Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/uxfna8aRt-TbPftGrXHA0ySz15w.roa
File: uxfna8aRt-TbPftGrXHA0ySz15w.roa (raw, json)
Hash identifier: z3V1kwkS/mcSPesuxt91BzMCydTAb+uBuNkaFgHEB/A=
Subject key identifier: BB:17:E7:6B:C6:91:B7:E4:DB:3D:FB:46:AD:71:C0:D3:24:B3:D7:9C
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 01838AF1208C6BDD5E467BBF4395C4AEC3D9
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/uxfna8aRt-TbPftGrXHA0ySz15w.roa
Signing time: Thu 29 Sep 2022 20:30:01 +0000
ROA not before: Thu 29 Sep 2022 20:30:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 94.137.76.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8a:f1:20:8c:6b:dd:5e:46:7b:bf:43:95:c4:ae:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Sep 29 20:30:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb17e76bc691b7e4db3dfb46ad71c0d324b3d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:02:f5:4d:51:4d:91:1d:57:40:13:da:42:
76:26:fc:08:11:81:d6:90:42:b4:82:4d:a5:75:f7:
ad:8b:81:3f:ca:21:e6:f5:67:38:7f:96:2b:e1:e0:
74:05:b6:04:51:ec:5a:b6:91:0e:0a:b4:de:32:63:
0a:2e:84:c8:fc:75:96:3a:cc:8b:cd:fb:d5:a8:13:
48:ff:e4:7e:bd:b7:c3:ee:09:a1:c0:39:b1:d2:22:
d7:fe:a0:cf:6f:1e:5b:eb:5d:7e:a7:ed:60:99:58:
8e:e5:7f:4a:a9:07:b7:ce:97:a4:7c:80:02:f9:ca:
31:7a:d2:56:69:7f:4d:d8:52:58:e6:dd:28:2c:23:
4f:06:d6:37:76:5e:e9:48:36:be:80:64:63:8f:26:
44:6e:5a:16:a0:c4:7c:1e:6d:aa:b8:6f:94:03:29:
e2:f2:f9:f9:b6:e3:a3:9c:ee:fd:bc:78:c2:f3:7a:
a6:87:ad:58:07:0d:86:dc:3d:1f:75:5c:f8:4a:3c:
bd:92:8f:bc:d9:b0:80:57:13:03:41:31:e4:56:cd:
b0:b3:73:8b:d1:a4:f7:aa:6e:2e:fb:ca:de:a8:1c:
44:80:c7:d9:89:f4:42:40:75:91:7c:dd:8d:a3:77:
68:ad:9f:84:28:ab:41:40:b3:16:e9:3a:9d:d2:f3:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:E7:6B:C6:91:B7:E4:DB:3D:FB:46:AD:71:C0:D3:24:B3:D7:9C
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/uxfna8aRt-TbPftGrXHA0ySz15w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.76.0/24
94.137.92.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1a:53:7a:30:c3:1a:2b:ab:80:23:cf:d9:ac:4b:ab:89:94:
c2:02:0d:48:b9:61:a3:af:c5:65:08:ae:61:58:e3:a6:72:ef:
79:6d:42:a9:8a:49:39:c5:22:3d:74:09:66:42:da:3f:38:af:
97:26:91:23:ce:af:1f:3e:85:ee:3b:46:22:15:21:8d:b4:4f:
25:c6:d3:15:f4:5d:61:0e:f6:39:12:cf:eb:87:96:e3:66:c3:
0b:11:7a:e6:2a:5b:d6:8e:93:15:a8:d2:6c:d1:2e:00:32:1a:
40:ee:11:c0:e9:ca:f0:5d:87:5d:e0:16:e2:b1:42:09:98:e0:
e6:12:5a:b5:5c:a4:39:fc:53:df:84:62:99:ea:07:09:21:eb:
34:35:ce:89:c1:8a:37:6e:00:3a:d5:c6:08:64:5c:ca:2c:6d:
29:85:cb:a8:4b:e9:04:c2:e7:c0:2a:33:a5:d9:86:17:06:99:
d2:38:0a:d2:f2:1d:68:f3:5d:b3:69:47:be:f6:d1:44:ea:4f:
39:86:a9:f5:37:bf:04:58:c0:b3:85:61:c4:e0:a0:ea:35:5e:
fc:c1:1d:c2:5b:11:78:eb:10:60:3f:77:72:18:f2:58:3f:74:
ac:00:4d:9b:2e:61:4d:e2:ce:1b:35:95:9b:e4:6a:86:c4:9f:
90:8d:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org