Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/8Fgv4U0lZ5PBLmyumniACyH6W7A.roa
File: 8Fgv4U0lZ5PBLmyumniACyH6W7A.roa (raw, json)
Hash identifier: Kw+Li7Ocq3PSmIulvJeXP5pe3Nhm9sQYQw94cd6A4As=
Subject key identifier: F0:58:2F:E1:4D:25:67:93:C1:2E:6C:AE:9A:78:80:0B:21:FA:5B:B0
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 0AE9A88C
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/8Fgv4U0lZ5PBLmyumniACyH6W7A.roa
Signing time: Sat 01 Jan 2022 01:51:46 +0000
ROA not before: Sat 01 Jan 2022 01:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43905
IP address blocks: 93.91.96.0/21 maxlen: 21
185.85.130.0/23 maxlen: 23
213.234.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183085196 (0xae9a88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jan 1 01:51:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0582fe14d256793c12e6cae9a78800b21fa5bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:8f:aa:ab:8f:ec:a1:9d:49:97:59:05:84:
f2:6d:07:ff:5c:9f:34:22:2d:f9:d8:65:7e:d6:58:
1a:c5:78:47:28:82:c7:15:b5:83:e2:1f:82:77:56:
68:a9:25:c2:b9:99:51:97:d7:67:2e:19:c8:7e:93:
12:0d:0c:66:f6:3c:8b:36:c4:3c:36:3e:28:32:1d:
2a:d2:30:ae:56:4b:d1:4d:6a:d8:4e:d4:cd:de:f3:
b3:ae:7d:fa:60:66:fc:e4:4c:2f:ea:5a:8c:5a:be:
4e:c8:53:7a:dd:50:40:3f:ad:2a:76:56:f2:9f:92:
c1:73:b5:27:00:c1:11:20:a4:4d:d6:d1:80:2f:aa:
21:2b:cc:54:74:5f:6c:30:14:e5:1f:db:75:0a:03:
01:ee:b4:dd:e2:57:d7:58:ad:0f:d6:24:76:20:26:
d8:e5:fd:85:f8:a2:93:c0:26:0b:84:aa:95:5d:f2:
02:f8:71:75:a8:02:7a:49:bd:16:2f:b8:0c:95:23:
9d:eb:61:fb:ad:88:94:0b:39:b2:ef:4d:18:1a:3d:
e3:d6:d6:84:bf:65:1b:a7:1e:38:da:be:14:57:f3:
b0:02:2a:3f:c8:1f:0d:5a:7f:9d:b8:ba:fa:2c:93:
ed:e4:8c:ec:73:c7:4c:0d:f6:31:5e:a6:e2:4c:23:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:58:2F:E1:4D:25:67:93:C1:2E:6C:AE:9A:78:80:0B:21:FA:5B:B0
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/8Fgv4U0lZ5PBLmyumniACyH6W7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.96.0/21
185.85.130.0/23
213.234.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:e5:b0:48:7a:40:81:3f:0c:af:fc:da:c4:a5:11:a1:0f:ed:
5e:39:a4:a8:7b:af:26:94:a6:83:a5:94:b7:da:80:d6:cc:ca:
0d:d9:15:67:88:d2:0a:f3:c7:39:3a:44:ab:3f:8f:ab:6b:e5:
ad:11:43:3b:da:c0:97:cf:1b:81:20:63:b6:27:dd:e0:27:48:
9e:77:ae:21:3e:f6:cc:1f:dd:cd:fb:23:46:62:79:b5:47:4d:
f2:0e:0a:3e:ee:6c:c1:71:a6:80:f2:73:4f:c6:05:95:29:3b:
01:8d:b7:35:23:98:ff:c1:19:bb:2e:a4:94:29:1c:e7:a2:97:
b8:60:8f:75:56:cf:5b:96:62:0d:82:b5:44:73:eb:f8:6f:2f:
99:88:2e:51:e7:b0:61:48:b3:42:2d:bd:81:d8:db:fb:80:d6:
f1:fc:ae:07:78:8f:bb:80:66:3c:a6:9c:e8:bc:62:ac:66:e1:
d2:7c:21:f9:52:1a:06:ab:85:92:15:1a:70:f4:07:2a:77:82:
da:e1:60:7e:37:f2:ce:d1:a0:28:2b:23:d5:cb:98:62:a0:7e:
52:d4:7e:1a:96:61:1a:b7:0f:7d:6b:e4:df:06:6b:c9:f0:4e:
f6:ee:23:a6:6a:d9:75:30:a1:10:0a:85:11:b2:c5:63:e3:ce:
e4:d9:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:01 2023 by rpki-client on console-ams.rpki-client.org