Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4OucQ5pJasUnHKA5eMCqYDf92JA.roa
File: 4OucQ5pJasUnHKA5eMCqYDf92JA.roa (raw, json)
Hash identifier: zBRPjwJsZzbaR2v6I81CPJdpRNcZcb3OlFu+4namtNk=
Subject key identifier: E0:EB:9C:43:9A:49:6A:C5:27:1C:A0:39:78:C0:AA:60:37:FD:D8:90
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 36649CC2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4OucQ5pJasUnHKA5eMCqYDf92JA.roa
Signing time: Sat 01 Jan 2022 13:57:23 +0000
ROA not before: Sat 01 Jan 2022 13:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51461
IP address blocks: 93.114.79.0/24 maxlen: 24
93.114.88.0/22 maxlen: 22
93.114.72.0/22 maxlen: 22
93.114.76.0/23 maxlen: 23
93.114.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912563394 (0x36649cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0eb9c439a496ac5271ca03978c0aa6037fdd890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:9c:d7:87:f7:1e:b9:f3:1e:2d:28:9a:3a:
73:b1:47:99:65:7f:bf:04:cb:68:f5:fc:06:cb:65:
26:ab:1b:c6:44:94:21:98:4c:11:16:b5:09:6f:83:
f2:b5:90:65:41:d6:e9:ff:7a:cc:12:e7:8f:42:44:
80:20:a0:7a:60:80:d2:e7:4d:12:75:ca:ca:6d:52:
22:64:f0:c0:d0:f6:89:de:10:c5:55:74:f5:1a:b5:
7c:1f:6b:88:da:ca:61:1f:3a:f8:02:f9:ce:ad:44:
09:92:ee:77:cc:da:6c:65:a5:b1:8f:0e:52:89:a7:
f3:64:86:dd:b1:ab:a5:26:11:e1:21:d9:01:68:27:
2b:9a:14:f2:3d:3f:a0:80:f8:4a:5a:12:28:f5:f8:
29:27:77:25:80:36:d5:65:21:63:68:99:5d:78:5d:
b2:e5:68:e2:95:19:c1:a0:dc:61:4e:b3:9c:94:f2:
38:5e:9f:d8:db:73:ec:cb:24:d7:a8:05:b9:0d:70:
9b:6a:0c:6d:f6:dd:44:02:bf:26:c3:aa:41:4e:6c:
66:d3:42:38:d7:52:1b:c1:9f:43:61:1f:1e:a7:b4:
b0:04:43:39:96:3c:00:db:cd:07:0e:0c:a0:f6:22:
d2:d4:c5:0d:b4:c2:b4:d7:8e:f1:db:b5:c8:b4:f1:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EB:9C:43:9A:49:6A:C5:27:1C:A0:39:78:C0:AA:60:37:FD:D8:90
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4OucQ5pJasUnHKA5eMCqYDf92JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.72.0/21
93.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:fe:26:45:cd:b0:aa:74:e3:40:0d:ae:c6:2a:d5:91:d4:c8:
d3:da:b4:f4:71:2b:0a:5e:72:04:0f:2a:a1:74:8d:fe:1a:3e:
3a:5b:2a:f5:9d:41:13:68:62:34:a0:dc:c8:9d:1a:55:db:0f:
4e:cf:24:a1:42:a3:f9:f4:80:16:99:27:3a:52:e6:cf:34:ed:
5c:d5:e0:3a:3c:88:16:cc:da:69:ad:21:68:24:bc:e1:78:72:
f0:89:48:0f:e0:35:47:92:a8:2a:62:28:f7:db:b4:01:3f:f6:
5c:97:f9:66:27:de:9b:5a:9c:ec:d5:c8:4b:c5:e1:ad:6f:2f:
ff:47:5f:a2:50:5d:da:d9:a3:01:a0:83:40:ae:59:db:c7:2f:
8d:35:85:29:75:17:09:74:29:8c:9d:e4:c7:c7:bf:4a:57:2a:
b2:e1:34:cb:24:32:1a:27:90:89:bb:78:f1:05:77:00:1b:48:
d1:cf:cf:45:3b:d3:63:b2:d0:fc:06:8e:e8:54:89:2d:e9:ec:
d9:d1:77:92:d7:92:7b:a4:ee:e5:af:19:ba:2b:c5:35:0a:2e:
b2:14:41:9a:3c:c3:bd:ce:64:16:5c:19:05:f9:b8:f7:b5:52:
21:46:56:9b:93:a0:88:fb:d7:19:37:83:06:3c:4e:22:f8:23:
6b:d9:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org