Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/KVt8ze_GNN47Eemeg3Jx8HHKB7o.roa
File: KVt8ze_GNN47Eemeg3Jx8HHKB7o.roa (raw, json)
Hash identifier: N3rFwmCaWawz3yPFf3nyC59udrf9Pv9cq3+gnjEeOKQ=
Subject key identifier: 29:5B:7C:CD:EF:C6:34:DE:3B:11:E9:9E:83:72:71:F0:71:CA:07:BA
Certificate issuer: /CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Certificate serial: 0A6DE73D
Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/KVt8ze_GNN47Eemeg3Jx8HHKB7o.roa
Signing time: Wed 01 Jun 2022 11:19:20 +0000
ROA not before: Wed 01 Jun 2022 11:19:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29434
IP address blocks: 193.200.170.0/24 maxlen: 24
93.94.192.0/21 maxlen: 24
93.94.199.0/24 maxlen: 24
93.94.194.0/24 maxlen: 24
195.85.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174974781 (0xa6de73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Validity
Not Before: Jun 1 11:19:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=295b7ccdefc634de3b11e99e837271f071ca07ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:af:59:7f:0f:f3:fa:a7:53:ae:b7:41:91:
78:cd:25:c5:fd:3a:9a:f4:ad:d6:0e:cd:32:52:59:
c4:2a:3e:52:77:a9:c9:95:76:2e:ee:fd:bd:d6:55:
55:7e:1b:1e:0b:2e:be:17:3c:07:1e:df:2c:36:4e:
54:6e:b0:c8:dd:98:57:02:fb:43:6f:c2:13:18:ff:
95:86:b6:fc:44:22:e0:ec:5b:95:d1:95:88:c9:7c:
48:1b:f0:cf:0a:b5:12:99:66:19:69:e2:b5:da:f6:
b4:a1:3f:74:ef:44:7e:1f:6a:a0:47:28:7d:19:8d:
bb:26:a7:8b:d8:65:92:85:29:ea:34:83:6a:de:64:
61:9b:60:20:03:49:7f:43:bc:e7:b9:72:fc:78:fb:
1b:b3:2d:61:f2:a8:de:5c:d0:27:d2:c7:dc:76:1f:
ad:f5:13:c7:e2:b7:54:ea:4b:21:ef:76:6a:43:5d:
b1:f1:98:27:44:2a:ef:2b:64:38:76:75:07:66:e3:
5d:b6:12:b3:ea:70:03:cf:41:bd:5f:b9:e1:e0:d2:
fc:35:e4:18:46:fc:99:0c:57:35:ba:5b:0f:5c:ae:
b9:e7:6f:16:e5:16:84:8a:cc:57:cd:ae:1c:e4:00:
4c:a8:82:fc:1b:e8:09:a5:cf:b7:58:3b:a0:bf:5d:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:7C:CD:EF:C6:34:DE:3B:11:E9:9E:83:72:71:F0:71:CA:07:BA
X509v3 Authority Key Identifier:
keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/KVt8ze_GNN47Eemeg3Jx8HHKB7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.192.0/21
193.200.170.0/24
195.85.255.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a3:9e:19:e3:c0:7c:0f:3c:ca:33:88:d1:fd:0c:6d:60:e4:
0b:af:6c:e5:ce:9e:18:f5:67:db:11:9b:a2:14:40:e3:d2:47:
72:c4:cf:3f:98:bf:a0:f0:91:10:d4:97:33:6f:77:90:94:3a:
eb:61:da:dd:ba:f2:cd:d8:20:d3:99:da:58:f8:e3:c5:ca:62:
10:eb:7c:75:15:8b:9d:e3:cd:58:39:94:30:07:ec:fe:4a:fe:
d0:de:d4:93:4e:ae:67:11:6a:e1:04:4d:3e:23:cc:c3:3c:a2:
b9:0f:6c:20:fb:3c:a4:5e:d5:3f:ba:f0:aa:8f:75:9a:4c:38:
84:c8:00:bc:de:2e:b1:04:8a:4f:14:23:c7:8d:90:f0:8e:e9:
c0:34:a5:03:fe:9c:11:ec:84:ef:aa:e1:a1:14:2f:55:7b:00:
cc:ec:47:38:39:6f:d3:27:10:02:0f:9f:1b:d4:88:0d:c7:04:
64:61:f2:22:e5:42:5b:d3:52:ed:cc:55:1f:d5:ea:ed:31:e9:
0e:58:23:0f:84:02:97:17:fa:37:0c:58:9f:c3:76:fd:d7:a5:
81:43:6b:e3:1b:1d:e6:76:c7:f5:bd:a8:b5:ae:f2:4c:1f:b7:
a2:8a:ae:3b:7a:70:eb:63:e2:54:f4:90:eb:0c:cc:83:f2:02:
7f:a5:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:48 2024 by rpki-client on console-fra.rpki-client.org