Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/gGekr6rwiqsIAFSJ_lxTaAzJVVY.roa
File: gGekr6rwiqsIAFSJ_lxTaAzJVVY.roa (raw, json)
Hash identifier: iG8Ah+GprI/eIhfECiq+TjNvaZp2MsXytiPaC0JbTPg=
Subject key identifier: 80:67:A4:AF:AA:F0:8A:AB:08:00:54:89:FE:5C:53:68:0C:C9:55:56
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 018BB9AB1091061089BA8C38EAB8CFC859EC
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/gGekr6rwiqsIAFSJ_lxTaAzJVVY.roa
Signing time: Fri 10 Nov 2023 14:37:57 +0000
ROA not before: Fri 10 Nov 2023 14:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
93.93.22.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:ab:10:91:06:10:89:ba:8c:38:ea:b8:cf:c8:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Nov 10 14:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8067a4afaaf08aab08005489fe5c53680cc95556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:cb:a2:e7:b5:ab:cf:59:b9:e1:3c:93:bd:
2d:d3:52:cb:6b:b0:66:32:d6:d2:cc:27:82:01:7a:
a7:87:80:ce:d0:18:ed:a7:04:5f:05:ef:02:e9:bd:
fc:cf:fb:3f:27:66:47:74:61:d3:f8:db:99:2b:55:
e8:e1:f3:ce:3b:ed:01:2e:06:82:05:e0:74:7f:6c:
63:92:4a:b3:be:31:90:79:59:8d:2c:02:24:7b:7e:
37:9f:bb:79:1c:f2:9a:e8:6b:b7:8a:6e:c4:e9:79:
da:43:bb:eb:75:a4:a1:0c:8b:c0:80:e0:dc:4f:b0:
aa:22:d2:d0:4d:1c:81:97:af:a3:2f:2a:3f:6c:73:
7c:a2:39:13:c1:f8:5b:c3:8f:46:ef:1b:75:e6:e4:
9f:4c:1c:de:63:88:64:d1:c2:17:34:55:6c:28:14:
1d:65:65:db:1f:a6:3e:73:4c:6a:7d:38:b1:ec:1c:
5d:d7:22:35:ed:74:81:9c:3e:37:27:4d:60:a5:ad:
d6:ea:1b:99:ec:64:bf:7d:4c:d0:97:b1:c6:52:dd:
43:17:2e:2d:59:4c:ab:0c:06:e8:4a:35:35:10:36:
76:32:64:e1:66:1f:63:6d:f8:cd:f2:db:09:58:1e:
2d:ba:8d:db:44:3f:d5:13:57:ce:07:43:9b:79:2e:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:A4:AF:AA:F0:8A:AB:08:00:54:89:FE:5C:53:68:0C:C9:55:56
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/gGekr6rwiqsIAFSJ_lxTaAzJVVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/22
Signature Algorithm: sha256WithRSAEncryption
33:13:58:78:6a:c3:3f:b1:4d:bf:62:6b:0c:11:82:92:6e:8d:
6f:46:d4:e5:a2:ed:ba:14:63:47:f5:f7:b0:24:de:84:25:05:
62:9f:d2:30:c7:58:a2:11:0b:e7:1b:08:ba:85:3d:10:42:62:
f0:55:5c:3a:9b:ac:96:35:6d:12:55:d1:b9:ed:68:e0:8c:fe:
33:95:fa:45:6c:5a:e8:78:15:a9:c0:77:68:8e:78:2e:b4:9d:
c8:8c:35:61:b0:32:d9:4c:a3:75:2c:dc:08:14:5f:f4:db:53:
c0:30:e2:d6:4c:37:1c:8c:e3:31:5f:ef:32:86:e0:23:2b:64:
54:e7:c6:ff:8e:90:fa:44:14:0c:2b:8d:72:4f:ee:01:17:9c:
9c:a8:72:2f:8f:5c:cc:a9:f3:ef:f3:b5:ab:20:be:af:ee:f8:
c2:18:a7:c7:4e:b6:5e:fb:d0:d6:af:42:19:f1:1a:53:e3:23:
51:89:44:e8:d4:e6:0e:77:f2:79:1d:e0:bf:fa:77:56:b4:b1:
54:26:8c:40:fb:ae:69:bc:95:2d:99:7c:35:73:a3:a1:61:8d:
0c:71:2d:1b:62:05:14:3d:b9:d1:6c:a7:21:aa:11:c6:08:21:
f8:0c:14:dc:91:f1:35:3d:dc:a4:89:ff:21:e0:13:c4:2c:33:
6a:0a:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:29 2025 by rpki-client