Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/dJ8ujeFwsIiHRWsBPHy-CMCeUqw.roa
File: dJ8ujeFwsIiHRWsBPHy-CMCeUqw.roa (raw, json)
Hash identifier: gMIbtO8Av/YXSjdiS7ySy0A4Io2weZUWW1EKXmo1Sco=
Subject key identifier: 74:9F:2E:8D:E1:70:B0:88:87:45:6B:01:3C:7C:BE:08:C0:9E:52:AC
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 018330DD7666812E1AB9C6B22528EE62EC42
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/dJ8ujeFwsIiHRWsBPHy-CMCeUqw.roa
Signing time: Mon 12 Sep 2022 08:42:43 +0000
ROA not before: Mon 12 Sep 2022 08:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207990
IP address blocks: 188.212.136.0/21 maxlen: 32
93.113.52.0/23 maxlen: 32
185.66.136.0/22 maxlen: 32
94.139.224.0/20 maxlen: 32
176.223.182.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:30:dd:76:66:81:2e:1a:b9:c6:b2:25:28:ee:62:ec:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Sep 12 08:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=749f2e8de170b08887456b013c7cbe08c09e52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:7b:0d:4c:db:c8:42:b8:2b:77:29:ae:9f:
97:c0:8c:78:1a:6f:72:ec:a8:7e:bd:5e:c8:60:39:
26:07:c6:a9:ea:92:c4:d4:95:25:a8:b0:c3:c6:29:
88:d6:91:0d:5b:3f:9a:64:1d:f9:f7:e7:ad:43:8f:
84:31:18:7c:ff:d3:f7:07:fa:4a:de:7d:d5:5d:eb:
a0:52:db:54:52:8e:c5:54:d8:dd:81:93:cd:ba:30:
a5:d8:33:ca:06:87:68:78:44:13:ae:a4:20:38:bb:
91:a3:4f:6b:bf:50:c6:4f:fd:aa:d2:25:00:3b:41:
6a:ab:be:76:a9:0b:79:98:ad:cd:5a:74:c3:75:f5:
82:4a:cc:25:4c:5d:ad:35:3a:5c:0d:9e:36:da:8c:
58:63:1f:d2:4e:24:3b:6c:44:2a:ca:d7:de:17:05:
c9:40:4d:02:fb:91:27:20:9b:38:55:01:dc:7c:50:
0d:ea:06:1a:6e:0b:40:da:88:dd:0c:a7:eb:c4:40:
ec:0c:4b:f4:12:26:c4:19:e2:15:f4:be:3b:e9:10:
a8:6d:90:ab:f3:c1:ac:7b:43:99:29:b7:64:95:f7:
8b:a2:06:e7:ae:fb:9d:d7:2e:d4:c1:0b:ed:54:6e:
a3:f4:8e:75:44:ba:f1:d2:3b:f5:ec:8d:d6:98:11:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:2E:8D:E1:70:B0:88:87:45:6B:01:3C:7C:BE:08:C0:9E:52:AC
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/dJ8ujeFwsIiHRWsBPHy-CMCeUqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.52.0/23
94.139.224.0/20
176.223.182.0/23
185.66.136.0/22
188.212.136.0/21
Signature Algorithm: sha256WithRSAEncryption
36:58:d7:f1:bb:46:99:f5:44:23:23:b3:0d:09:a2:54:64:a9:
5c:b9:ff:53:0d:02:ab:79:3d:09:89:24:dc:91:92:05:c1:b5:
08:aa:ad:99:1a:2d:6c:d5:27:35:44:7f:8f:bd:61:33:1d:7e:
19:95:36:25:11:db:04:49:23:f7:05:9a:84:21:b7:71:4b:c8:
57:dd:52:b5:01:45:ef:d1:05:55:61:2c:c9:69:69:37:ac:f3:
ec:f0:c5:85:b5:fa:df:09:aa:4e:ed:98:b7:e2:7a:a7:ca:1a:
91:39:cd:67:e8:3b:53:6c:60:90:b8:f6:94:03:a4:08:b5:fa:
d7:a8:e8:88:d8:16:ac:f3:e7:37:b0:9d:0e:6e:e2:d5:13:8a:
c6:2f:1f:3f:e2:e9:6f:38:03:4b:de:5b:b9:40:7c:38:01:3f:
5d:5d:18:5b:e1:c6:af:33:80:36:63:78:99:7f:eb:38:e2:ea:
a0:de:5f:be:70:c7:54:df:67:af:06:32:1e:38:29:f6:ee:50:
9e:84:89:95:42:93:38:8a:18:1f:b8:d8:cd:83:46:e9:44:d8:
43:e4:0b:f2:71:5a:89:8b:d6:07:4b:8f:c6:11:b9:8f:8d:17:
69:fd:d4:ee:68:34:c5:62:bf:65:b8:02:f8:f6:3c:02:0b:b9:
df:70:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:45 2024 by rpki-client on console-ams.rpki-client.org