Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/M5iAQH84nVSDF4zwwhpoQn_Bzq0.roa
File: M5iAQH84nVSDF4zwwhpoQn_Bzq0.roa (raw, json)
Hash identifier: D0zHf5pO7+pDoMrm1P4m536kvayemEwc5XBgmCBudnE=
Subject key identifier: 33:98:80:40:7F:38:9D:54:83:17:8C:F0:C2:1A:68:42:7F:C1:CE:AD
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018331F4CC15067D69D341383B5B5BB2F2B1
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/M5iAQH84nVSDF4zwwhpoQn_Bzq0.roa
Signing time: Mon 12 Sep 2022 13:47:50 +0000
ROA not before: Mon 12 Sep 2022 13:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 93.120.38.0/24 maxlen: 24
93.120.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:f4:cc:15:06:7d:69:d3:41:38:3b:5b:5b:b2:f2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Sep 12 13:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=339880407f389d5483178cf0c21a68427fc1cead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:4f:08:06:2e:58:1a:c0:28:54:c2:1e:b7:
d8:50:53:22:40:cd:17:66:3c:02:82:1d:1b:af:3c:
ed:27:e3:72:f9:1f:c9:48:88:9f:a2:52:49:ed:5e:
33:af:8e:16:1d:9d:91:fd:69:d6:82:bd:84:f1:5a:
02:bf:c0:6d:5d:58:c4:2d:89:87:97:85:c5:53:f0:
c1:fe:e3:ce:5b:c2:f0:56:b8:0d:82:15:6a:93:6e:
4f:e9:11:9d:4a:e6:17:4e:ff:45:a7:e3:06:71:52:
17:97:80:03:e7:18:fc:0f:3b:07:56:9c:3b:5b:20:
02:43:22:44:ae:8e:e1:5a:92:dd:61:d5:e3:8b:e5:
e5:3b:4f:0e:53:3e:7b:e6:6c:84:8a:6f:20:28:f2:
d4:f4:de:95:f2:9d:0b:5e:fb:4c:bf:eb:09:4f:98:
c8:b0:ff:42:2f:8c:e1:0b:76:71:72:7d:42:7f:de:
0c:4e:bb:4f:d9:4a:aa:46:08:89:9b:b7:d2:ea:56:
09:09:a1:03:bb:2a:9d:05:78:b9:54:03:26:d9:63:
04:2f:c1:58:80:82:a8:5a:04:c4:10:0c:f0:02:11:
57:d5:6d:5b:ba:82:47:6c:50:74:16:f9:74:47:32:
ee:61:b5:5c:8b:b8:a1:0a:28:d6:cd:5e:b5:93:c9:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:80:40:7F:38:9D:54:83:17:8C:F0:C2:1A:68:42:7F:C1:CE:AD
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/M5iAQH84nVSDF4zwwhpoQn_Bzq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.36.0/24
93.120.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:94:cc:a4:9a:e7:74:92:86:01:ed:5a:82:28:c1:e1:ec:16:
fd:45:44:02:2b:49:cb:d3:2b:0d:50:06:4b:5f:c0:08:87:62:
b7:45:2d:bb:ed:ac:a9:b5:a7:c7:d9:b7:a7:9c:7b:3f:35:22:
aa:33:91:cc:fb:64:24:bd:1e:f4:96:3d:db:6f:74:75:19:dc:
ef:cf:38:58:c9:1b:3b:74:ec:ec:96:cd:fe:d1:12:c9:10:02:
61:8d:37:c9:1f:9c:f8:a4:49:8e:b6:54:c5:dd:c5:66:57:6b:
19:76:15:10:76:3d:8d:96:c4:68:11:22:ac:d3:3f:69:a8:f3:
a2:bd:93:da:db:84:42:5e:23:47:49:54:8d:85:68:f2:c3:1e:
68:3a:66:1f:5e:2b:0b:70:e3:d9:d4:e5:fe:39:8b:52:d0:e1:
62:3d:10:b7:d0:75:95:e6:14:eb:6e:2a:92:5d:45:96:1b:a5:
45:61:ba:8e:47:73:71:7e:ae:7e:b0:b4:17:b5:08:f4:61:66:
22:25:19:97:5a:26:49:6a:f0:9f:8a:b5:55:6e:bc:89:19:a1:
a1:e1:ca:5c:c3:d9:f1:dd:cf:e1:49:ee:80:da:15:43:3c:ed:
52:4d:29:18:fe:4c:82:3a:f4:38:75:1a:05:97:48:60:6f:39:
31:27:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org