b1:fe:e2:9f:c4:55:a9:ef:fb:a1:e4:
45:36:21:0f:e0:33:d5:5d:7e:cf:5c:36:fc:fa:0f:
69:44:29:fa:6a:66:a3:53:99:4e:f6:9e:6e:89:5f:
4a:9c:1c:fa:69:bf:78:81:ec:c9:ab:4d:8d:59:e7:
a3:c6:b7:fb:94:7b:1b:b4:6c:e7:cf:36:7e:6c:9b:
d5:a5:05:c7:36:1b:48:84:08:52:8a:2b:ec:30:60:
fc:30:dc:b9:5d:f3:92:c0:4b:b8:43:90:76:65:df:
c7:36:12:eb:1e:08:8e:d8:50:b1:df:60:49:63:c4:
1e:7e:66:95:2b:dc:b8:b3:d8:c4:69:85:70:e1:41:
da:09:bf:27:2e:7e:f3:43:00:50:66:9f:35:0a:27:
3f:a9:8b:63:95:f0:f2:d8:f8:76:f8:27:1a:79:a5:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2A:88:AD:86:15:42:BF:72:03:7B:F7:28:BA:AB:B1:66:12:F2:83
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/tSqIrYYVQr9yA3v3KLqrsWYS8oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:15:ea:2f:82:ee:d8:ad:b7:b1:18:2a:dc:b8:9c:23:6f:51:
e8:eb:88:9b:62:c0:dc:57:cb:78:91:cc:c0:5d:6c:37:ab:a9:
67:6e:db:fa:4c:af:f0:bf:d0:bb:38:93:87:8f:0a:63:8b:21:
6d:5a:53:9a:ba:a3:b3:d6:89:ac:7d:dd:ed:2e:24:3c:21:7a:
bc:4d:e4:5d:5a:7b:5f:f1:a3:c3:b2:3c:1d:f0:5e:4e:48:0f:
ff:d3:a6:1b:a5:a3:30:f4:bf:14:af:65:6d:57:dd:d4:b5:97:
f9:d0:00:c4:00:62:65:50:30:1b:6e:ce:bb:74:39:48:4b:a2:
92:1f:66:6c:cb:35:0a:4f:c9:1d:38:8b:61:dd:2a:5f:ff:13:
01:36:d9:69:ab:a0:dc:39:5a:87:1d:37:71:31:93:f3:5e:b4:
ac:99:c1:45:5e:01:97:be:0e:6d:d2:2a:29:b7:b9:52:4b:a3:
a1:1f:7d:63:f0:92:71:fd:b7:33:64:f7:2d:f5:4f:57:a6:69:
a6:89:dd:c9:99:24:d0:bb:10:4e:5e:09:46:da:7f:9a:0a:25:
0b:8e:fe:d6:2e:50:a0:a4:5c:f4:97:e7:29:a8:61:43:e7:e4:
07:88:57:20:47:fe:6c:e6:0e:47:1b:8d:0b:b3:6b:3d:1b:6e:
43:33:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:31 2025 by rpki-client