Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/g_-98h823hZFQN0YI_oqDIi5IWQ.roa
File: g_-98h823hZFQN0YI_oqDIi5IWQ.roa (raw, json)
Hash identifier: eFxXpxRf3t3852DBNwTC+ik1AmtmRraZmADP6FJAz9Y=
Subject key identifier: 83:FF:BD:F2:1F:36:DE:16:45:40:DD:18:23:FA:2A:0C:88:B9:21:64
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 3C9A41FA
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/g_-98h823hZFQN0YI_oqDIi5IWQ.roa
Signing time: Sun 23 Jan 2022 13:13:11 +0000
ROA not before: Sun 23 Jan 2022 13:13:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50810
IP address blocks: 93.117.176.0/20 maxlen: 22
93.119.208.0/20 maxlen: 22
188.213.192.0/21 maxlen: 21
188.212.240.0/21 maxlen: 21
37.98.114.0/24 maxlen: 24
188.211.0.0/20 maxlen: 20
188.209.192.0/20 maxlen: 20
178.131.0.0/16 maxlen: 22
94.101.248.0/21 maxlen: 21
37.98.64.0/18 maxlen: 22
62.102.128.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016742394 (0x3c9a41fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 23 13:13:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83ffbdf21f36de164540dd1823fa2a0c88b92164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:43:d1:04:5c:12:39:8d:fa:9a:8c:e5:52:
a8:2f:9c:f7:58:e6:41:dc:26:0a:0d:4e:63:f9:25:
14:6e:f6:9d:da:e3:e1:26:c5:f7:d3:aa:a4:34:d6:
55:fe:ec:d3:22:33:d6:5c:d3:32:b9:9b:96:95:fc:
be:ed:3e:a7:1f:18:27:cd:7d:d7:76:24:eb:9e:52:
6a:76:0d:1b:8c:77:03:0b:19:1e:8b:07:8a:90:74:
7f:06:9e:8b:a9:9d:ae:4a:bb:0d:2b:20:55:1f:ec:
fc:e7:25:7c:40:3b:30:2c:fa:83:3e:29:ef:d8:5f:
93:ba:d3:97:f1:42:cc:c4:b0:0a:d4:d6:ca:9f:88:
08:26:76:8d:b2:62:51:03:f2:33:28:d7:eb:3f:8d:
ef:38:a4:cd:49:a1:c6:4c:a7:9e:e1:79:51:cd:d2:
55:88:3b:95:1a:9a:a4:51:4f:89:c6:de:a9:fb:d5:
96:7e:af:7f:d2:0b:a8:01:11:3c:25:7c:04:5b:0b:
4a:f0:48:be:5a:ba:a4:65:8e:fc:e9:f8:2e:12:8a:
6d:a4:8d:6d:cf:04:74:f7:5f:77:43:97:df:5f:c0:
81:c8:3e:89:80:79:30:ea:8a:cf:49:6c:95:6f:3e:
9e:6c:61:3d:b5:63:91:e6:13:8a:a0:3f:2a:2e:e9:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FF:BD:F2:1F:36:DE:16:45:40:DD:18:23:FA:2A:0C:88:B9:21:64
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/g_-98h823hZFQN0YI_oqDIi5IWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/18
62.102.128.0/20
93.117.176.0/20
93.119.208.0/20
94.101.248.0/21
178.131.0.0/16
188.209.192.0/20
188.211.0.0/20
188.212.240.0/21
188.213.192.0/21
Signature Algorithm: sha256WithRSAEncryption
51:3a:d3:ce:99:94:30:f6:ce:ab:f2:aa:23:98:3e:0a:31:c2:
b0:46:e1:ad:74:ef:50:4b:b7:b2:db:e2:cf:ec:42:a0:c1:1c:
57:dd:df:22:18:d6:b3:5c:17:a7:21:a6:8a:eb:4e:c5:a5:2c:
d3:4d:35:64:b4:b5:88:54:36:90:84:fd:20:05:25:33:60:dc:
93:7e:0a:45:a4:39:f4:55:57:ac:99:60:84:3a:9e:8a:96:3d:
56:dd:a3:81:bc:22:fc:a1:fe:cf:35:25:52:ec:a3:2b:30:19:
ba:b0:26:77:88:6d:ff:12:97:c7:86:3c:88:1e:8b:45:5f:36:
59:9d:b9:a7:c8:0e:8d:92:c1:e8:bd:40:19:f2:81:e2:bd:de:
a9:7c:03:4d:7c:bc:42:89:96:78:87:20:dc:d3:25:e0:28:6b:
cb:13:f6:96:fc:e9:83:7a:57:c1:db:70:d5:8f:b8:54:f7:c9:
e6:38:c1:4e:d7:72:05:5b:5c:ae:26:91:99:b5:0e:e0:cf:9e:
e1:7c:d0:33:1a:9c:4f:2d:fb:3a:7f:35:fb:2d:9f:40:ef:9e:
08:3a:bc:dd:b3:3e:7e:ef:44:75:5b:c8:58:80:80:df:0d:15:
be:66:c4:94:de:72:46:5c:47:7a:d6:08:ee:87:7e:0d:cd:e0:
cc:22:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:15 2024 by rpki-client on console-fra.rpki-client.org