Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/4pHmP9GBrZoFyjAMhZB5ToZ3JgE.roa
File: 4pHmP9GBrZoFyjAMhZB5ToZ3JgE.roa (raw, json)
Hash identifier: 9Ei9N7ryUiRuXXKEBaIR+i2VPeal2baK56Wxuhlmlb8=
Subject key identifier: E2:91:E6:3F:D1:81:AD:9A:05:CA:30:0C:85:90:79:4E:86:77:26:01
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 1BAFAE72
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/4pHmP9GBrZoFyjAMhZB5ToZ3JgE.roa
Signing time: Mon 04 Jul 2022 13:49:25 +0000
ROA not before: Mon 04 Jul 2022 13:49:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56484
IP address blocks: 93.187.39.0/24 maxlen: 24
185.52.116.0/24 maxlen: 24
185.52.116.0/22 maxlen: 24
185.52.117.0/24 maxlen: 24
185.52.118.0/24 maxlen: 24
185.52.119.0/24 maxlen: 24
93.187.37.0/24 maxlen: 24
93.187.38.0/24 maxlen: 24
93.187.34.0/24 maxlen: 24
93.187.35.0/24 maxlen: 24
93.187.36.0/24 maxlen: 24
93.187.32.0/21 maxlen: 24
93.187.32.0/24 maxlen: 24
93.187.33.0/24 maxlen: 24
2a00:dd00:6::/48 maxlen: 48
2a00:dd00:7::/48 maxlen: 48
2a00:dd00:5::/48 maxlen: 48
2a00:dd00::/32 maxlen: 48
2a00:dd00:4::/48 maxlen: 48
2a00:dd00:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464498290 (0x1bafae72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jul 4 13:49:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e291e63fd181ad9a05ca300c8590794e86772601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:2c:8a:7f:9e:82:c8:d8:46:d0:ed:ad:7b:
de:3e:d0:46:84:27:49:33:56:4e:31:9a:5c:ea:cc:
ad:5e:3f:bc:b5:d3:56:9d:2f:b0:1c:32:1c:2f:48:
02:91:a9:d1:f1:e1:32:f7:56:10:cb:ea:0b:11:8a:
d8:7c:84:91:47:cf:f3:71:b3:28:6e:6b:c6:c0:bf:
25:d7:bc:0a:09:fb:bf:b2:df:ae:7f:d1:2a:39:57:
96:db:f0:03:c8:a7:19:cd:e5:ff:ac:b0:cd:4a:f4:
7b:17:d4:55:90:fc:41:ec:85:1f:1a:fa:d4:c7:a6:
54:05:f8:6d:37:dd:d5:2c:a5:68:4d:cd:03:6c:21:
b8:5d:55:74:76:bc:ec:c0:ed:17:aa:cf:7b:3e:ad:
fa:3f:81:ff:24:be:7a:63:3c:c7:db:c2:72:e4:a0:
55:9d:f0:fa:6c:bc:5d:57:3f:ed:0a:54:17:6d:67:
32:09:50:88:b4:d5:f4:28:82:23:f0:5f:ca:9d:96:
f3:dd:e9:bd:c2:bb:4b:22:6f:a2:45:1c:6a:92:de:
ba:2b:c3:5c:cf:91:4f:d8:d5:11:7b:ba:52:5b:e9:
48:cb:22:d9:e6:fc:98:01:6c:44:2c:92:ec:2f:73:
68:93:68:35:c2:55:88:48:5d:c2:cf:4e:72:56:ae:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:E6:3F:D1:81:AD:9A:05:CA:30:0C:85:90:79:4E:86:77:26:01
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/4pHmP9GBrZoFyjAMhZB5ToZ3JgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.116.0/22
IPv6:
2a00:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
03:7a:3f:d0:d5:5c:42:80:9d:a7:ab:c9:ea:fb:05:71:0f:42:
b5:f0:06:fc:4e:c9:11:42:af:5a:0e:88:ac:28:5a:67:69:8c:
f3:2d:ba:12:7d:a7:6e:fe:94:63:58:81:84:fe:9b:a0:90:cb:
44:b3:a7:cb:04:f4:49:ce:7d:4b:fb:9f:79:47:73:f1:7e:c4:
cd:7d:d9:69:d8:e5:c0:ca:f7:99:cc:c3:5f:ba:d3:5f:83:29:
88:3e:78:e1:73:c4:a5:fc:c1:d6:ec:ed:8e:7d:78:86:cb:cf:
a0:fb:9b:e7:46:3a:86:31:5a:0b:81:09:63:75:91:ca:ee:9c:
57:36:bc:3f:52:ae:50:cd:33:c3:56:d1:c3:05:84:b0:df:c3:
6b:8f:97:48:15:43:8f:02:a9:1c:69:f8:54:a9:95:cd:c8:24:
7f:ab:93:8a:6d:da:47:d1:1a:67:33:60:24:0c:56:49:e1:31:
b6:e7:00:05:99:c0:41:35:e2:e0:80:1e:c7:3d:ca:a0:a7:0c:
71:45:83:69:74:33:0e:26:25:6c:69:49:f6:70:76:b9:56:2d:
82:ec:46:d3:3f:1a:0e:d6:77:c2:41:a9:9d:b3:0e:9a:cd:8a:
60:1c:95:e7:d8:59:e3:82:47:33:9f:4b:9f:8f:02:1c:85:b3:
ae:d3:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:36 2024 by rpki-client on console-fra.rpki-client.org