Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/1-u1APJWYKtgOpJIfzl_IJ4sH5HU.roa
File: 1-u1APJWYKtgOpJIfzl_IJ4sH5HU.roa (raw, json)
Hash identifier: TNR1j7P4oCVayP9Q+vs3DXBXQe7sWIphci5t7dv2qeA=
Subject key identifier: FA:ED:40:3C:95:98:2A:D8:0E:A4:92:1F:CE:5F:C8:27:8B:07:E4:75
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 1A3ADB61
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/1-u1APJWYKtgOpJIfzl_IJ4sH5HU.roa
Signing time: Sat 22 Jan 2022 05:56:22 +0000
ROA not before: Sat 22 Jan 2022 05:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210001
IP address blocks: 93.187.39.0/24 maxlen: 24
185.52.119.0/24 maxlen: 24
93.187.33.0/24 maxlen: 24
93.187.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440064865 (0x1a3adb61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jan 22 05:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faed403c95982ad80ea4921fce5fc8278b07e475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:77:85:92:e7:df:77:f5:b3:e8:09:97:c8:
43:85:fa:56:02:d8:03:dc:75:21:c5:2e:2c:30:e2:
23:a6:c8:aa:6a:1b:3f:76:bb:84:15:7f:57:06:f7:
75:53:d9:e5:82:29:3f:da:aa:19:6a:7d:c2:90:d6:
95:d5:83:48:af:65:67:eb:c1:cc:1d:a0:83:f0:08:
6b:67:63:df:3b:25:42:71:a1:41:bc:82:2a:2c:1a:
7f:6b:d3:d0:85:2c:f4:01:da:53:c9:b8:a7:6a:36:
08:9c:c9:b4:a5:52:9e:61:02:26:08:0d:94:dc:0c:
d8:49:13:f8:27:d6:40:4b:38:bf:d0:72:aa:70:e7:
97:c9:0c:c2:d1:f7:cc:1a:ab:f9:4b:8c:d0:ea:0e:
a2:3a:96:25:16:a9:50:dd:d0:ab:4c:b6:7f:d1:a3:
a4:26:93:14:58:88:73:56:97:06:f3:c4:c5:aa:fd:
93:a8:aa:c9:b1:37:c8:8a:4d:0c:26:1e:d6:72:ab:
0d:74:f6:6e:f0:7b:00:06:1e:77:38:47:22:c7:92:
93:c5:e3:8a:56:e6:7a:7b:cf:01:1f:5c:bf:5d:0c:
11:2f:c3:0b:48:60:05:e4:04:14:d8:c5:89:16:a6:
d9:fa:0e:ac:f4:85:ff:38:7f:3b:f0:d9:16:72:2e:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:ED:40:3C:95:98:2A:D8:0E:A4:92:1F:CE:5F:C8:27:8B:07:E4:75
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/1-u1APJWYKtgOpJIfzl_IJ4sH5HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.33.0/24
93.187.36.0/24
93.187.39.0/24
185.52.119.0/24
Signature Algorithm: sha256WithRSAEncryption
09:38:e4:e6:51:00:55:21:7f:aa:e5:86:70:29:7b:fb:26:e3:
c1:4d:7f:ff:92:b6:9b:65:ea:62:14:2e:f2:75:e2:98:59:7b:
18:cf:f2:3f:75:01:4c:d9:02:cd:cb:73:77:e7:e6:32:f4:98:
f4:1f:44:39:5e:2c:94:b7:ef:14:f9:a4:14:85:bd:46:75:a7:
f3:48:64:e8:71:1a:bc:73:32:28:8d:d2:78:d2:9a:a4:18:e8:
e3:26:b6:28:73:b1:36:f1:15:19:37:7b:a7:ab:d7:57:3d:ce:
7a:77:b9:59:e9:be:80:53:d3:03:68:1d:50:49:4f:aa:7f:6c:
8a:56:62:96:0a:8e:37:db:96:65:d2:af:40:6b:bb:49:d4:2f:
5d:57:35:de:82:39:30:d9:da:22:14:58:28:10:b9:cf:71:80:
74:8f:f8:dc:fb:1b:39:e3:84:6c:ea:ad:67:78:ef:aa:d8:9d:
22:e7:68:4f:21:31:8e:e0:54:40:db:6e:f8:f5:80:a2:0e:44:
0d:d8:e9:0c:85:00:e9:68:fa:d9:fc:42:51:3d:e6:3e:a9:b2:
c1:ee:02:9f:e8:3f:2f:24:8c:d6:59:3a:87:0c:de:0e:0c:7e:
34:8c:9f:b2:23:69:0f:d2:d0:96:fc:a8:bb:6b:8e:20:8a:60:
47:b9:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:36 2024 by rpki-client on console-fra.rpki-client.org