Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/sZkSNU6pYr-ngJQkKoudfe5Rfpw.roa
File: sZkSNU6pYr-ngJQkKoudfe5Rfpw.roa (raw, json)
Hash identifier: PO+H5foHzS1jmfuy98WrLHmh0vShK4cQtfl6p0GvRb8=
Subject key identifier: B1:99:12:35:4E:A9:62:BF:A7:80:94:24:2A:8B:9D:7D:EE:51:7E:9C
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 018394C2F5E68E38D505FFE2F1C8A7BA08BC
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/sZkSNU6pYr-ngJQkKoudfe5Rfpw.roa
Signing time: Sat 01 Oct 2022 18:15:48 +0000
ROA not before: Sat 01 Oct 2022 18:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210392
IP address blocks: 93.126.38.0/24 maxlen: 24
93.126.37.0/24 maxlen: 24
93.126.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:94:c2:f5:e6:8e:38:d5:05:ff:e2:f1:c8:a7:ba:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Oct 1 18:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b19912354ea962bfa78094242a8b9d7dee517e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:39:78:a8:06:85:8b:29:c7:0d:e4:3c:4f:
30:21:48:6c:4c:0f:22:16:db:3b:86:dd:65:41:71:
66:9c:34:ef:da:ba:4b:90:3b:c4:a1:4b:07:23:de:
5f:0b:1a:1c:f0:84:3d:eb:49:d0:98:e0:14:cb:dd:
66:69:5d:86:d9:24:51:94:42:13:5e:93:bd:e1:a5:
6c:a6:9c:b7:4c:c0:ce:40:a8:9d:3c:ae:b8:ad:d4:
50:9a:b3:0c:71:60:93:36:c2:d9:87:04:b1:1c:39:
74:9e:53:b1:c8:1a:6b:bb:39:c1:55:7a:fe:ab:db:
60:55:df:3e:d2:8f:a6:08:b6:df:b0:83:b2:ca:a9:
c5:9e:1a:8d:9b:2b:9f:22:d2:ad:91:3e:b2:ce:51:
6e:60:a9:79:6a:e7:76:31:56:ac:19:55:02:ad:ed:
46:41:69:29:0d:64:ed:7e:97:d5:a5:5f:c1:3b:26:
98:4f:a1:c7:27:41:d1:9e:4f:a7:bd:b9:7d:46:63:
69:16:3d:59:3d:ea:b8:11:6d:17:27:ab:30:78:32:
a2:a5:35:a4:b9:c3:fe:e9:a5:64:0c:33:f2:1e:0d:
e1:73:cb:20:5d:2c:a1:22:d4:0b:f8:cd:a5:ae:b2:
31:b5:0c:f3:05:24:b8:f7:0c:e5:d2:ee:7b:07:54:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:99:12:35:4E:A9:62:BF:A7:80:94:24:2A:8B:9D:7D:EE:51:7E:9C
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/sZkSNU6pYr-ngJQkKoudfe5Rfpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.36.0-93.126.38.255
Signature Algorithm: sha256WithRSAEncryption
49:5e:74:ba:ee:52:81:d9:a4:d5:8c:3a:7a:67:2e:41:b6:3f:
93:1d:ba:8b:70:4a:ec:4c:f5:cb:e1:d8:85:af:96:44:5e:11:
85:a7:e5:6c:86:11:b5:46:1c:a3:ce:50:0c:ca:67:3d:01:e0:
22:75:2d:6e:7f:91:5b:63:a1:e2:69:82:2e:3f:83:44:94:8f:
f7:5d:9c:5f:66:29:72:91:45:c5:4c:0b:f9:a1:4c:30:f3:3b:
6d:e1:4e:aa:d9:26:1f:9d:e9:ab:92:66:db:ae:72:e7:a9:0c:
06:2e:80:67:83:d4:b9:10:dd:4f:fc:33:68:20:a7:7f:3d:70:
04:52:0f:0b:f9:25:58:0a:45:ec:9f:e6:e7:f5:ce:ea:8d:8e:
ab:24:98:97:df:82:64:fb:35:11:ed:a4:51:54:23:35:d1:cb:
4f:9a:a8:5d:4f:84:89:37:22:fe:49:4d:0a:11:47:40:90:c2:
fd:75:30:d6:90:5c:77:82:e2:e2:e1:11:88:ef:ff:75:9a:da:
a7:92:22:60:a6:12:82:1b:d7:81:51:24:81:ed:11:8e:d0:d5:
d2:b6:9e:96:f6:b7:46:40:7c:25:1a:08:c3:96:bd:0d:a2:ca:
e7:d7:24:45:72:4d:95:f9:f5:65:85:d1:21:ff:5f:15:08:40:
99:77:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-fra.rpki-client.org