Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/NcrX8_bVNIi17vfDs4SWmG4QvrI.roa
File: NcrX8_bVNIi17vfDs4SWmG4QvrI.roa (raw, json)
Hash identifier: kSR5xpEi6frrXugmlErhxItPYCqOCa1tI+7QZA57Q+k=
Subject key identifier: 35:CA:D7:F3:F6:D5:34:88:B5:EE:F7:C3:B3:84:96:98:6E:10:BE:B2
Certificate issuer: /CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Certificate serial: 05B88295
Authority key identifier: 21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/NcrX8_bVNIi17vfDs4SWmG4QvrI.roa
Signing time: Wed 22 Jun 2022 16:18:26 +0000
ROA not before: Wed 22 Jun 2022 16:18:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18254
IP address blocks: 93.93.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95978133 (0x5b88295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Validity
Not Before: Jun 22 16:18:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35cad7f3f6d53488b5eef7c3b38496986e10beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:ef:6b:97:a5:27:12:88:61:61:f2:d7:7c:
a2:97:f4:f4:33:9b:a7:27:34:45:3b:d6:fe:13:60:
48:c3:c5:93:4e:b8:80:4a:93:1b:e6:8b:77:f0:fa:
26:48:16:db:02:a2:6a:46:ee:c1:72:c2:b9:15:0c:
7e:21:b9:12:ff:8d:38:f8:93:d4:95:ed:df:4c:93:
66:7d:0f:48:cb:11:72:d7:96:66:0d:4a:51:e7:33:
6c:eb:bf:61:1e:e3:fa:99:74:41:30:dd:74:b5:72:
fa:da:bf:57:a8:de:e8:10:52:e8:fe:5d:20:52:81:
06:0d:7c:09:3d:d4:fd:7b:28:2e:4f:42:b1:07:c2:
c0:7b:03:c7:0c:5c:b7:da:c8:5b:e3:27:eb:2d:a8:
17:a2:c2:58:3b:e1:bb:dc:8f:c0:a8:ea:30:2b:77:
88:9b:69:84:dc:7f:f0:e1:6b:35:28:d8:3a:79:c3:
cc:53:5a:4e:31:d7:9c:67:c2:3b:b1:36:70:a5:d1:
89:17:2c:98:09:fa:1e:59:45:03:14:d6:56:34:81:
1b:0a:d7:e3:72:f0:c7:30:19:2d:c3:49:c9:09:cb:
17:9c:ef:e6:9a:ac:83:42:95:8c:f0:a7:2e:11:e0:
81:c0:ed:7a:fa:67:58:89:4d:95:b6:8e:06:66:88:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:D7:F3:F6:D5:34:88:B5:EE:F7:C3:B3:84:96:98:6E:10:BE:B2
X509v3 Authority Key Identifier:
keyid:21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/NcrX8_bVNIi17vfDs4SWmG4QvrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.247.0/24
Signature Algorithm: sha256WithRSAEncryption
49:dc:13:6e:ba:36:e8:89:d6:38:2f:57:6c:b2:b0:26:fb:52:
a1:f2:52:12:86:ae:9c:7f:13:52:43:5a:ee:e7:96:7a:47:09:
1b:9b:6d:a8:19:5e:26:c8:da:e2:34:52:ef:46:ad:d8:c3:99:
ca:b4:58:e0:a4:51:38:d7:52:4b:99:e0:df:f9:c1:91:ea:da:
b0:63:c4:18:25:cb:f3:62:d1:68:c5:c1:b4:b0:91:44:4f:f7:
a1:d6:6a:10:76:23:c1:41:38:42:ac:48:8b:d3:08:e1:c3:e0:
22:b3:a0:db:8a:a8:d2:17:c8:5b:89:a6:68:72:01:db:38:5b:
20:bb:ce:27:6d:90:56:a0:f6:ed:a7:28:25:9c:a7:bb:f5:06:
51:ab:cd:77:c4:61:99:6d:2f:c3:3c:62:2c:2d:fd:53:bf:55:
a0:79:05:08:b3:e6:c6:2e:f2:39:00:80:dc:87:84:c4:e8:83:
d0:cf:7b:2c:12:24:30:03:67:d4:ed:2e:3d:94:5e:af:f0:53:
ec:9e:9f:39:d4:bb:b3:b7:28:5f:23:f0:fa:ce:93:4e:a0:9f:
ee:66:d8:62:3a:ed:c0:b1:c8:73:86:e3:18:2b:0d:56:d5:b7:
f4:fa:be:fc:15:a6:29:35:ca:53:ef:b4:91:53:78:83:41:08:
dc:39:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:05 2023 by rpki-client on console-ams.rpki-client.org