Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cCgyETnZtNYA_iU58rjdM6-_ll4.roa
File: cCgyETnZtNYA_iU58rjdM6-_ll4.roa (raw, json)
Hash identifier: w0qoYWtY2MCHnzhoNrbyEFzkH4dHYKDRhYl+lYkduao=
Subject key identifier: 70:28:32:11:39:D9:B4:D6:00:FE:25:39:F2:B8:DD:33:AF:BF:96:5E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28604B9C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cCgyETnZtNYA_iU58rjdM6-_ll4.roa
Signing time: Sat 01 Jan 2022 16:10:20 +0000
ROA not before: Sat 01 Jan 2022 16:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212210
IP address blocks: 93.170.94.0/23 maxlen: 24
95.47.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677399452 (0x28604b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7028321139d9b4d600fe2539f2b8dd33afbf965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:38:32:38:13:5f:66:db:e7:dd:e7:98:f5:
15:eb:9d:c3:e0:55:4d:f5:1d:84:53:10:ea:a5:d3:
46:28:27:5f:ff:63:9b:fe:61:d8:fd:67:73:fb:a7:
73:0c:a4:ed:56:bb:63:a8:9b:4b:a1:33:97:b7:be:
53:e0:05:48:9d:cf:c4:c5:b6:b8:51:fc:2c:a3:f8:
03:ea:24:b3:03:1b:92:16:73:64:ea:4b:a2:60:ed:
4c:42:ac:96:1a:d2:7e:df:49:dc:8f:ae:99:0f:41:
2f:03:0e:d8:ae:f1:fe:57:a8:33:fb:37:b9:a0:c3:
af:eb:4d:e2:3d:85:3c:d5:34:7e:06:b7:53:65:93:
86:1b:ef:3a:a2:8b:30:d4:90:b9:dd:5c:f5:41:70:
9c:11:a9:5e:20:ed:68:f1:d8:89:ee:57:6d:c4:c1:
a8:53:ba:59:0c:99:53:6d:04:94:fc:36:7e:f5:a8:
28:fa:a7:c7:1d:fa:0c:be:20:fe:91:d4:de:c3:22:
36:ef:eb:33:98:64:6d:a9:74:5c:f2:fc:6c:8a:9f:
89:c7:90:1a:f8:c8:d3:7b:c4:56:5a:06:d8:3f:c6:
0f:d7:ad:7b:2f:33:16:eb:56:62:e4:53:df:5f:d5:
57:1e:2b:b9:79:13:fd:e8:01:4b:0a:d0:42:c2:d4:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:32:11:39:D9:B4:D6:00:FE:25:39:F2:B8:DD:33:AF:BF:96:5E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cCgyETnZtNYA_iU58rjdM6-_ll4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.94.0/23
95.47.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b3:77:51:0e:05:28:8b:1e:80:45:f9:fa:7a:1a:4a:ac:a1:
0b:fa:6d:cc:60:89:cf:d9:50:cc:80:9a:2f:ac:62:b7:70:29:
af:99:c5:d0:b8:af:3f:60:0f:a0:16:93:ef:27:f7:a0:9a:55:
23:5b:0a:aa:55:b7:e3:c0:16:b1:1b:10:b4:f8:8d:cc:b8:80:
87:37:fe:a1:d5:2d:93:fa:0f:15:57:9f:dd:31:7f:9b:47:ea:
21:a2:c5:2b:b1:95:a5:20:9b:aa:04:60:f1:31:18:8b:80:f2:
46:18:38:8a:88:ec:c7:cd:26:e7:02:ed:21:9e:b4:84:76:a6:
ea:c9:91:96:7c:e7:56:e0:07:63:43:67:63:25:7e:81:b8:f2:
7e:79:bd:2b:a3:94:35:db:49:aa:88:2a:93:98:ce:93:09:a5:
9e:dc:fe:94:5a:79:2d:09:b2:1b:b9:3e:f4:1a:51:02:f2:f7:
c8:20:ee:65:60:45:45:55:76:b6:06:f9:0f:80:1f:b0:c4:e9:
47:c0:54:c4:92:fc:38:9a:34:52:bc:d5:d6:28:ab:75:44:54:
ab:83:16:60:60:28:b4:70:38:a8:33:2b:ae:e5:65:f5:88:9c:
c2:e1:c0:06:e9:b1:82:5f:28:4f:46:44:09:33:1a:c0:30:88:
33:fe:2f:2d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEKGBLnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MTAyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzAyODMyMTEzOWQ5
YjRkNjAwZmUyNTM5ZjJiOGRkMzNhZmJmOTY1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtVODI4E19m2+fd55j1Feudw+BVTfUdhFMQ6qXTRignX/9j
m/5h2P1nc/uncwyk7Va7Y6ibS6Ezl7e+U+AFSJ3PxMW2uFH8LKP4A+okswMbkhZz
ZOpLomDtTEKslhrSft9J3I+umQ9BLwMO2K7x/leoM/s3uaDDr+tN4j2FPNU0fga3
U2WThhvvOqKLMNSQud1c9UFwnBGpXiDtaPHYie5XbcTBqFO6WQyZU20ElPw2fvWo
KPqnxx36DL4g/pHU3sMiNu/rM5hkbal0XPL8bIqficeQGvjI03vEVloG2D/GD9et
ey8zFutWYuRT31/VVx4ruXkT/egBSwrQQsLUS9MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRwKDIROdm01gD+JTnyuN0zr7+WXjAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L2NDZ3lFVG5adE5ZQV9pVTU4cmpkTTYtX2xsNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAV2qXgMEAF8vrjANBgkqhkiG9w0B
AQsFAAOCAQEAmrN3UQ4FKIsegEX5+noaSqyhC/ptzGCJz9lQzICaL6xit3Apr5nF
0LivP2APoBaT7yf3oJpVI1sKqlW348AWsRsQtPiNzLiAhzf+odUtk/oPFVef3TF/
m0fqIaLFK7GVpSCbqgRg8TEYi4DyRhg4iojsx80m5wLtIZ60hHam6smRlnznVuAH
Y0NnYyV+gbjyfnm9K6OUNdtJqogqk5jOkwmlntz+lFp5LQmyG7k+9BpRAvL3yCDu
ZWBFRVV2tgb5D4AfsMTpR8BUxJL8OJo0UrzV1iirdURUq4MWYGAotHA4qDMrruVl
9YicwuHABumxgl8oT0ZECTMawDCIM/4vLQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:51 2024 by rpki-client on console-ams.rpki-client.org