Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/SP12_7z_0h8VGDQC-vy_pzozvwg.roa
File: SP12_7z_0h8VGDQC-vy_pzozvwg.roa (raw, json)
Hash identifier: oV5gwjI4DxrvroF5+jB4vIyU0s+KabuRBTMlzxQqY6s=
Subject key identifier: 48:FD:76:FF:BC:FF:D2:1F:15:18:34:02:FA:FC:BF:A7:3A:33:BF:08
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 068BA6BE
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/SP12_7z_0h8VGDQC-vy_pzozvwg.roa
Signing time: Thu 10 Mar 2022 14:39:10 +0000
ROA not before: Thu 10 Mar 2022 14:39:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.137.76.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109815486 (0x68ba6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Mar 10 14:39:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48fd76ffbcffd21f15183402fafcbfa73a33bf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:ea:6b:0d:31:ca:ce:89:93:44:d3:e5:c0:
79:67:02:70:24:88:66:8b:2c:17:a1:b5:8e:92:b8:
b0:a4:14:0f:c8:5e:30:5a:49:5e:cc:54:08:01:fe:
46:ce:49:3d:87:c4:16:89:f8:0e:31:78:d0:d9:18:
fb:4d:d8:81:73:e7:5e:e9:85:30:ce:11:cd:20:25:
9b:69:90:92:a7:6c:5e:0d:1e:0e:4c:ef:7d:32:7c:
8e:fe:42:bf:aa:fb:b2:74:2f:f5:07:52:13:c1:83:
76:a2:38:87:ec:b9:7b:5a:35:fa:75:e8:bd:5a:fc:
db:d5:10:e1:7d:05:09:d9:bf:3d:61:1b:a2:0b:01:
d5:80:ae:e1:ab:ca:22:79:eb:ae:c4:b0:8c:e8:ff:
46:2c:4d:07:29:71:24:86:1c:be:31:fb:70:10:1a:
1f:72:ba:a4:2a:40:4a:81:a2:70:f7:07:64:01:bd:
28:b6:91:a9:4d:cc:26:67:92:e8:e3:8f:cd:ce:05:
70:62:38:e5:73:1c:03:7b:56:56:29:9e:61:ff:c3:
81:b0:71:ce:8b:b4:c6:0b:41:c1:ad:3f:36:97:25:
f9:de:49:5b:99:ab:e2:f9:8e:6e:6a:d3:98:1a:0d:
ed:05:1d:73:01:e2:fc:5b:d3:b5:2e:44:6c:9e:2b:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:76:FF:BC:FF:D2:1F:15:18:34:02:FA:FC:BF:A7:3A:33:BF:08
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/SP12_7z_0h8VGDQC-vy_pzozvwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.74.0/24
94.137.76.0/24
94.137.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d0:1b:78:b7:a7:7b:a6:b7:ba:22:fb:22:ae:d0:02:90:2b:
1e:3b:33:b4:c2:5b:2a:c5:aa:2a:dc:2a:b0:97:f0:dd:66:69:
45:fd:4b:f2:49:6b:ac:8e:08:8a:0a:26:65:67:98:7a:13:d6:
98:b0:c1:69:da:0f:59:a6:4f:a0:37:fa:04:89:60:59:26:55:
9b:73:55:1b:47:63:de:4f:31:85:d8:bc:b7:e0:e7:95:53:a7:
e7:ea:cb:b9:40:35:62:94:cb:b9:78:92:87:be:21:8b:9a:05:
07:af:5c:e6:d3:11:c5:f3:51:d4:70:d3:44:d9:17:78:ab:8c:
25:88:14:02:31:52:fa:57:fc:2c:94:81:88:5b:a1:fd:cc:8e:
b5:62:44:e5:6b:88:ff:c2:1d:34:8f:0e:34:65:06:5d:b5:7d:
1f:48:f0:d2:92:46:ef:ba:04:ae:6d:d7:9e:b3:e4:89:71:ae:
7f:9e:3b:3c:48:a2:27:48:2b:11:c7:04:0c:c6:4e:3e:fc:87:
b4:0c:e8:15:0e:86:3b:05:d4:60:8a:2c:2c:3a:7f:94:bf:8f:
c3:56:a6:a0:ed:a1:81:f4:ed:fb:82:0f:1f:18:71:31:42:0d:
42:01:ab:3f:4b:d9:76:71:c8:95:a3:9b:99:15:d7:10:e3:97:
b4:36:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org