Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/R6GDHIFAvUvByoPYzb6N8sSfASw.roa
File: R6GDHIFAvUvByoPYzb6N8sSfASw.roa (raw, json)
Hash identifier: VAILQm/8tXCSd4GY5hqZcwXBddNbUex0ZaeyP57JqSE=
Subject key identifier: 47:A1:83:1C:81:40:BD:4B:C1:CA:83:D8:CD:BE:8D:F2:C4:9F:01:2C
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 028BEA43
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/R6GDHIFAvUvByoPYzb6N8sSfASw.roa
Signing time: Sat 01 Jan 2022 13:02:59 +0000
ROA not before: Sat 01 Jan 2022 13:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 93.115.155.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42723907 (0x28bea43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 13:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47a1831c8140bd4bc1ca83d8cdbe8df2c49f012c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:5e:80:37:e8:95:10:e0:e9:c8:b8:32:16:
c2:ab:bc:eb:39:6f:05:6d:54:24:7a:ae:02:d3:4e:
82:a1:84:cd:61:a1:82:6d:0b:4e:b6:f4:54:87:39:
ba:13:80:e4:99:e7:4a:35:f2:e3:32:79:89:68:3a:
b4:f8:ef:0e:a4:5f:fc:8e:30:5d:d8:84:02:a1:21:
cc:97:2c:95:8f:a8:ba:18:13:ee:29:8d:4a:e5:2f:
73:f3:b0:82:e4:1c:e7:4a:3e:03:71:d8:25:af:c8:
ff:32:e9:fb:bc:d9:84:2b:a4:d7:6a:c9:95:ac:dd:
b9:e1:94:97:d4:b0:36:ea:fb:0f:ad:8d:0c:57:59:
84:e3:d9:77:d1:57:e2:a6:b4:95:7f:15:2d:da:e0:
8a:ba:5e:1b:6e:70:40:0a:fb:23:55:ca:e6:bb:08:
9a:b9:40:79:78:0c:07:17:49:0d:43:d2:aa:b3:92:
f3:df:a8:c0:7d:dd:9f:9d:0f:29:f7:c3:d7:ab:82:
1f:b7:15:28:4d:b9:db:8a:4c:50:69:9d:e2:9c:f7:
f0:ba:d0:e4:69:e1:3f:2f:ec:aa:54:88:53:d2:c3:
91:03:9a:2a:3e:61:e0:50:df:a2:fb:a0:fd:39:cd:
52:c3:8e:91:19:40:1f:25:c3:1d:4f:00:3b:aa:21:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A1:83:1C:81:40:BD:4B:C1:CA:83:D8:CD:BE:8D:F2:C4:9F:01:2C
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/R6GDHIFAvUvByoPYzb6N8sSfASw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.155.0/24
185.77.249.0/24
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f0:c6:d0:b1:18:26:4f:e1:75:9e:cd:e4:ce:22:c6:a8:1a:
d8:d9:ab:ca:1a:09:38:1d:0a:0e:db:d9:1f:80:33:0c:4e:fc:
ee:95:8d:b9:62:e6:29:05:2b:a6:9b:e5:a3:d2:46:fe:1d:64:
4a:69:dc:96:36:e4:09:31:eb:34:0c:b1:b0:6e:2e:02:10:05:
6d:e0:67:f6:8c:eb:8e:50:c1:63:4c:c3:ff:b2:63:f5:8b:10:
86:bf:16:ed:83:d3:f8:2b:cc:49:4f:0f:95:d2:d0:03:75:0e:
15:1d:e2:0c:2b:b2:6d:f0:a4:dd:3c:2d:01:c1:2c:3d:29:ed:
a9:c2:48:9b:5b:cc:00:e8:c4:b9:f0:61:17:41:93:e5:4e:1b:
c0:bb:4c:1a:66:d6:cf:fa:eb:22:64:ea:bd:9e:22:fe:da:51:
68:5a:25:bf:c6:c3:c7:2e:1a:38:51:54:25:2f:0b:77:b2:db:
e1:92:09:75:da:8c:c3:98:f8:30:f1:c5:52:bb:b7:cf:a2:72:
2f:fe:8d:9d:f6:a6:a3:54:b8:77:1b:9a:23:49:e7:92:6c:61:
55:56:1a:32:53:02:ea:79:0e:3b:43:0a:42:49:34:34:71:d3:
db:4c:58:92:14:ba:b8:56:d2:3a:0a:fb:8c:83:5e:3f:b0:2a:
77:84:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org