Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/3aqZ7Hjqkx50YQlYSm3ygLW9eK0.roa
File: 3aqZ7Hjqkx50YQlYSm3ygLW9eK0.roa (raw, json)
Hash identifier: 6W1sm6X5hN97gC7J5SWLjVEceetTphQQUgE9GAxVLgM=
Subject key identifier: DD:AA:99:EC:78:EA:93:1E:74:61:09:58:4A:6D:F2:80:B5:BD:78:AD
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 174E2DE5
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/3aqZ7Hjqkx50YQlYSm3ygLW9eK0.roa
Signing time: Sat 01 Jan 2022 05:04:32 +0000
ROA not before: Sat 01 Jan 2022 05:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47523
IP address blocks: 93.174.251.0/24 maxlen: 24
93.174.248.0/24 maxlen: 24
93.174.249.0/24 maxlen: 24
93.174.252.0/24 maxlen: 24
93.174.250.0/24 maxlen: 24
93.174.253.0/24 maxlen: 24
93.174.254.0/24 maxlen: 24
93.174.255.0/24 maxlen: 24
2a03:8ac0:255::/48 maxlen: 48
2a03:8ac0:248::/48 maxlen: 48
2a03:8ac0:250::/48 maxlen: 48
2a03:8ac0:254::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390999525 (0x174e2de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Jan 1 05:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddaa99ec78ea931e746109584a6df280b5bd78ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:7c:93:6b:b0:45:b2:5b:39:0f:5d:02:14:
63:6a:0a:4d:9d:65:32:fb:fb:c0:94:91:84:0b:ee:
6a:5a:61:0a:f4:e1:2b:62:03:a2:e2:55:d2:0d:8c:
2a:08:0e:2d:2c:f3:95:bc:e4:85:f7:22:44:1a:cd:
7c:4a:87:75:68:6c:94:ae:ea:bb:9d:5e:db:29:b0:
43:ac:8b:f1:f3:08:ff:4e:0a:24:51:e3:30:eb:98:
c9:2b:67:e5:7f:4e:2a:54:00:57:e7:ed:2e:9e:29:
b6:0a:b6:fd:ad:81:26:03:e0:30:51:5e:c2:fa:56:
38:4c:18:1b:fa:d2:4e:3e:45:05:62:28:f2:b9:38:
e7:1b:ab:f9:58:43:d9:1b:2d:4c:4c:79:63:54:b2:
b1:1f:83:9c:7e:44:86:84:e2:ff:3a:bb:d9:b2:68:
80:9d:64:b7:18:8a:a2:eb:87:ba:5a:14:2a:2e:3e:
0f:18:95:e1:3d:23:cb:92:52:8d:f0:60:8a:36:e2:
b4:73:31:69:0e:e3:5d:3c:82:0e:89:c1:77:47:e0:
38:69:22:e2:6b:55:9b:aa:02:60:5b:6b:f4:ea:22:
7d:11:8d:da:9b:f9:1c:9d:25:07:03:0f:9e:15:d2:
e9:05:fa:e6:13:7b:dd:a7:20:d8:7e:4c:6d:5c:dd:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:99:EC:78:EA:93:1E:74:61:09:58:4A:6D:F2:80:B5:BD:78:AD
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/3aqZ7Hjqkx50YQlYSm3ygLW9eK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.248.0/21
IPv6:
2a03:8ac0:248::/48
2a03:8ac0:250::/48
2a03:8ac0:254::/47
Signature Algorithm: sha256WithRSAEncryption
01:64:9e:82:0e:7e:9a:cb:fb:76:0d:b6:57:24:f4:27:2d:dc:
9a:88:41:c2:00:ed:28:5f:92:a5:04:aa:18:de:21:bf:2d:c1:
03:bb:4b:1f:b5:b5:73:4d:ad:29:88:a5:12:57:96:83:80:ee:
92:4c:6d:56:42:a6:4e:30:67:07:09:89:ba:42:4e:43:01:6f:
90:f3:23:93:a2:47:47:ec:03:a4:69:a2:af:3d:55:4f:ee:a6:
02:be:c0:d6:ab:18:5f:a6:3d:c6:c0:f1:3c:1e:0c:63:5d:21:
c5:b4:e4:dd:12:42:98:2b:aa:e9:e3:79:1d:55:51:f5:31:87:
04:a9:29:45:1c:43:f5:ab:71:38:32:9c:fe:bd:a6:da:14:69:
74:f9:25:b8:a9:8e:40:4f:31:e6:4c:6f:5b:6d:82:61:1f:1f:
56:7d:bc:d9:cd:2e:85:a9:c8:f6:70:ae:cf:04:82:dd:1e:74:
b3:5d:e3:34:de:61:d7:ab:cd:a8:05:b8:9f:3d:a1:3a:4a:e7:
9e:80:82:a2:e9:47:2d:6a:a2:22:46:3c:7e:bb:f3:d0:1b:53:
af:ac:4b:b0:34:9a:34:9e:09:4c:c7:31:99:17:5a:22:c0:f9:
63:f2:7b:25:75:7e:21:f9:42:3f:9e:ef:4f:bc:7f:bb:79:ed:
3f:52:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:14 2024 by rpki-client on console-ams.rpki-client.org