Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/4sgpNE06lJh00KDh6s9iJ95go5A.roa
File: 4sgpNE06lJh00KDh6s9iJ95go5A.roa (raw, json)
Hash identifier: yiTe4jjg1EJmqCexhiWQBsk1rDTBaIwgMVgltG6Shtk=
Subject key identifier: E2:C8:29:34:4D:3A:94:98:74:D0:A0:E1:EA:CF:62:27:DE:60:A3:90
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 1ECCD5
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/4sgpNE06lJh00KDh6s9iJ95go5A.roa
Signing time: Mon 04 Apr 2022 16:40:04 +0000
ROA not before: Mon 04 Apr 2022 16:40:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 93.113.130.0/24 maxlen: 24
93.113.44.0/24 maxlen: 24
94.176.109.0/24 maxlen: 24
94.177.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2018517 (0x1eccd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Apr 4 16:40:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2c829344d3a949874d0a0e1eacf6227de60a390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:f3:28:57:de:07:ec:49:ec:60:7f:bb:20:
2e:84:25:e4:59:ea:2c:33:54:b8:0e:35:a5:f9:8a:
a0:d2:73:c6:55:6c:61:8c:c4:98:3b:4d:73:0a:f0:
f3:5b:1e:fe:65:98:de:e9:c1:0f:9a:25:d7:47:aa:
fb:98:96:5c:7e:ef:7f:45:8a:6f:d4:1f:ea:b8:9f:
27:fe:26:4e:f4:6d:43:0b:e0:17:14:a7:85:6a:07:
f3:3e:3d:c5:53:9b:11:1e:7c:72:ba:a2:fe:2c:db:
0d:c7:6a:f3:c2:a8:e5:83:a5:77:1f:8d:ba:80:aa:
b7:cd:01:32:6e:45:77:fe:d0:7d:bb:10:1f:85:c1:
8e:0f:4b:5c:94:dd:f6:1d:67:c2:df:5a:86:89:98:
7c:04:1f:03:4a:eb:59:6a:42:cb:b7:bd:19:6d:1d:
5e:14:9b:88:c3:6e:85:bd:f5:ba:de:bb:b9:3c:9a:
3d:28:c6:85:18:24:6a:5f:60:46:16:52:dc:3e:63:
d5:d8:a3:2e:32:52:e2:9f:84:84:43:62:86:0c:93:
e4:1d:6d:61:49:82:2b:71:38:c0:9f:6d:d5:df:44:
00:ef:05:c4:cb:02:6d:bb:a5:5d:76:90:20:f2:6e:
c5:c2:8c:01:69:8e:73:1b:42:f7:81:25:f9:25:fc:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C8:29:34:4D:3A:94:98:74:D0:A0:E1:EA:CF:62:27:DE:60:A3:90
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/4sgpNE06lJh00KDh6s9iJ95go5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.44.0/24
93.113.130.0/24
94.176.109.0/24
94.177.67.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c4:58:d2:9d:6f:62:01:5b:1c:ad:e4:6e:37:4c:e5:d5:41:
c9:17:66:d5:88:d6:28:3c:03:1b:34:be:e4:2b:a5:65:76:8d:
e4:19:ca:95:03:ad:06:47:4d:27:db:70:2e:d4:6a:51:b0:5c:
f4:da:09:a7:96:5b:b1:81:33:7d:35:41:17:d4:ea:5e:02:fd:
29:b5:aa:56:8a:91:d9:4f:87:e5:a8:3b:a8:8f:73:55:16:20:
48:31:84:18:52:8d:ab:bb:c1:c3:3f:d9:d3:fd:c3:ee:66:c8:
bb:b7:de:9c:5e:3a:d9:bf:6f:c0:44:ee:d6:a0:c5:e1:d5:24:
ca:d7:bf:2f:5b:db:15:62:b7:52:ee:74:36:56:ca:42:4d:fa:
5f:4e:ca:ee:ae:f5:77:ed:44:5c:7f:a6:a4:d3:54:21:d7:6b:
82:a7:43:ee:cb:7d:37:98:95:9f:0a:ac:11:fd:1e:f8:f6:c5:
4e:62:e7:10:4d:75:16:e2:85:74:3d:c5:b8:44:d6:76:73:8b:
7e:ad:2b:8b:24:f9:ab:b0:02:59:68:18:8d:35:44:97:d2:06:
b2:9a:bf:2e:f8:1f:10:cc:95:55:eb:a1:38:cb:51:06:75:86:
ed:6b:92:3d:bc:03:2b:bf:28:ee:c9:b3:88:34:dd:ac:33:36:
f9:fe:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org