Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4ss-rTTIMCyaXXG87OXi3ldZ-ec.roa
File: 4ss-rTTIMCyaXXG87OXi3ldZ-ec.roa (raw, json)
Hash identifier: 4Hp/ecjea5V0a1Ricco5dcaLHcPDApwfxH646Ge2w7g=
Subject key identifier: E2:CB:3E:AD:34:C8:30:2C:9A:5D:71:BC:EC:E5:E2:DE:57:59:F9:E7
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0DEEB93C
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4ss-rTTIMCyaXXG87OXi3ldZ-ec.roa
Signing time: Sat 01 Jan 2022 10:54:14 +0000
ROA not before: Sat 01 Jan 2022 10:54:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207907
IP address blocks: 192.95.92.0/22 maxlen: 24
192.95.84.0/22 maxlen: 24
192.95.80.0/22 maxlen: 24
192.95.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233748796 (0xdeeb93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 10:54:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2cb3ead34c8302c9a5d71bcece5e2de5759f9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:79:ff:76:52:15:c6:99:ba:1c:e1:e8:7a:
02:a8:a3:83:91:09:d3:2a:73:23:a7:0e:28:e7:84:
ab:fb:b9:a5:e3:98:03:85:b5:f0:40:86:9d:4c:d8:
87:4e:e7:6b:f7:df:93:2a:d6:84:ee:93:d7:ce:9c:
62:56:5a:9a:7d:2a:94:80:26:78:d0:14:f7:4a:9a:
24:d7:b4:f2:11:8b:eb:00:d4:1e:66:91:b2:77:f9:
52:a1:a8:62:12:bc:59:b5:e6:a5:ae:4f:5d:34:e8:
d6:fc:02:37:13:20:ea:2a:61:5c:d3:2d:6b:67:b6:
6a:d7:17:93:c2:bc:91:39:37:a9:68:bf:14:f6:56:
d4:3a:d3:c2:ba:7c:01:09:64:f5:1b:c6:dd:f6:e8:
c3:02:77:7e:43:e3:c3:c6:6b:f3:2f:56:2d:cf:5f:
5f:c3:b6:08:9e:8c:50:76:2c:d0:5d:30:47:05:dd:
ea:bf:ce:84:c2:f7:62:71:68:b0:7e:65:2c:bf:cc:
ea:b5:2a:8e:da:78:55:26:b7:6b:3f:11:08:87:7b:
d5:a0:f4:33:86:cd:66:e2:92:8b:bc:13:24:ba:59:
08:60:0e:c5:06:33:8b:22:70:5b:4f:0d:f0:ec:7b:
ad:9e:cc:1b:5e:e7:1a:1c:3c:dc:16:de:e2:2b:52:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:3E:AD:34:C8:30:2C:9A:5D:71:BC:EC:E5:E2:DE:57:59:F9:E7
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4ss-rTTIMCyaXXG87OXi3ldZ-ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.95.80.0/20
Signature Algorithm: sha256WithRSAEncryption
69:63:9b:86:b7:bc:fd:9e:9b:48:59:17:38:10:b1:d1:fc:d8:
c8:21:ba:62:cc:27:6e:2d:10:2c:7f:a7:fa:cf:6a:03:26:d1:
14:fe:25:09:c8:d4:c0:b0:80:61:fd:f4:03:f1:19:5d:64:39:
0b:52:2e:f0:d2:36:95:5a:86:06:a5:ed:86:58:10:d3:00:50:
60:35:7d:3a:d4:04:ba:0b:07:dd:ab:8a:a4:a3:e1:43:a6:a7:
a7:6a:e4:e7:7f:91:25:e4:87:9d:94:af:b8:75:4c:a4:b8:bc:
e1:c5:7c:5f:09:26:df:a6:f8:d8:45:77:f4:15:75:67:b8:6b:
99:0d:34:a7:e6:60:65:a1:20:5c:22:6a:ff:38:63:12:78:12:
4e:01:da:db:8d:48:62:12:80:58:7f:7c:41:f8:5f:46:a6:32:
f0:3c:ba:e5:16:dc:e3:f0:76:fd:4c:24:a7:60:ce:bb:63:12:
1b:f7:48:25:8a:da:e1:83:5b:9b:2d:2d:e2:41:27:e3:c2:71:
28:e0:7b:b1:03:99:59:3a:d8:e2:4d:de:68:57:db:68:b5:14:
b2:4d:54:81:09:e5:d1:35:25:1f:3c:a7:58:40:a7:12:18:24:
b3:1d:76:7d:38:2d:1d:aa:2a:0c:7d:94:a7:e8:c2:c7:03:c4:
f6:af:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org