Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/n8t5d6EMfOh16aARuqY5_Q6PU1U.roa
File: n8t5d6EMfOh16aARuqY5_Q6PU1U.roa (raw, json)
Hash identifier: 0G8ORDqnq5/VOIlhRlT5tXZg1xTqRvgS0yDQdMmrIDE=
Subject key identifier: 9F:CB:79:77:A1:0C:7C:E8:75:E9:A0:11:BA:A6:39:FD:0E:8F:53:55
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 0184142F780BD318BEB8C659BE1FC061F8E8
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/n8t5d6EMfOh16aARuqY5_Q6PU1U.roa
Signing time: Wed 26 Oct 2022 12:06:06 +0000
ROA not before: Wed 26 Oct 2022 12:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 185.90.220.0/22 maxlen: 24
83.229.113.0/24 maxlen: 24
193.57.94.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:2f:78:0b:d3:18:be:b8:c6:59:be:1f:c0:61:f8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Oct 26 12:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fcb7977a10c7ce875e9a011baa639fd0e8f5355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:51:cd:67:8c:89:78:21:c9:b1:27:ad:f1:ae:
7f:df:c3:98:00:44:ff:d4:0e:42:29:cc:78:87:8c:
ba:5b:f3:c0:77:e4:ee:c5:28:66:72:6f:c9:33:f1:
1e:10:f5:4b:7e:ea:ed:74:ff:fe:8d:39:5a:27:e7:
23:5a:87:31:a7:40:5f:3f:5c:15:3d:52:fc:d2:22:
48:3a:ed:68:be:50:91:c9:57:20:04:94:06:62:ed:
11:5c:68:4d:18:8d:0c:d3:50:77:d6:02:5f:fb:90:
1b:0e:c5:6b:44:11:af:6c:bb:74:d0:14:dc:a7:f1:
a6:16:f5:81:3b:19:7c:09:ca:bf:b8:71:17:09:88:
98:c7:41:36:da:80:39:99:ce:d3:ae:62:42:51:53:
1e:65:5c:6c:17:6f:cf:6a:9f:c3:b7:04:c5:74:cf:
d9:67:f3:fb:7a:57:08:bd:5b:61:fd:c7:fe:21:10:
76:63:63:40:3a:4f:2c:03:98:9b:3e:cb:da:cb:90:
1c:0e:59:1a:fc:e7:97:31:92:9d:9a:90:7e:cc:ce:
bd:6d:08:8b:b7:61:b1:9f:b7:2e:20:5e:4e:ec:88:
a2:a5:c7:88:a9:25:7e:19:71:ba:0e:b4:97:8e:50:
d9:81:cc:5b:9b:7b:2a:06:d2:b6:67:00:11:94:ab:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:79:77:A1:0C:7C:E8:75:E9:A0:11:BA:A6:39:FD:0E:8F:53:55
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/n8t5d6EMfOh16aARuqY5_Q6PU1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
193.57.94.0/23
Signature Algorithm: sha256WithRSAEncryption
55:ec:f4:94:0c:d6:5a:63:0b:95:8c:90:37:df:e3:d2:fb:28:
76:3e:79:79:16:46:b7:b7:a0:51:7c:5c:6f:30:36:55:8e:31:
a5:f8:9b:09:f3:66:51:b2:aa:72:c2:35:f1:48:38:45:77:66:
55:d9:89:8c:fd:f2:9e:51:01:0d:29:af:1d:39:1b:1b:22:f8:
a9:72:1d:dc:61:c0:51:eb:1d:b6:ed:6e:2a:2e:38:6d:dc:f6:
4f:62:63:0d:11:fa:91:e3:b5:a7:6f:a2:82:e1:5f:1d:9a:7b:
ac:61:d6:ad:49:9e:a7:c8:3f:cb:d1:3d:2c:7f:e8:d9:d1:12:
b0:f6:cc:ed:b0:ca:23:78:55:21:cf:1f:b0:c4:15:0c:4c:3c:
a3:17:73:09:d4:ea:dd:53:96:1e:52:0b:6e:e7:85:7a:13:5d:
b6:a5:7e:a6:87:26:8a:c4:c5:63:c0:a5:b0:17:2b:90:10:70:
fb:39:71:3d:ce:ec:0a:f9:86:1d:f1:ea:1d:c2:a7:d3:50:23:
f1:e8:ee:ac:05:3d:5d:4b:1e:8f:72:72:7c:23:6b:88:4d:bd:
dd:03:5b:cc:17:59:cd:1d:02:15:bd:42:b9:1d:72:31:06:a2:
8b:2a:aa:c7:62:c3:09:df:64:63:47:8c:30:1a:6c:8d:bf:39:
97:aa:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org