Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/oiOAkFbWmUv9h0aQJmMCEAE9RXo.roa
File: oiOAkFbWmUv9h0aQJmMCEAE9RXo.roa (raw, json)
Hash identifier: 1H8w9482mlgfbkjO4dFD6e5/oF25spP3bUHO5cz1Nwc=
Subject key identifier: A2:23:80:90:56:D6:99:4B:FD:87:46:90:26:63:02:10:01:3D:45:7A
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 02422869
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/oiOAkFbWmUv9h0aQJmMCEAE9RXo.roa
Signing time: Sat 01 Jan 2022 10:58:10 +0000
ROA not before: Sat 01 Jan 2022 10:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35434
IP address blocks: 188.123.192.0/19 maxlen: 19
193.47.247.0/24 maxlen: 24
217.73.176.0/20 maxlen: 20
185.69.20.0/22 maxlen: 22
93.95.88.0/21 maxlen: 21
2a02:2780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37890153 (0x2422869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jan 1 10:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a223809056d6994bfd87469026630210013d457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:56:39:75:77:43:5e:3a:82:d4:d8:ee:68:
07:d2:ea:3c:56:e8:7d:8e:02:74:57:84:3a:d5:ae:
3e:9e:ab:7e:3b:ea:89:61:12:ea:c0:5b:4a:97:f5:
71:37:74:19:1f:a3:e9:86:4d:76:10:3a:65:8b:a8:
44:58:35:74:69:85:7e:9d:31:11:39:b1:41:be:e4:
81:98:b9:7f:9e:05:34:bb:7c:fc:c4:7a:fd:1f:18:
78:66:16:5e:f9:3c:40:21:f2:b5:c5:d6:49:73:8a:
f2:ef:49:d0:06:48:84:0b:14:f5:66:14:e7:9b:c0:
59:31:17:a6:4f:2d:f9:58:0d:dd:e7:17:3a:4a:bc:
6e:77:8a:8d:12:ad:7f:b1:5a:8a:78:14:a4:26:12:
2e:5b:75:8b:82:fc:55:a0:0d:5e:5b:28:c3:34:19:
27:45:7d:16:61:0d:ea:9d:af:f0:9f:8a:fb:e4:22:
b7:88:35:a8:20:9c:58:b4:fe:fb:c9:b3:ac:0d:2f:
d0:e2:67:59:52:a1:8b:54:b2:34:33:08:d2:d8:fb:
e3:6c:61:ab:f2:db:9d:85:e1:a8:19:59:84:b7:e7:
a8:12:99:d0:ac:7c:e2:b3:bf:48:1d:17:6c:bf:7c:
49:cc:3e:03:8d:61:50:38:4c:d5:b0:9f:18:7a:d3:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:80:90:56:D6:99:4B:FD:87:46:90:26:63:02:10:01:3D:45:7A
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/oiOAkFbWmUv9h0aQJmMCEAE9RXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.88.0/21
185.69.20.0/22
188.123.192.0/19
193.47.247.0/24
217.73.176.0/20
IPv6:
2a02:2780::/32
Signature Algorithm: sha256WithRSAEncryption
6b:13:f5:99:e7:9b:86:3c:34:e1:3c:2f:94:90:fc:b2:fb:8a:
77:fd:69:76:43:42:ef:da:a2:0e:85:3d:bf:bd:ea:d8:60:7f:
cb:7e:64:75:58:9d:25:f9:80:4e:ee:cb:2c:4d:34:4e:b9:7b:
77:d8:4f:c0:4a:dd:de:bb:57:5a:26:43:dc:14:65:14:55:61:
45:08:f8:34:63:c6:a6:4b:da:48:12:18:a5:e3:df:f0:9a:d0:
a9:de:b9:55:a4:f0:f8:dd:fd:43:dd:81:b0:cd:62:55:ed:4c:
12:06:62:86:12:83:43:f4:0c:e2:5c:75:18:3e:99:24:54:18:
7f:7a:73:f3:26:e9:e2:3e:77:5a:bc:bf:94:91:86:e5:fa:60:
33:ac:94:c3:a1:99:81:59:bf:5d:1c:8c:3d:c1:58:d9:0a:6b:
59:ec:c8:ae:53:93:b0:5d:05:b0:8a:fd:32:1c:ac:00:56:f3:
b6:3c:64:0c:26:d2:0a:cc:4c:0d:85:0f:c0:3a:f3:06:4a:74:
56:60:22:0a:97:ce:92:d0:63:d0:29:d6:5c:ed:36:7e:3a:b5:
a1:b6:e4:b2:42:35:36:6e:25:36:6c:ef:6f:b5:ce:cf:be:22:
48:39:e2:84:3c:74:37:1e:c1:fb:c9:db:69:c9:f3:1e:34:13:
5a:b0:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:51 2024 by rpki-client on console-ams.rpki-client.org