Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/G8QFocQaC-ShqtZx6ky6m8OcLqk.roa
File: G8QFocQaC-ShqtZx6ky6m8OcLqk.roa (raw, json)
Hash identifier: VOb9neXj/nCDhdKnXEHcO3fmvu7SGysvPSf6anLx+CA=
Subject key identifier: 1B:C4:05:A1:C4:1A:0B:E4:A1:AA:D6:71:EA:4C:BA:9B:C3:9C:2E:A9
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 0184F1CDB2613D60EF07B82C6070C2730B47
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/G8QFocQaC-ShqtZx6ky6m8OcLqk.roa
Signing time: Thu 08 Dec 2022 12:55:00 +0000
ROA not before: Thu 08 Dec 2022 12:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44605
IP address blocks: 93.113.132.0/23 maxlen: 23
2a03:9c20:2000::/48 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:cd:b2:61:3d:60:ef:07:b8:2c:60:70:c2:73:0b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Dec 8 12:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bc405a1c41a0be4a1aad671ea4cba9bc39c2ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:04:65:e1:1c:51:a9:c0:2f:30:e0:b5:2e:
86:88:5f:92:a2:f8:06:43:a7:65:cf:05:c4:d4:ed:
f9:97:3c:8b:66:9b:85:41:f5:a8:61:44:26:c3:90:
cf:a8:58:25:14:36:15:36:1e:96:26:fb:e5:61:31:
73:57:0b:9c:a4:06:d6:f1:e6:18:dc:11:48:a2:32:
f4:6f:76:77:bd:64:a5:0b:d5:3e:a0:01:5c:f1:e1:
1d:01:44:9c:07:33:50:08:21:d1:1e:f7:ea:73:2e:
79:45:82:93:d4:26:dc:a0:ba:07:1f:03:16:68:7d:
68:bd:42:e1:5d:93:eb:90:00:22:16:97:24:de:f7:
6f:71:b1:cd:10:6d:bc:40:00:63:28:e7:c0:e4:6b:
73:44:fa:bd:9d:fd:2d:bc:d2:ff:16:ff:04:4b:e8:
17:0f:48:87:51:f3:51:76:a4:d6:21:bb:b6:ee:58:
dc:d2:c2:56:a0:e8:4f:ab:15:75:33:5b:d3:18:71:
f5:b7:47:92:93:b9:e6:86:17:ca:d9:f9:0d:f9:2b:
8b:98:1c:ee:d4:de:92:54:dd:f6:a0:33:c5:24:87:
7f:49:36:b2:34:a0:be:1c:93:6d:38:2f:e0:19:2e:
2e:5a:31:03:5a:97:81:06:67:a0:aa:bf:63:50:1b:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C4:05:A1:C4:1A:0B:E4:A1:AA:D6:71:EA:4C:BA:9B:C3:9C:2E:A9
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/G8QFocQaC-ShqtZx6ky6m8OcLqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.132.0/23
IPv6:
2a03:9c20:2000::/48
Signature Algorithm: sha256WithRSAEncryption
50:62:c4:17:ab:ef:47:ca:73:2d:80:21:33:88:b0:e7:e2:54:
7f:03:2e:6e:66:26:96:d4:0d:c9:cc:99:5c:a3:5a:8c:83:4e:
49:95:ea:61:db:66:34:7e:36:8a:c8:d0:37:e8:75:7b:1c:43:
da:55:db:c2:43:34:dc:de:1f:ed:73:64:dc:72:19:86:b1:09:
6f:5f:e3:a4:a4:75:d7:e9:27:88:90:51:22:2c:c6:cd:90:5b:
38:44:89:72:4b:7d:74:12:60:a7:34:e5:d2:44:71:f2:0a:07:
93:ef:aa:a1:79:5c:ff:df:db:cd:3a:bb:3b:f3:1b:83:60:ab:
fb:09:7a:fa:d2:81:f1:e9:01:bc:1a:6c:01:05:c6:bd:22:74:
53:30:cc:ad:82:5f:8f:7a:db:bb:da:53:e8:47:cb:49:30:fa:
b2:54:ee:9d:2b:9a:11:d0:c4:8a:9f:d3:11:86:b8:2a:a1:78:
36:a9:d0:d8:a6:c4:92:8d:fd:16:91:08:55:63:fd:3a:9a:7e:
30:54:2e:15:94:9c:d4:d9:6a:d9:e9:da:3c:04:b4:1f:ae:9b:
54:fd:60:1e:3d:2e:06:b8:3a:5b:10:b9:b9:9e:5c:3c:17:1d:
75:60:76:ac:ce:e7:a2:f0:b4:e5:8f:13:e4:3d:4b:87:11:b4:
b1:22:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:13 2024 by rpki-client on console-fra.rpki-client.org