Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/QOvN_2Cy9UlFvfyAFbcM06a2854.roa
File: QOvN_2Cy9UlFvfyAFbcM06a2854.roa (raw, json)
Hash identifier: YbALG1lM3AO2KayodlbO9ZL186jw7JVgWmy7hjxqH3s=
Subject key identifier: 40:EB:CD:FF:60:B2:F5:49:45:BD:FC:80:15:B7:0C:D3:A6:B6:F3:9E
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 335BC389
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/QOvN_2Cy9UlFvfyAFbcM06a2854.roa
Signing time: Sat 01 Jan 2022 12:58:05 +0000
ROA not before: Sat 01 Jan 2022 12:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 93.190.223.0/24 maxlen: 24
93.190.222.0/24 maxlen: 24
93.190.221.0/24 maxlen: 24
93.190.220.0/24 maxlen: 24
93.190.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861651849 (0x335bc389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Jan 1 12:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40ebcdff60b2f54945bdfc8015b70cd3a6b6f39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:7c:ef:f9:db:c1:4f:22:de:b0:93:9a:7f:
d1:f5:99:4d:74:87:9c:6c:f9:b9:c0:2a:1a:35:8f:
c8:69:19:b0:28:19:b8:a6:10:ca:d3:c6:75:1a:23:
54:71:ae:0d:9f:6d:4e:6c:ec:b4:b1:2f:ec:cf:ef:
b9:38:19:c5:17:44:06:48:24:32:74:3e:bc:99:da:
ca:0f:f6:6f:31:1e:83:fe:d8:67:07:e6:7c:ea:06:
50:f2:98:ec:1e:58:ea:50:af:3c:ae:ea:22:d7:50:
e7:95:88:fd:ff:93:43:26:d1:0e:7e:5b:2c:07:6e:
ec:f8:ea:b8:6c:84:ff:18:7f:8b:a1:8e:51:c3:fe:
e4:3a:96:5e:e5:99:dd:3a:db:b4:06:41:a9:ce:7b:
f1:cc:e8:d8:82:53:65:45:77:e0:98:cf:f2:f2:67:
1e:ec:07:7e:bc:17:6e:f1:d1:98:d5:9b:ae:57:ea:
55:55:ae:5c:11:9b:df:9a:c6:18:7c:d5:e8:17:7e:
d6:60:2f:ab:9a:27:53:09:26:16:ac:d0:9c:bc:26:
52:77:6b:50:36:a2:79:c2:55:07:f1:83:23:e9:9d:
93:4c:e5:a8:eb:b5:53:9b:61:9d:89:92:e8:a3:e6:
6f:a7:d1:11:55:31:9c:6a:d0:4b:28:b0:73:4c:ae:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:CD:FF:60:B2:F5:49:45:BD:FC:80:15:B7:0C:D3:A6:B6:F3:9E
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/QOvN_2Cy9UlFvfyAFbcM06a2854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:11:82:fc:78:22:b1:49:ad:66:7d:7d:26:fc:43:90:67:25:
42:87:6a:45:d3:46:85:dc:d7:1c:c8:d8:73:c2:03:ce:67:c2:
29:ab:0b:60:0c:96:08:a5:a6:bb:06:4e:b9:ef:a0:7f:f4:79:
80:01:d0:06:9a:6f:fa:15:6b:01:5b:c8:e6:1a:54:0e:75:72:
33:8b:da:f1:fb:1b:e1:42:9f:12:86:60:1a:b1:34:43:2e:62:
f3:d9:cc:f2:01:34:84:06:76:68:d8:d5:73:93:b2:6c:ad:9b:
7f:de:80:6f:59:a1:36:2e:f0:b7:a7:53:60:f7:8d:a2:63:bc:
0c:fb:c4:9e:14:df:fd:0e:74:da:5b:9f:a7:d6:ac:03:b7:02:
b5:05:38:e7:6d:76:e6:19:f4:e1:42:77:41:8d:12:03:ed:e5:
b7:e4:ad:cb:0a:07:96:6e:06:51:1f:a0:2c:e8:15:45:07:ad:
e3:86:7d:58:67:8c:60:65:da:ab:ea:71:61:a2:cc:14:bc:1b:
47:71:3c:d6:b5:58:34:95:4c:55:4b:c2:64:78:f5:b4:df:f1:
81:e2:dc:cf:74:75:ac:58:a7:8b:09:4a:46:19:18:8f:0f:96:
ac:6b:1c:63:b9:bf:45:c9:f5:23:f7:a0:31:0a:97:85:38:8d:
86:7d:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org