Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/r-SM9xqTWmSf158k9LfPPXBm9Jo.roa
File: r-SM9xqTWmSf158k9LfPPXBm9Jo.roa (raw, json)
Hash identifier: GvYK1zka49GslqWxj83anOSWloH0fdl+JFvkBf4lTsc=
Subject key identifier: AF:E4:8C:F7:1A:93:5A:64:9F:D7:9F:24:F4:B7:CF:3D:70:66:F4:9A
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 0184BDAB4EBA22C4572D4C5416E86B18679E
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/r-SM9xqTWmSf158k9LfPPXBm9Jo.roa
Signing time: Mon 28 Nov 2022 09:57:11 +0000
ROA not before: Mon 28 Nov 2022 09:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38930
IP address blocks: 94.75.196.0/24 maxlen: 24
2001:1af8:4410::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:ab:4e:ba:22:c4:57:2d:4c:54:16:e8:6b:18:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Nov 28 09:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afe48cf71a935a649fd79f24f4b7cf3d7066f49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:13:b9:91:80:56:14:7a:a9:64:18:61:d5:
d1:a9:89:06:05:76:a8:45:b1:c5:30:9c:9c:cc:35:
96:19:a6:12:32:ed:db:7e:0b:b3:f9:39:f0:e1:6c:
91:21:dc:20:df:11:22:cb:69:3a:b4:37:a1:93:f8:
48:8e:01:a0:81:46:5d:35:05:08:34:be:46:a2:f4:
00:2a:ef:b6:4c:13:ce:1f:52:e6:49:45:cd:89:ff:
ae:bf:ba:f0:7f:1d:1f:c5:01:51:71:ba:ec:d5:c3:
3a:1d:37:cf:69:f1:29:0c:08:e6:e4:89:d4:e7:fc:
4d:26:4f:fe:11:86:9b:dc:d8:6b:fd:6f:a2:2e:67:
d4:d2:ba:49:67:24:dc:90:2d:a8:76:3b:62:c7:c2:
1d:eb:8c:84:95:3a:e8:c6:14:79:8d:f3:24:c6:59:
6e:c6:6b:a6:f9:33:36:af:ee:a1:da:ca:7f:54:37:
1b:9f:8d:ff:9f:1f:76:a0:ef:4e:ba:e1:b0:fe:90:
5e:fd:6d:9c:10:ec:72:55:66:38:78:36:f8:bc:5e:
a0:26:61:b5:58:40:a4:3d:97:0a:ec:3e:db:4c:3c:
f1:63:e2:44:61:52:ab:a3:e9:4d:5f:6d:c5:f6:c9:
09:ca:3c:c3:89:b1:2c:14:4c:8f:58:23:8c:42:af:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E4:8C:F7:1A:93:5A:64:9F:D7:9F:24:F4:B7:CF:3D:70:66:F4:9A
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/r-SM9xqTWmSf158k9LfPPXBm9Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.75.196.0/24
IPv6:
2001:1af8:4410::/48
Signature Algorithm: sha256WithRSAEncryption
a1:dc:03:35:ba:76:f4:6e:8d:23:e4:ce:e2:40:b2:13:bb:20:
0d:66:28:31:77:1d:01:9b:f9:81:cd:29:24:27:77:ab:b3:11:
d3:be:d5:45:28:56:aa:be:a6:b8:33:53:2b:cb:2c:30:30:28:
d6:1e:db:2d:ce:2e:36:ca:c3:1b:36:92:f1:3c:e7:4b:55:62:
06:83:4a:38:63:80:62:80:55:8d:5b:e3:13:0b:e9:a8:8c:58:
88:3a:1c:5b:28:17:f5:48:ea:2b:5e:61:fc:b3:19:1c:77:50:
13:fb:00:07:f3:d3:5a:36:46:ec:c7:0a:1f:a0:9e:99:2b:50:
58:6c:97:dd:10:03:99:87:0a:98:05:01:fb:92:8a:a1:ba:df:
97:6c:33:bf:7b:43:7b:04:f1:2a:45:02:17:c5:02:79:44:78:
c8:09:87:4d:cd:1c:18:14:86:cb:66:c0:d1:05:50:6b:4e:65:
28:30:8d:4c:a3:4f:10:22:fc:9e:8b:b0:a8:75:93:24:54:c5:
7f:4a:95:60:60:39:43:b0:36:9e:91:7e:6d:21:e9:c7:36:7d:
e9:b0:d6:bb:b6:7f:41:cf:17:61:6b:a0:b4:4c:66:ea:4e:fa:
58:20:3b:e7:e1:8f:35:1e:5f:5d:58:92:ae:29:75:84:ee:2b:
40:48:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org