Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/9AwuFg-EMMHiNAquYH0HcjceMik.roa
File: 9AwuFg-EMMHiNAquYH0HcjceMik.roa (raw, json)
Hash identifier: W+AsgW+dKboMCyxsAgo9PtHk3LeZ++rq7EvrcWT2DoA=
Subject key identifier: F4:0C:2E:16:0F:84:30:C1:E2:34:0A:AE:60:7D:07:72:37:1E:32:29
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 3B9CF9EC
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/9AwuFg-EMMHiNAquYH0HcjceMik.roa
Signing time: Sat 01 Jan 2022 14:04:14 +0000
ROA not before: Sat 01 Jan 2022 14:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6878
IP address blocks: 93.188.242.0/24 maxlen: 24
46.29.96.0/24 maxlen: 24
160.44.192.0/21 maxlen: 21
160.44.200.0/21 maxlen: 21
2a00:da8:fffb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000143340 (0x3b9cf9ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jan 1 14:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f40c2e160f8430c1e2340aae607d0772371e3229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:e2:25:fd:ed:90:f5:f6:7d:19:7d:4d:fa:
f6:e0:92:55:bd:aa:52:49:e3:3f:04:c0:b5:aa:d1:
59:d6:97:18:65:96:61:7c:04:be:6e:23:ba:d3:02:
8c:13:a5:ad:a5:23:17:19:6c:e8:b3:83:e2:de:77:
6f:c8:1a:3b:46:b0:ca:fa:02:d9:5c:75:6e:cc:d6:
f9:28:4c:7d:22:4e:e0:25:c4:43:69:1a:49:71:c1:
36:f4:0d:f0:7a:43:8e:ab:6c:08:62:9d:75:2a:b4:
c9:96:63:9e:ce:05:91:81:f2:23:7f:8f:d6:a0:07:
61:f5:60:6e:2f:bf:f1:19:a2:a2:f3:c7:24:b6:6a:
37:ea:30:c2:bc:ee:79:bf:ac:2e:e4:7e:b6:82:9d:
e7:f0:a7:f0:a4:54:6b:0c:96:0e:a7:5d:20:ea:f6:
fb:30:27:ca:d4:2c:bd:42:bd:d8:ec:95:77:7d:cc:
a4:2b:97:68:a6:5f:b4:f2:18:bb:21:9c:0c:4a:87:
78:69:85:a6:72:d7:d0:b0:94:f0:1e:8e:94:83:53:
07:be:43:1b:1a:ab:8c:32:6f:d5:83:80:ec:5f:c7:
d7:fe:1c:2e:d9:d7:f2:cb:d5:82:78:f4:d5:c6:4c:
6b:7b:dc:43:cf:a4:bc:4e:9c:0c:92:16:36:f9:5f:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:2E:16:0F:84:30:C1:E2:34:0A:AE:60:7D:07:72:37:1E:32:29
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/9AwuFg-EMMHiNAquYH0HcjceMik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.96.0/24
93.188.242.0/24
160.44.192.0/20
IPv6:
2a00:da8:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
54:cf:22:08:9d:c0:e8:22:f8:bb:03:22:4d:bb:72:8f:34:a7:
df:e4:99:a5:d9:c4:89:a3:cd:c4:84:e5:1b:fb:84:cc:aa:0e:
61:ec:42:f9:d7:36:e3:c4:5b:04:5b:bf:ea:63:6b:ee:9b:7a:
3b:f7:cf:ee:85:65:c1:d1:2b:c9:74:2d:91:1e:52:50:e6:28:
e0:bb:f3:db:b0:12:db:d6:5f:db:70:f7:96:a0:8e:99:0e:54:
39:8a:1c:26:95:eb:70:54:d4:3f:44:5e:a3:73:d4:eb:80:60:
04:8d:fb:65:0a:08:49:7a:03:6e:9d:2d:86:91:9f:c1:2d:df:
83:00:5f:92:34:70:cb:4f:29:76:0d:bb:21:05:06:9c:19:2f:
e4:cf:0b:b7:24:01:a9:07:91:77:3d:22:d1:f0:db:34:fd:6e:
bc:7d:fc:15:c5:a3:e8:f5:5d:6a:d2:43:92:a5:01:6f:da:98:
7e:21:8f:91:0c:b7:34:ef:93:64:a7:4f:e0:77:0d:07:3a:85:
db:11:fc:fc:71:f0:2b:3f:10:28:cb:75:d7:8d:c4:3e:12:9c:
87:e4:2a:52:27:27:a1:e0:ef:56:f7:f0:40:10:19:da:4d:7a:
6e:0f:68:3a:95:78:fa:74:b4:0d:d3:3d:10:4f:98:20:6f:68:
64:74:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:19 2023 by rpki-client on console-fra.rpki-client.org