Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/49h0awQikCODf3Jntvm5n4EaUzc.roa
File: 49h0awQikCODf3Jntvm5n4EaUzc.roa (raw, json)
Hash identifier: nEnLvfW8ae3gjN2mMQ0WXYGSn8RRZ+LYNM7vj0lVrnc=
Subject key identifier: E3:D8:74:6B:04:22:90:23:83:7F:72:67:B6:F9:B9:9F:81:1A:53:37
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0183EC7CE6B71F0CC112C1442B8C61E610A1
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/49h0awQikCODf3Jntvm5n4EaUzc.roa
Signing time: Tue 18 Oct 2022 19:05:51 +0000
ROA not before: Tue 18 Oct 2022 19:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206424
IP address blocks: 95.85.83.0/24 maxlen: 24
95.85.85.0/24 maxlen: 24
93.179.68.0/23 maxlen: 23
93.179.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ec:7c:e6:b7:1f:0c:c1:12:c1:44:2b:8c:61:e6:10:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Oct 18 19:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3d8746b04229023837f7267b6f9b99f811a5337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:92:fb:a2:d3:d7:49:0c:77:a2:73:e7:bc:
74:34:c7:4c:a2:a5:1e:de:ba:86:b8:93:61:e9:f2:
8d:72:15:46:5a:99:07:bb:c7:b0:e3:eb:6b:e1:86:
a9:5d:1e:61:9a:48:19:4a:a0:f5:39:f9:af:e3:b5:
8b:da:41:5b:1b:06:13:21:8f:8b:e9:d3:4d:16:cd:
f9:77:82:24:d4:7a:50:ac:51:f9:a3:de:33:fc:5d:
d6:a3:82:90:11:2c:6f:98:43:10:02:49:e5:13:26:
f7:ec:07:94:ad:40:cf:86:53:34:92:ed:2c:5d:fe:
6e:47:42:37:44:20:8f:e4:67:ef:db:f9:6e:14:d3:
36:75:5c:62:6f:07:9e:8c:ec:65:52:0e:70:3e:87:
14:ae:4c:88:58:08:12:23:b7:14:b2:79:ed:74:d7:
01:f1:d5:11:b3:04:f8:11:5f:30:4b:f1:6e:59:ae:
2f:64:ef:b0:b1:ed:1b:91:aa:34:92:82:d7:3c:d6:
bb:9b:b9:b3:22:ef:07:31:bf:26:e5:8c:ce:4d:7a:
91:d0:ef:b1:e0:ec:7f:c8:94:b0:0b:e6:24:8d:0d:
35:3e:bd:3e:d1:b9:19:dc:c6:4d:ee:05:6a:18:ac:
88:ad:60:11:b4:ca:f4:1f:ad:5f:1c:64:a2:51:43:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D8:74:6B:04:22:90:23:83:7F:72:67:B6:F9:B9:9F:81:1A:53:37
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/49h0awQikCODf3Jntvm5n4EaUzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.68.0/23
93.179.121.0/24
95.85.83.0/24
95.85.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:26:b3:2d:2a:ec:c0:ca:2d:09:4d:c0:27:b0:0b:69:bb:ca:
78:9c:4c:96:1f:7c:93:85:82:ed:59:77:8a:1c:37:59:09:1b:
0c:67:31:f4:d7:22:5b:cf:62:66:01:5b:d3:a5:b2:c0:c5:26:
09:cb:ad:e2:d2:ee:e8:a7:39:a3:67:35:32:98:3a:47:2f:a2:
9b:eb:1d:76:cf:8f:c4:0a:43:7f:d4:d5:03:44:f4:e0:8a:79:
2d:d2:04:03:03:ad:94:64:64:a1:90:6b:44:d7:6e:bb:9d:d5:
03:71:ad:61:0e:fd:a0:88:e2:5e:13:ce:02:9e:0a:d8:3c:3b:
85:99:3f:00:98:52:fe:d9:80:23:37:c0:1d:a7:99:86:19:8a:
20:96:ff:44:7c:b5:08:af:cb:7c:ae:27:c2:75:50:24:9d:e7:
26:8d:c9:bc:12:c7:f5:32:38:8d:e9:c5:de:23:4e:ca:26:ea:
bd:bb:b9:20:99:3d:a9:02:45:78:47:f5:23:1d:e0:0f:66:f4:
2b:77:47:7b:55:5d:4f:42:c2:67:4b:e8:f8:ad:be:09:63:c9:
88:0d:cf:c7:28:d0:3c:61:1b:cb:5a:ba:2f:c3:9e:38:1e:08:
b1:8a:08:42:61:dc:04:4a:f6:c5:28:d5:1a:dd:34:c9:06:7d:
33:ba:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:22 2024 by rpki-client on console-ams.rpki-client.org