Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/NyRDWUA1ne0zUV0DuB49axVnk2Q.roa
File: NyRDWUA1ne0zUV0DuB49axVnk2Q.roa (raw, json)
Hash identifier: fcZ7Uu2pWDNBPr+yTMzJuR0/b5yV4DsJQy8/Sv+rSR8=
Subject key identifier: 37:24:43:59:40:35:9D:ED:33:51:5D:03:B8:1E:3D:6B:15:67:93:64
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 0B02493B
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/NyRDWUA1ne0zUV0DuB49axVnk2Q.roa
Signing time: Thu 02 Jun 2022 09:46:20 +0000
ROA not before: Thu 02 Jun 2022 09:46:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205773
IP address blocks: 93.93.172.0/22 maxlen: 22
2a06:68c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184699195 (0xb02493b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jun 2 09:46:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3724435940359ded33515d03b81e3d6b15679364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:6a:d4:4c:bd:3c:a5:95:97:34:13:02:1f:
64:66:6f:46:a9:71:a2:f5:8b:43:ab:f6:54:c2:ab:
91:fa:bc:c9:58:60:7c:94:16:93:cb:52:7f:94:7a:
f1:fb:23:ca:5c:ea:1d:19:49:8e:65:af:6f:4d:03:
43:f8:5c:4e:8f:cb:1b:85:83:ce:d8:6c:1b:bb:fa:
e0:4c:fe:84:b5:45:26:f9:a7:8c:9d:df:a6:9b:07:
43:60:dc:31:2c:5e:ff:45:88:f6:2d:a4:8c:df:29:
a4:72:a9:d2:34:2b:ba:33:60:ea:0c:0c:3c:71:24:
9f:09:30:f5:f4:14:87:47:b8:7c:f9:48:27:1c:e2:
27:64:3c:c9:4d:67:97:81:18:53:9b:7a:67:fb:dd:
07:99:79:5f:b3:42:35:13:71:52:84:fa:77:e1:24:
8c:a8:d4:d1:62:6e:d0:7b:82:5b:75:c6:46:a5:52:
43:df:3f:3a:96:9b:71:b6:96:5e:8a:76:eb:20:35:
cf:7b:59:01:b6:50:97:99:06:79:86:cd:91:c0:0c:
6d:22:8e:48:7b:a1:20:32:92:50:ad:5f:41:b2:86:
83:5b:cb:34:46:40:f0:c5:73:3d:70:06:44:b0:29:
26:9d:99:08:1a:7f:d2:5d:f2:c3:e8:ba:54:30:49:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:24:43:59:40:35:9D:ED:33:51:5D:03:B8:1E:3D:6B:15:67:93:64
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/NyRDWUA1ne0zUV0DuB49axVnk2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.172.0/22
IPv6:
2a06:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
99:8a:c0:1e:56:32:38:30:bc:29:d7:b1:49:5d:87:47:92:c3:
26:5a:f7:19:79:bd:76:55:81:d4:44:55:99:a1:12:87:fd:95:
02:a2:52:71:59:3c:71:af:07:13:84:f3:3c:e6:49:b5:54:80:
82:3c:7d:c8:4f:8c:f3:80:b7:a3:6d:85:2e:86:92:38:a5:5b:
cf:fe:6f:9e:ed:26:2c:2c:74:3e:54:4e:0c:4f:53:5f:cc:16:
55:13:3a:d9:af:c4:82:06:47:2a:3f:1d:3a:62:a2:0b:f0:c4:
7a:5b:54:5c:5b:28:be:c7:a3:a1:74:a2:cb:a2:d9:bd:14:0f:
19:f2:93:a8:2c:c0:86:53:86:15:02:af:16:eb:58:20:dd:97:
4b:27:68:72:2d:54:eb:52:a9:48:7a:4b:07:00:b1:f5:f6:64:
81:73:30:5a:fc:c8:ed:70:72:45:18:86:e5:11:2a:1e:07:7c:
e3:09:c9:d8:2f:80:5c:ed:d1:06:ee:c3:4e:19:f4:ef:c3:ea:
ea:a0:5f:1e:b9:11:30:e2:cd:71:17:79:9b:06:8b:90:1e:0d:
0a:3d:60:f2:6e:b9:e8:12:12:2d:7a:ce:89:e8:8b:64:be:7d:
9f:5e:39:04:2f:db:29:18:0c:bf:0a:16:fa:40:83:e4:76:85:
3c:49:9c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:10 2025 by rpki-client