Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Oz7smAVZXHl7D4bcoCCsCGeu6Sg.roa
File: Oz7smAVZXHl7D4bcoCCsCGeu6Sg.roa (raw, json)
Hash identifier: yOyYwrU99fk85yIJy2oqbArcyX7vObRyy1YMvoaivrU=
Subject key identifier: 3B:3E:EC:98:05:59:5C:79:7B:0F:86:DC:A0:20:AC:08:67:AE:E9:28
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0184A0604CBC793EC7D60CC66EE70E8D13D4
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Oz7smAVZXHl7D4bcoCCsCGeu6Sg.roa
Signing time: Tue 22 Nov 2022 17:26:16 +0000
ROA not before: Tue 22 Nov 2022 17:26:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133296
IP address blocks: 93.120.74.0/24 maxlen: 24
93.120.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a0:60:4c:bc:79:3e:c7:d6:0c:c6:6e:e7:0e:8d:13:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Nov 22 17:26:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b3eec9805595c797b0f86dca020ac0867aee928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:e3:82:a9:d1:99:2e:55:65:a0:ab:d0:49:
c3:be:00:59:cb:85:5e:36:6e:da:4e:fb:3e:95:aa:
ca:b9:23:f9:67:42:3f:1a:1c:48:44:21:57:88:31:
20:46:ab:ea:ab:55:83:20:0a:1c:cd:83:4b:37:06:
15:0a:f4:30:58:01:2b:6a:dc:5f:3c:02:91:19:77:
9b:b7:d6:34:df:16:10:8a:60:d1:96:1a:45:2b:e3:
b7:23:d7:c9:19:31:51:ab:b5:70:70:b4:be:6d:d2:
6b:1d:aa:0e:cb:f4:2d:2d:e5:e0:54:d9:08:7f:75:
b0:6a:71:0e:31:24:d4:ba:4d:c9:21:23:f5:94:8f:
db:34:14:47:29:21:d1:71:2c:25:4a:c4:fa:c1:43:
bb:f0:3e:08:3c:71:29:95:b6:4c:08:5e:34:5b:bf:
48:24:0c:95:07:95:a5:38:0a:68:6f:57:03:ff:65:
15:93:78:95:45:c9:77:c1:c9:d5:b9:4f:95:62:99:
9c:87:84:0c:70:a9:d8:26:28:5f:70:0e:23:db:2c:
4d:e3:64:67:c7:6c:36:33:a3:75:5f:0e:06:3a:40:
59:db:38:7b:26:e5:e6:1d:de:07:cb:3b:4a:58:b3:
38:c0:27:8d:41:58:94:94:6f:d8:fa:dd:ef:c9:a4:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:EC:98:05:59:5C:79:7B:0F:86:DC:A0:20:AC:08:67:AE:E9:28
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Oz7smAVZXHl7D4bcoCCsCGeu6Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.39.0/24
93.120.74.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8b:94:35:6e:1d:b1:d2:9e:ce:ae:eb:b7:c7:8e:db:72:a8:
1d:36:88:4d:0b:54:5c:e2:c8:64:d0:15:3c:74:7b:7f:af:f1:
c4:b7:57:6e:92:42:91:2b:cb:e1:95:8a:d8:61:83:66:cc:3a:
de:7c:6a:ea:59:03:fc:6f:f4:47:4c:c1:c4:ad:fb:7f:a8:99:
d3:88:cc:a6:58:e5:0e:6a:97:89:81:5b:a6:9c:46:51:a9:71:
26:8a:87:11:54:33:96:e0:09:5a:b0:c4:d2:5d:01:4c:0a:a4:
1b:96:b5:43:5b:a1:c5:76:70:87:5c:ca:ff:c3:43:cb:73:3d:
5a:13:e1:79:0f:b3:fd:e1:6b:54:41:8c:cf:32:a9:84:aa:f4:
80:df:5c:f6:46:b0:48:7b:ad:8c:8d:25:c1:fc:6c:31:01:68:
d1:1d:71:86:dc:e9:23:9e:7a:f1:88:45:22:ab:73:0a:39:4d:
1d:bd:f3:46:6d:f9:f9:4d:9f:7b:90:7b:46:a4:a4:5d:1a:11:
0a:e2:da:6d:c1:0c:5c:c2:57:43:b3:6a:a9:ff:48:13:6a:8a:
8d:bd:7b:2f:c7:cf:6e:d5:56:24:b5:22:bf:73:ff:6d:10:7e:
b5:df:df:c8:6d:ba:cd:a2:2a:d7:71:68:05:fd:17:f8:96:7a:
18:e8:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org