Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/9SvnK_d1wNqhgdWFFlTIhjtOaM0.roa
File: 9SvnK_d1wNqhgdWFFlTIhjtOaM0.roa (raw, json)
Hash identifier: rqqsEqBTcHTxROIgYt/jEdrUx+EqOqEDkFbAd+3uMvk=
Subject key identifier: F5:2B:E7:2B:F7:75:C0:DA:A1:81:D5:85:16:54:C8:86:3B:4E:68:CD
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 0A09E105
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/9SvnK_d1wNqhgdWFFlTIhjtOaM0.roa
Signing time: Sat 01 Jan 2022 02:58:20 +0000
ROA not before: Sat 01 Jan 2022 02:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35779
IP address blocks: 188.93.122.0/23 maxlen: 24
188.93.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168419589 (0xa09e105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Jan 1 02:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f52be72bf775c0daa181d5851654c8863b4e68cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:25:86:77:21:db:ad:b6:c3:fa:03:d5:5d:
e2:c9:ce:50:31:76:fd:21:a9:32:4b:17:51:e6:87:
75:ad:04:75:84:ad:d4:b7:e3:37:db:79:64:08:69:
80:3e:12:99:f5:a7:b2:80:37:04:44:92:a6:7f:57:
c6:7e:b0:21:07:c6:9a:78:6e:66:38:6e:e1:6b:68:
7b:d8:54:a7:3c:09:75:e0:bc:e3:c6:89:7d:a0:9a:
76:eb:78:96:f0:0d:91:2f:0a:fc:e7:1d:d3:d8:0e:
5a:d3:6b:08:75:5b:22:77:ff:6c:91:fb:a9:0e:38:
d2:9e:52:af:1e:56:6e:c3:45:70:bd:2b:93:1f:66:
16:a7:a7:88:a9:39:11:d5:a2:25:11:c9:b2:c5:99:
d3:a2:73:5c:48:64:02:be:d0:e7:ac:3b:8b:ac:f7:
f3:26:f4:51:62:2f:40:92:2b:7c:7d:7c:6e:5a:dd:
c6:67:63:55:9d:75:ad:2b:64:60:30:67:05:99:d6:
eb:a1:9c:d6:8b:55:b4:63:00:92:c7:6f:e0:38:30:
0c:b9:42:4f:20:48:d2:11:fd:b6:44:d9:46:e5:d3:
51:0c:68:67:9e:d5:6f:ce:cd:ae:14:b6:48:56:7c:
9e:54:47:db:5d:91:77:2c:40:8b:f0:57:b7:65:41:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:E7:2B:F7:75:C0:DA:A1:81:D5:85:16:54:C8:86:3B:4E:68:CD
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/9SvnK_d1wNqhgdWFFlTIhjtOaM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.122.0-188.93.127.255
Signature Algorithm: sha256WithRSAEncryption
63:b2:53:f3:ef:60:29:4c:f6:d9:9b:57:83:1b:52:6b:f8:3d:
b4:a6:c5:be:74:91:92:26:c2:09:d6:77:1a:8b:72:a2:5a:28:
f1:ec:a3:40:3e:c8:87:07:35:ec:2f:3f:3f:a9:d3:28:46:ac:
57:9d:d8:d9:db:62:97:d5:d8:78:d0:d4:10:4b:ba:12:9a:ba:
9c:56:20:21:d4:a6:79:9b:71:ca:ed:97:ec:1a:33:cd:46:37:
76:19:18:c8:77:34:1f:65:da:7a:3f:ef:ae:35:dd:f2:55:19:
31:3a:8e:2c:ca:a2:3d:5e:83:e1:36:67:de:ab:48:7a:00:a7:
8c:45:db:53:2f:95:b1:29:6b:72:bb:2d:45:07:20:f2:bb:a0:
2b:42:97:a3:93:f0:2c:14:1e:73:81:6e:5b:02:e2:0d:e9:80:
7e:63:02:96:bd:99:5d:4a:03:19:e1:0e:b7:28:ce:4f:de:14:
5b:be:df:70:4d:26:2a:cc:72:48:ee:f7:48:1e:60:53:c9:4a:
fd:0c:37:c4:8f:65:d0:9a:11:c7:a9:ed:d5:26:11:3f:5d:3e:
43:66:c4:8e:04:5f:98:e4:e3:bd:3b:6c:fd:68:31:3e:6d:0a:
b1:41:eb:45:b4:9b:b9:e9:b7:fe:b4:84:f2:c3:c0:69:a4:49:
ef:85:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:49 2023 by rpki-client on console-ams.rpki-client.org