Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/QHCaI4Gm0WjRjGMPkuJCrTb4ddk.roa
File: QHCaI4Gm0WjRjGMPkuJCrTb4ddk.roa (raw, json)
Hash identifier: G3i+lQgrUa8GdjtjY281fxfawx0aXHfJq2FkeYI4WWM=
Subject key identifier: 40:70:9A:23:81:A6:D1:68:D1:8C:63:0F:92:E2:42:AD:36:F8:75:D9
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 06496466
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/QHCaI4Gm0WjRjGMPkuJCrTb4ddk.roa
Signing time: Sat 01 Jan 2022 09:54:23 +0000
ROA not before: Sat 01 Jan 2022 09:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 93.95.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105473126 (0x6496466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jan 1 09:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40709a2381a6d168d18c630f92e242ad36f875d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:88:dc:6c:57:c4:22:a6:b3:56:66:90:ea:
54:2c:a7:36:0b:b6:b3:cc:35:ef:e0:85:3a:69:de:
9c:92:83:c9:fc:8f:26:40:89:0c:90:47:73:07:9e:
23:70:80:ff:f0:4d:c2:b5:d7:39:7b:ae:0a:8a:d0:
c2:83:c4:8f:e4:88:6c:bd:2a:e9:62:ee:b1:4d:7d:
fc:08:b8:7d:ef:4b:48:0c:d5:30:b3:d1:f0:48:00:
9d:0a:7a:53:94:30:f9:a8:77:51:84:32:04:f4:d8:
90:c8:21:cc:b1:ed:8a:4d:3b:d5:4d:20:a7:d2:fe:
89:4d:f0:42:ad:81:de:5e:1c:86:36:16:0e:84:5f:
92:04:75:b7:35:f1:2f:d1:17:99:59:fa:1e:fe:e3:
29:d2:91:74:c9:83:4f:11:fb:11:9c:c4:63:c5:13:
30:fc:f2:ea:4b:98:0e:58:8d:c9:9a:22:d0:a2:4b:
94:10:e7:5b:bf:91:1e:e8:f4:95:e9:c1:ac:9f:38:
38:f7:62:2b:89:58:37:df:0e:30:f9:6a:dd:80:59:
00:28:ff:33:ab:70:2b:e5:07:25:06:81:0c:1d:a1:
3b:24:e8:86:0c:55:b7:24:f6:21:56:83:22:16:7a:
ca:2d:84:db:52:2e:46:05:d1:5a:26:58:a3:de:81:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:9A:23:81:A6:D1:68:D1:8C:63:0F:92:E2:42:AD:36:F8:75:D9
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/QHCaI4Gm0WjRjGMPkuJCrTb4ddk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.48.0/21
Signature Algorithm: sha256WithRSAEncryption
30:6d:74:42:22:dd:10:69:51:3c:7a:b2:e7:d7:07:3c:e6:5c:
a6:58:39:b8:75:fc:c9:5b:c6:86:0f:78:9e:37:a1:56:79:ea:
4b:27:e8:ed:68:3f:e6:6c:f7:95:90:e1:8f:f2:2a:de:25:bf:
5e:8b:03:d6:3a:d5:79:79:69:0b:1b:08:f4:d5:2b:4e:f4:4e:
1b:17:38:03:37:63:1b:36:60:90:ad:2b:e0:dc:c4:d5:33:39:
f3:3b:f9:64:3e:bb:96:a1:d8:ce:91:5f:0f:a9:0c:63:70:55:
3b:d4:5a:1e:7c:4d:0d:c7:ef:c1:ce:a9:51:c8:02:ea:3e:97:
4f:4f:29:5a:8f:17:43:7b:4e:ba:b0:78:ad:29:34:cb:93:dd:
7a:14:89:58:f9:23:36:84:60:ea:36:61:1b:81:cc:a3:d4:f5:
6d:cd:90:59:6d:67:51:17:97:84:73:d3:d5:8d:a9:2f:bf:38:
1a:43:6e:10:70:2d:51:4e:6c:b7:47:5d:60:e4:1b:1e:47:72:
14:e5:5a:a7:c1:02:8c:0b:95:de:e1:4e:df:e5:b9:7f:9b:8c:
d5:85:95:17:8d:98:53:67:b7:7f:22:bc:aa:a2:10:33:0b:e0:
69:36:26:6a:d1:e0:ed:c2:e5:3d:23:42:7e:11:d5:e9:6c:31:
d6:a6:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:52 2024 by rpki-client on console-fra.rpki-client.org