Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BRxx6AsR5psKygS2qczmo2kQEyk.roa
File: BRxx6AsR5psKygS2qczmo2kQEyk.roa (raw, json)
Hash identifier: 1v97TlciWY+BnSHen9eg7ZTL6FgGGsQPlCHihJzRvyY=
Subject key identifier: 05:1C:71:E8:0B:11:E6:9B:0A:CA:04:B6:A9:CC:E6:A3:69:10:13:29
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01851BA5E98CC69507199F7852C2A527BA88
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BRxx6AsR5psKygS2qczmo2kQEyk.roa
Signing time: Fri 16 Dec 2022 15:55:36 +0000
ROA not before: Fri 16 Dec 2022 15:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53356
IP address blocks: 93.114.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:a5:e9:8c:c6:95:07:19:9f:78:52:c2:a5:27:ba:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Dec 16 15:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=051c71e80b11e69b0aca04b6a9cce6a369101329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:dc:27:c6:1c:46:b4:3a:fa:0a:19:94:8a:
3e:55:33:22:de:42:c4:b9:65:aa:7e:61:f7:97:f0:
a0:66:3d:a0:fe:97:af:34:b1:ec:37:61:04:6e:b9:
de:1c:0f:fa:2d:5e:d7:6d:17:e1:11:39:d6:9b:c6:
ea:36:bf:56:a7:54:9e:26:ac:26:b0:a0:6f:65:33:
50:cd:16:43:37:94:17:ba:a7:b4:2a:8b:84:7b:19:
98:a3:69:28:ae:9a:f8:39:ff:e7:18:52:a4:3d:a6:
62:57:0a:8b:cb:44:45:ee:74:f0:3a:bd:1c:9c:f2:
05:a9:37:d3:29:0f:30:f7:f4:dc:e3:6d:a7:09:53:
df:79:cc:eb:19:b5:f9:74:ed:27:2e:2e:4d:40:59:
c4:af:62:90:c1:7c:1c:1e:9c:e6:15:89:31:e4:e6:
88:a4:b0:96:26:7c:11:14:08:5f:c3:a2:01:9a:c5:
8d:06:fc:0c:11:b5:a1:25:38:13:11:4e:67:9b:4f:
c1:15:73:c5:6f:3c:d7:23:9f:34:64:5a:1c:ff:3a:
0e:a2:41:71:26:81:5a:96:8b:95:24:5e:b3:a8:29:
6d:3c:1d:98:be:29:39:ef:1c:ed:d9:f4:8d:4b:86:
a3:96:1f:1b:51:d9:48:1e:6c:f6:58:5c:7b:3a:af:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:71:E8:0B:11:E6:9B:0A:CA:04:B6:A9:CC:E6:A3:69:10:13:29
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BRxx6AsR5psKygS2qczmo2kQEyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:81:57:7f:b3:c8:0e:04:45:37:99:cc:1a:3d:4b:7f:75:8d:
1a:24:39:84:d2:db:ab:b2:3e:6c:db:f3:21:82:5a:d6:f3:8d:
07:2d:62:7b:bb:3c:d5:81:b8:16:da:5a:b1:14:38:f8:91:95:
bc:02:d6:f1:fc:d2:a3:16:9b:4b:05:18:57:98:35:c3:f9:9b:
24:64:b0:51:ce:bc:8d:a3:38:8e:d7:54:d4:d3:ba:3f:8a:d2:
6c:51:18:46:e4:9f:db:88:0c:53:cf:02:57:00:8c:d4:08:73:
b4:ac:a5:59:ff:66:0d:8f:26:24:bd:86:47:8a:98:6e:9b:68:
46:4b:96:4f:1b:ce:54:33:51:e0:a8:88:ad:d5:0d:76:3d:34:
35:12:d3:d9:ca:c7:b1:bd:09:ab:e4:2f:54:a8:a8:17:f9:a8:
d8:67:05:7e:c2:da:25:c9:6e:53:1d:f9:af:23:41:b9:3a:ff:
64:64:d7:72:79:5a:83:c1:b4:eb:0e:23:bf:61:18:d7:c0:2e:
84:c5:a5:02:99:77:46:c0:69:99:67:01:a6:c3:ba:ce:8b:fd:
c5:97:cd:e9:e8:f8:b4:14:ab:70:4b:00:30:9f:a2:8d:bf:0d:
ff:5d:c5:11:be:b1:b8:29:f7:70:cf:9a:ab:3c:6c:0a:7f:6b:
74:2b:0e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org