Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/smNjPnkTGrNDHNjFUxcb2jQ4WUk.roa
File: smNjPnkTGrNDHNjFUxcb2jQ4WUk.roa (raw, json)
Hash identifier: Uw4/WMXo294NzbsEhP5FAMn1O0LI/0qt7/anjfwxsbM=
Subject key identifier: B2:63:63:3E:79:13:1A:B3:43:1C:D8:C5:53:17:1B:DA:34:38:59:49
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 039DEE0E
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/smNjPnkTGrNDHNjFUxcb2jQ4WUk.roa
Signing time: Sat 01 Jan 2022 12:02:19 +0000
ROA not before: Sat 01 Jan 2022 12:02:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210578
IP address blocks: 193.218.190.0/24 maxlen: 24
193.150.70.0/24 maxlen: 24
94.158.218.0/24 maxlen: 24
94.158.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60681742 (0x39dee0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 1 12:02:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b263633e79131ab3431cd8c553171bda34385949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:cc:ae:57:11:90:80:bb:9f:00:b9:cf:4b:
d4:a9:08:22:32:38:13:a7:0e:80:eb:0f:3e:9c:f6:
d9:34:fd:a9:03:2c:2f:c1:be:a4:99:8f:4e:d1:c0:
e6:73:6a:bd:6a:72:ad:00:77:ca:20:62:00:0d:2e:
72:b2:6f:1b:3c:8c:07:e0:b9:b2:b3:14:8d:1a:e9:
de:3e:02:97:e3:be:bb:2e:59:e3:a1:93:c3:bf:df:
2b:1e:0a:2a:bc:2d:72:c7:8c:d6:ba:30:16:85:b0:
5c:56:4f:7b:e5:b9:03:22:aa:b1:c8:ee:59:85:f1:
be:62:39:0c:c6:29:11:82:ce:72:5f:e8:fb:0d:00:
99:53:de:16:1e:33:29:f2:79:39:5c:30:80:a9:96:
82:6b:69:16:3a:a2:2c:a7:04:f3:cf:ce:dd:4f:fb:
50:93:c6:74:94:ac:20:97:84:df:60:7d:a6:db:de:
0c:44:96:6a:92:d7:6a:34:fd:a5:4b:13:aa:a5:2e:
4f:51:a0:90:73:55:cf:b5:72:d5:71:68:43:b9:63:
8b:48:93:6a:7a:7c:3a:23:ba:71:d3:e1:29:a7:7d:
b0:7b:5d:ff:87:16:9b:db:86:61:b8:28:6c:96:87:
5a:83:7f:a9:07:66:ff:1e:e1:8b:7b:06:20:82:65:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:63:3E:79:13:1A:B3:43:1C:D8:C5:53:17:1B:DA:34:38:59:49
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/smNjPnkTGrNDHNjFUxcb2jQ4WUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.218.0/23
193.150.70.0/24
193.218.190.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cb:a6:41:12:86:39:ad:ce:ed:e1:78:d2:8f:03:b9:91:6c:
12:60:a9:f0:b8:95:fb:48:f5:df:64:54:04:9c:61:ad:5c:34:
ec:a7:c2:38:19:58:4a:eb:78:0c:f9:f4:21:76:db:13:37:6a:
00:c4:f8:80:81:61:19:06:37:ef:06:ad:2b:0d:ce:64:8d:2d:
b8:04:91:c6:9f:5a:26:68:a3:77:57:84:5d:7f:1b:d6:67:b8:
24:57:34:1c:22:d7:c0:e2:95:34:11:fe:03:2f:72:f3:65:53:
32:85:9d:91:0f:bb:58:fc:d4:b6:b9:4a:2a:c5:39:13:11:ed:
d2:3d:0c:01:e1:34:3d:62:9c:fd:82:e0:bd:d8:90:58:a7:f6:
8c:60:31:56:6a:73:16:d2:0d:3d:d0:e8:09:5a:e5:1a:0c:97:
20:d2:c0:95:51:60:1e:27:61:de:06:54:e0:75:9e:94:bf:f8:
37:ec:21:75:98:60:75:96:79:0f:ed:19:42:82:43:6f:e0:5a:
6e:b4:40:fc:45:90:c0:af:09:68:64:69:b4:78:73:62:9c:89:
39:4f:85:0c:03:25:aa:9a:82:87:05:e7:82:8e:4f:71:31:11:
91:c1:8f:6f:89:c4:d9:c3:bf:b0:7b:45:4a:8f:27:21:2a:79:
6a:6f:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:52 2023 by rpki-client on console-ams.rpki-client.org