Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/N789OdDzieyQonQ4pQ2JaFlGe_I.roa
File: N789OdDzieyQonQ4pQ2JaFlGe_I.roa (raw, json)
Hash identifier: ZJhfELGV0LzsyiDk6XbiILacDjAjGp+DdyGwOaJkcIo=
Subject key identifier: 37:BF:3D:39:D0:F3:89:EC:90:A2:74:38:A5:0D:89:68:59:46:7B:F2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0184ED4A52ECDF442DC2CB028E3BC733DA22
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/N789OdDzieyQonQ4pQ2JaFlGe_I.roa
Signing time: Wed 07 Dec 2022 15:53:01 +0000
ROA not before: Wed 07 Dec 2022 15:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201069
IP address blocks: 93.170.187.0/24 maxlen: 24
93.170.96.0/24 maxlen: 24
95.47.119.0/24 maxlen: 24
93.171.218.0/24 maxlen: 24
93.171.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:4a:52:ec:df:44:2d:c2:cb:02:8e:3b:c7:33:da:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 7 15:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37bf3d39d0f389ec90a27438a50d896859467bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:e6:6d:4f:93:7a:7b:98:c7:40:b5:85:d1:
0c:60:27:50:f4:52:71:e6:7d:76:bc:4d:dd:78:e7:
2a:42:d6:f1:95:17:1e:1c:e6:41:bd:ce:69:0c:67:
e1:6a:e1:22:89:68:3d:8a:22:c4:33:5f:0d:81:79:
d5:0c:51:40:ef:67:0a:fd:6b:32:77:72:39:2f:e3:
f8:c7:7f:d9:c0:5e:f9:19:b4:f5:32:b5:50:c0:e2:
01:6b:72:2e:12:9f:59:96:69:f3:59:38:d8:03:ef:
5b:8f:1b:90:c3:73:64:1f:e4:14:36:fa:96:e6:25:
0f:ab:0c:41:3a:85:93:2b:42:fb:b0:9f:8f:54:4b:
d7:87:64:8d:e1:88:24:7b:66:83:4f:6c:00:f1:1c:
e8:54:af:36:88:48:8e:8e:2e:fc:cf:19:94:2f:76:
b9:e5:6d:03:0f:97:c9:8d:ec:a8:fe:35:4b:36:03:
5b:89:8e:3e:c2:a0:34:c6:d9:a8:51:03:bc:9c:a1:
ae:cc:d0:07:5e:ff:59:c5:52:e4:eb:86:a4:f2:50:
3f:c9:f8:40:23:01:1a:b8:06:7e:2e:8f:4c:af:f0:
23:09:3e:4e:75:fd:c2:78:5e:bc:6e:fa:9f:a8:36:
27:80:07:6c:14:6f:87:6f:a0:c3:c2:a3:7f:56:f7:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BF:3D:39:D0:F3:89:EC:90:A2:74:38:A5:0D:89:68:59:46:7B:F2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/N789OdDzieyQonQ4pQ2JaFlGe_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.96.0/24
93.170.187.0/24
93.171.13.0/24
93.171.218.0/24
95.47.119.0/24
Signature Algorithm: sha256WithRSAEncryption
19:94:1a:ee:c0:96:5a:55:a2:a0:ec:a9:99:76:77:c7:5f:37:
a4:3b:88:86:4e:01:36:9b:a8:ed:86:ec:ba:52:0e:7b:40:e5:
14:99:00:b0:6b:fc:38:ec:54:1e:a9:f2:14:fa:2b:02:cb:fe:
f5:30:be:e3:db:35:aa:3e:2c:af:69:30:11:e4:3c:f9:11:84:
09:88:d1:32:5c:7c:5f:f7:3a:f5:98:a1:89:5b:62:fc:d3:8e:
14:f5:72:af:76:9e:67:e8:95:19:0e:98:54:8a:8a:7b:f7:dc:
63:5e:97:85:51:84:ac:cf:a0:69:6c:c9:64:31:85:51:7b:57:
7c:ca:87:9c:0d:f0:2a:6a:f5:ab:ad:0c:87:fa:5e:b7:bc:94:
39:2f:50:7a:6b:a5:9f:4e:5e:1c:20:94:2f:63:62:22:b0:ed:
a7:8a:df:d7:60:b2:b1:dc:12:28:a3:da:59:20:52:6b:4e:c1:
e9:46:40:cc:22:83:60:a0:c9:1c:92:55:c0:03:5d:21:c2:62:
7a:fc:13:4e:f9:78:1a:06:14:63:92:fa:a3:a9:5b:3b:f5:0c:
d6:69:ba:33:ca:87:77:0d:b5:02:cc:6e:b1:53:ac:5f:e0:56:
01:4b:ab:ff:cd:ac:78:1b:d6:38:40:66:73:0f:1a:01:5c:21:
6a:ad:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org