Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/gS-NnDZSDKid7MzpNvEKBc-UZWs.roa
File: gS-NnDZSDKid7MzpNvEKBc-UZWs.roa (raw, json)
Hash identifier: TaWVC8x8acknhpC63zL6y0Ilynk3wlQg/oANkIUr6l8=
Subject key identifier: 81:2F:8D:9C:36:52:0C:A8:9D:EC:CC:E9:36:F1:0A:05:CF:94:65:6B
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0293769F
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/gS-NnDZSDKid7MzpNvEKBc-UZWs.roa
Signing time: Sat 01 Jan 2022 11:59:29 +0000
ROA not before: Sat 01 Jan 2022 11:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 93.113.52.0/23 maxlen: 32
94.139.224.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43218591 (0x293769f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 1 11:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=812f8d9c36520ca89deccce936f10a05cf94656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:9a:14:2f:9a:75:c6:26:4b:fa:27:ad:2d:
6b:4b:8d:b8:a9:ae:44:5a:e4:dc:38:87:bf:f7:03:
b2:e2:9b:6b:8c:b5:68:be:b8:70:4d:2b:2e:04:bd:
2f:5d:90:91:2e:ee:e7:a5:f0:f6:f1:1e:c1:17:37:
ed:66:e5:0f:81:82:b8:ae:0e:35:e8:cf:ce:d3:aa:
ad:7f:0f:21:6d:0d:a1:6d:41:5c:f6:5b:1d:5a:3d:
a2:d1:30:11:fd:56:7a:a9:a3:aa:17:db:7e:1b:42:
f2:53:56:cd:ba:32:8d:67:9b:8d:d3:c1:84:90:ef:
ef:3c:0a:e2:6c:6f:6a:70:21:c0:e1:67:a4:2b:ae:
34:32:8d:21:53:96:fd:c9:75:a1:7a:ee:c6:1d:ed:
46:0a:1e:d8:7a:f9:73:bc:62:42:cc:de:51:34:5a:
83:c5:fb:f7:10:d7:e6:ac:b7:bb:85:0c:e8:25:5f:
09:8f:87:ff:f2:f2:40:2f:4c:de:5e:38:57:f9:e7:
66:34:0b:58:11:39:92:60:2b:9d:e9:67:0d:35:a6:
48:5a:bb:83:c6:7b:b3:a1:5b:32:fd:1a:12:b3:c3:
93:83:fe:2b:c3:ad:dc:cd:be:95:ca:40:05:6d:88:
98:4d:8f:ac:01:a1:a5:80:ea:4f:2f:3c:5b:4e:35:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2F:8D:9C:36:52:0C:A8:9D:EC:CC:E9:36:F1:0A:05:CF:94:65:6B
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/gS-NnDZSDKid7MzpNvEKBc-UZWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.52.0/23
94.139.224.0/20
Signature Algorithm: sha256WithRSAEncryption
58:5d:cd:4d:01:b1:1f:c7:dc:dc:e0:23:05:11:f0:05:91:2b:
c8:19:84:87:f7:65:5b:2f:ea:bf:b8:49:37:ec:8a:29:b6:29:
1b:01:2d:88:2e:07:8f:05:44:1b:2b:20:50:20:db:04:66:6e:
81:c1:c2:37:53:e0:7a:45:12:62:2e:2d:ef:9f:8d:9c:a3:b4:
3e:30:23:ad:3a:95:9d:59:46:cb:8e:2b:8e:ee:fb:b8:b7:36:
de:fb:8b:d8:cc:65:a1:a3:f2:f6:56:bc:93:b8:89:00:85:fa:
60:10:22:40:e6:9d:fd:e5:3b:01:7f:1a:40:1f:e3:71:6f:ef:
e6:70:81:09:8a:db:9e:e3:05:63:1e:58:82:33:7c:42:82:f2:
cb:de:a2:4f:12:d6:f2:b6:c5:d2:43:a4:23:ac:ca:ae:86:27:
d8:5d:8f:3b:68:bf:73:0a:fb:f6:64:04:28:ab:7e:e4:3a:95:
0e:21:d9:50:e1:fb:87:53:6b:27:82:66:cc:1c:d6:34:fb:17:
cb:41:b2:8c:49:01:c7:66:df:6e:8a:bb:e4:47:48:5e:3b:de:
8f:1b:f4:cc:04:70:96:14:1d:e7:19:dd:5a:99:d2:8b:b8:94:
80:54:2f:6b:96:2b:91:5d:74:e4:f1:0d:fd:29:5c:00:1b:74:
6d:96:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org