Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7Z7xkzBzdmW9rQeFqstVZDpOF1U.roa
File: 7Z7xkzBzdmW9rQeFqstVZDpOF1U.roa (raw, json)
Hash identifier: DmHjidhDZRKwtitCOiCWGJ7hgxf3wBzO55HWjbnv4p0=
Subject key identifier: ED:9E:F1:93:30:73:76:65:BD:AD:07:85:AA:CB:55:64:3A:4E:17:55
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01836B2F4306C44DDA6AFCBDDF09F6FBD4FD
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7Z7xkzBzdmW9rQeFqstVZDpOF1U.roa
Signing time: Fri 23 Sep 2022 16:30:02 +0000
ROA not before: Fri 23 Sep 2022 16:30:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 93.120.38.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
93.120.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6b:2f:43:06:c4:4d:da:6a:fc:bd:df:09:f6:fb:d4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Sep 23 16:30:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed9ef19330737665bdad0785aacb55643a4e1755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:ae:da:5d:eb:9f:3d:c5:d3:08:a0:f9:7e:
b8:fd:40:74:43:74:cc:6a:50:42:b2:c6:a3:6a:dd:
d3:a0:ce:ae:a0:ca:0e:2f:02:46:b9:8e:a7:bb:15:
a3:7c:a9:33:93:46:11:f4:b1:16:0a:bc:49:1e:13:
cd:d9:1d:ec:16:75:24:cb:ad:93:58:86:25:13:f3:
f4:f7:76:a0:21:88:0c:f0:d3:79:0f:7f:7c:4f:4c:
bc:5c:48:1d:a2:1c:19:e0:ca:3c:5b:b7:be:93:13:
54:11:cc:c5:28:88:8b:93:c6:45:72:03:ae:08:b1:
35:f8:c1:71:71:b3:2d:d0:d7:eb:ea:6d:11:38:9c:
30:14:d7:72:6f:2d:fe:1b:c9:c4:8f:e8:a3:d8:0f:
a9:83:8a:bf:bd:24:48:81:4c:19:3a:f2:db:0b:f0:
2f:9b:e3:d9:0a:cd:58:56:fd:7d:31:8d:8b:72:9a:
82:86:1e:b2:1c:0a:4e:c5:6e:96:7f:b1:3f:06:dd:
c3:b6:e0:3b:26:66:e9:93:a3:f2:c6:0c:e3:13:45:
e6:88:83:6d:a1:50:16:c1:87:ef:09:96:70:e1:1b:
a1:07:d4:a1:b2:8e:a1:01:d2:aa:d7:fe:8c:6b:e0:
e1:36:37:d8:40:66:70:92:d3:59:d4:9a:1a:5a:b0:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:F1:93:30:73:76:65:BD:AD:07:85:AA:CB:55:64:3A:4E:17:55
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7Z7xkzBzdmW9rQeFqstVZDpOF1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.36.0-93.120.38.255
Signature Algorithm: sha256WithRSAEncryption
55:f5:e4:45:85:cb:24:90:42:a2:00:30:dc:20:27:f8:65:a0:
5f:73:81:02:b5:1d:a2:1f:ae:b6:0e:0e:1c:af:33:ae:a4:38:
b2:fa:88:d7:5d:3f:6c:18:7b:e9:db:c2:aa:5b:26:af:25:bd:
99:9a:d1:70:a1:1a:a3:c6:04:08:28:bf:b6:98:49:ac:d3:96:
6f:94:08:38:88:a6:72:0f:e0:06:fd:ce:13:fa:bf:1d:c2:92:
0f:54:12:fb:cd:47:71:03:22:81:b3:84:2e:c1:5d:22:8b:9a:
b1:f0:cb:ee:22:dd:4b:83:54:75:b5:19:47:c3:e0:f6:a5:11:
8e:ca:16:65:1d:25:ed:c2:f1:62:e0:55:76:ba:05:79:4d:50:
6c:4e:76:ae:2b:66:c0:ea:90:9a:2f:10:2b:d1:43:98:6e:69:
cd:7f:4f:99:84:5a:20:37:22:67:84:f8:b5:9f:cf:2c:14:b6:
8d:8f:d1:87:69:61:af:45:13:ac:d1:57:3b:18:df:01:e4:38:
ff:8c:52:7f:bf:c1:82:7b:f1:23:ed:e8:a9:85:ba:8a:1e:49:
10:e4:7e:22:b9:dc:d1:45:c8:0e:75:2f:b6:54:df:7e:8e:43:
cc:b1:b9:7e:d1:7b:db:1a:18:0d:b8:ce:16:05:e8:93:e3:83:
1a:2c:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org