Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/vQW5CKrltYzESL7uvM7L5TCWAH4.roa
File: vQW5CKrltYzESL7uvM7L5TCWAH4.roa (raw, json)
Hash identifier: 0h22t4AOcEGLfmR14psY/0Xt4DRVM+cfN/OmgsPwV3g=
Subject key identifier: BD:05:B9:08:AA:E5:B5:8C:C4:48:BE:EE:BC:CE:CB:E5:30:96:00:7E
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01840913A0FB2616C74C7CA6841D3F1C9479
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/vQW5CKrltYzESL7uvM7L5TCWAH4.roa
Signing time: Mon 24 Oct 2022 08:19:52 +0000
ROA not before: Mon 24 Oct 2022 08:19:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135752
IP address blocks: 93.120.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:13:a0:fb:26:16:c7:4c:7c:a6:84:1d:3f:1c:94:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Oct 24 08:19:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd05b908aae5b58cc448beeebccecbe53096007e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:5c:ae:09:d7:53:87:1f:35:d6:d4:12:d7:
4d:19:c5:cc:96:ff:6c:74:7b:ee:00:67:28:32:36:
cf:a0:ff:ea:68:22:d7:50:94:85:e7:eb:20:fe:b1:
d2:40:72:2a:d8:46:6f:16:89:b2:3f:f6:c5:33:f1:
3d:49:60:e3:5a:cf:bb:b9:44:20:fc:bc:51:b7:da:
a1:5b:ce:ef:ac:06:39:09:59:46:d9:ac:d9:e2:ef:
fb:4d:11:4e:31:67:f2:d0:8e:f7:af:b1:b8:42:c1:
f8:28:4b:84:33:8f:09:d0:9a:68:cb:78:f1:21:0c:
9d:c4:1a:d4:62:98:69:7a:c2:2e:d6:26:ac:16:15:
72:7c:a7:06:30:a6:5a:0c:19:88:c1:ce:1c:24:47:
63:fc:e4:ee:a2:70:f7:b6:df:54:63:19:32:05:3f:
05:3a:c3:f3:00:5d:01:22:f9:60:9e:aa:12:2f:a7:
f7:64:d9:99:27:63:76:c8:67:fb:28:67:56:6a:a9:
58:e5:56:b4:3b:96:30:e2:33:f1:87:01:fc:9f:1f:
74:ff:4a:9f:a4:1d:3d:e7:f5:0e:7b:46:1b:73:79:
b0:26:13:e8:30:bb:c8:e8:c8:50:c0:85:c3:81:be:
02:3b:ef:9d:02:77:84:dc:7a:4c:a0:57:96:c5:15:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:B9:08:AA:E5:B5:8C:C4:48:BE:EE:BC:CE:CB:E5:30:96:00:7E
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/vQW5CKrltYzESL7uvM7L5TCWAH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.39.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3e:6f:53:f2:9b:86:59:96:db:52:e8:ce:d2:40:a7:83:75:
f2:ba:2c:77:c5:9e:9c:58:43:51:f9:a7:cf:de:b2:b0:af:c8:
ce:42:18:00:d3:b9:cf:17:04:78:c3:5a:38:15:3f:2e:81:de:
30:35:fd:86:ff:47:b9:53:66:20:a6:59:e5:7a:cf:5a:60:02:
2b:15:c5:56:77:44:04:a2:b1:a8:1b:b2:ba:bb:1d:81:7c:ae:
c4:bc:b2:5f:93:1c:28:d0:a7:e3:2b:d6:a6:5b:a7:10:2d:af:
b6:22:3d:e1:10:6d:ce:b6:4c:4a:2c:71:ea:f6:ac:e7:9f:a0:
54:01:60:c6:60:dd:4b:c2:fe:f8:3e:c7:08:6a:7a:07:34:73:
c3:aa:fb:db:40:ac:8a:49:b9:a8:ee:b6:bc:c1:51:1d:2c:e2:
f1:8a:77:e1:20:9b:d5:07:fe:a8:47:d5:ec:a5:af:c1:18:fe:
6c:e2:ad:91:30:44:e3:87:4a:11:3d:81:58:d1:80:70:fa:f5:
a5:56:62:e4:2c:17:b7:9d:21:0b:cc:91:55:4b:ec:57:85:4d:
1d:80:3e:54:85:41:a1:bf:f3:91:9d:a0:01:a1:2d:cd:41:f2:
ec:4e:1b:74:58:73:4c:b0:29:ed:51:ec:57:a0:70:8b:b2:77:
4d:3c:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org