Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/ivKT6v3hLYSwGPr3DK77agQ2L4Y.roa
File: ivKT6v3hLYSwGPr3DK77agQ2L4Y.roa (raw, json)
Hash identifier: 6ozp7/b/OV4QV6/9xKt9GoEO6/LX09jSgvvm0zj8hC0=
Subject key identifier: 8A:F2:93:EA:FD:E1:2D:84:B0:18:FA:F7:0C:AE:FB:6A:04:36:2F:86
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 01846B90825CBBECC42846892336D8273777
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/ivKT6v3hLYSwGPr3DK77agQ2L4Y.roa
Signing time: Sat 12 Nov 2022 11:19:03 +0000
ROA not before: Sat 12 Nov 2022 11:19:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6b:90:82:5c:bb:ec:c4:28:46:89:23:36:d8:27:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Nov 12 11:19:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8af293eafde12d84b018faf70caefb6a04362f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:54:2d:ea:3d:19:73:0d:5c:0e:0e:08:15:
93:39:34:e5:46:66:53:05:f0:db:a1:c1:f3:2a:07:
e9:fe:a3:09:67:75:94:39:b7:c8:4f:e9:ac:cc:01:
5a:0c:f1:6b:55:4d:18:2e:f2:da:5f:d1:b6:70:e1:
99:5e:9b:84:a3:1f:f9:4d:d4:03:cb:fd:2d:68:2a:
34:9d:87:56:61:c2:9d:8f:ef:0f:4c:b0:67:09:f3:
57:e9:66:24:81:03:e8:95:c5:70:37:b5:2f:10:a6:
8c:ba:1d:ce:14:2c:4b:5b:74:34:bc:22:c9:18:dc:
60:ed:c9:c3:89:24:ae:af:0c:08:36:e4:ff:60:22:
fa:b5:e6:b9:84:db:7b:ab:31:15:26:e3:fd:b0:cb:
4f:f5:a3:e7:bb:30:a8:19:10:ab:e6:45:6d:fb:a4:
46:fc:61:40:76:86:60:99:97:36:84:81:b7:c7:14:
ce:14:e2:ad:04:c4:f9:0d:0e:d5:ab:d8:bc:be:82:
d5:79:db:86:1e:33:38:49:b9:40:97:33:d2:7b:df:
dc:72:98:45:a0:21:ac:d7:14:f8:d1:f1:2b:9d:ab:
6f:24:ec:f2:9a:03:5f:99:35:ea:dd:bf:01:e8:e2:
ea:ce:3d:35:1a:8a:94:52:42:8c:ee:7e:69:c0:64:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:93:EA:FD:E1:2D:84:B0:18:FA:F7:0C:AE:FB:6A:04:36:2F:86
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/ivKT6v3hLYSwGPr3DK77agQ2L4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.79.0/24
94.137.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f6:d8:af:68:a4:b2:b6:e6:7b:11:2f:4e:17:95:6b:67:4e:
cb:90:22:6c:22:de:ac:0d:5b:ae:22:05:5f:ab:2b:22:90:7e:
9a:01:b0:c9:1b:2d:7d:c0:8c:98:44:5b:fd:fe:51:9e:74:24:
b2:c3:aa:c3:b2:7c:f7:29:4a:fe:17:dd:6d:1c:77:a9:87:e7:
c5:ae:29:dd:b1:44:18:52:80:7c:3a:55:39:cb:73:c1:62:b6:
23:4e:89:04:f0:f0:96:e9:f8:0f:ef:e5:d7:5e:58:19:93:21:
54:c0:f7:39:55:92:bf:27:f1:29:73:4d:bf:1e:13:56:80:2b:
21:d3:75:7e:9a:f6:52:b5:7b:bf:fd:a8:5d:a9:4a:64:d9:76:
26:a9:34:2d:3e:67:b8:71:48:45:08:b3:c2:0e:cd:00:87:18:
2f:7a:a2:55:ad:36:5d:ee:50:9c:44:dd:11:08:c0:51:42:aa:
d5:44:a9:7c:3e:52:e8:d8:a1:fd:a5:5b:ef:c9:41:14:8f:e6:
be:37:23:f7:67:c2:58:b3:a0:0a:24:44:33:87:43:68:a1:f3:
58:52:a1:f3:1c:15:60:1b:86:00:fe:33:b6:8e:e1:f3:bb:9e:
25:c9:2b:ec:4c:b7:ef:44:30:7d:87:96:7d:69:a6:b2:25:26:
f2:8b:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org