Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/71qwCCd1vfmyPwJSUM19fmQ_WuQ.roa
File: 71qwCCd1vfmyPwJSUM19fmQ_WuQ.roa (raw, json)
Hash identifier: 7GWbySX4OINVcNDCrrYghEXjsa587VZwrT5pz9/imoE=
Subject key identifier: EF:5A:B0:08:27:75:BD:F9:B2:3F:02:52:50:CD:7D:7E:64:3F:5A:E4
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01839F8BCC6A796A3FBF2F8BCFE60B2339C6
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/71qwCCd1vfmyPwJSUM19fmQ_WuQ.roa
Signing time: Mon 03 Oct 2022 20:31:22 +0000
ROA not before: Mon 03 Oct 2022 20:31:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 94.154.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:8b:cc:6a:79:6a:3f:bf:2f:8b:cf:e6:0b:23:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Oct 3 20:31:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef5ab0082775bdf9b23f025250cd7d7e643f5ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:1d:e5:eb:d3:1b:ae:de:81:09:a5:37:9e:
51:39:7e:fc:27:81:e4:8f:27:60:50:f6:39:2f:30:
3a:67:00:e1:ca:e3:33:a0:09:0a:c6:d0:e2:a5:de:
4d:ff:d7:ea:5f:c9:59:76:17:f7:27:50:55:c1:b2:
eb:93:96:67:e7:ea:ed:7c:1d:ad:31:92:ec:ac:e8:
d1:61:fe:67:d5:26:89:48:c7:7e:dd:24:bb:28:b4:
ed:0d:d2:df:08:09:f5:f4:75:61:ac:db:de:12:99:
30:75:51:9e:9a:70:10:c9:2f:ba:86:c9:ab:9d:55:
fd:6e:53:26:04:44:c1:60:71:b3:57:ed:f3:fc:d4:
18:26:e4:ad:85:55:b5:a7:e1:91:da:5c:6b:bf:4b:
94:b1:64:e8:5e:18:3c:de:f8:bf:d4:58:3e:6f:50:
49:6f:e5:8d:12:96:99:0f:c7:c9:fb:aa:1a:33:0f:
56:8e:61:d4:8b:ec:64:96:01:01:64:a8:33:73:54:
d2:12:cd:f5:88:68:50:01:51:4a:b4:92:75:96:7c:
ab:8a:81:24:10:ba:85:04:71:13:49:2b:39:e6:ce:
be:e9:d9:00:6b:9e:bf:1d:cc:8c:22:b3:a0:9a:ff:
24:45:11:8c:7c:bb:62:fa:b7:6b:3e:a8:b0:73:45:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:B0:08:27:75:BD:F9:B2:3F:02:52:50:CD:7D:7E:64:3F:5A:E4
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/71qwCCd1vfmyPwJSUM19fmQ_WuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
Signature Algorithm: sha256WithRSAEncryption
78:23:0a:8f:f6:c1:28:0e:bb:49:d3:8c:79:b5:e0:45:71:14:
9a:0a:15:32:b9:fc:2a:ef:bd:4f:4a:42:b5:14:4e:28:9d:71:
bb:51:9e:85:15:d8:35:f2:06:a1:8e:92:f5:84:05:e4:77:c1:
5b:6b:b4:f0:67:81:d1:6d:02:09:f6:75:6f:64:35:c9:74:29:
19:e7:e2:c4:33:cc:8c:3c:b9:14:ba:bd:aa:44:01:61:de:fd:
0c:f8:8e:40:87:ea:93:39:6d:a7:20:1d:c1:35:dc:bf:54:95:
1f:95:99:57:15:34:e5:cf:50:5e:75:06:3f:e1:2a:5c:75:1b:
a3:b9:9a:81:8e:42:61:92:fa:e8:db:df:da:54:33:83:e2:75:
ff:a5:77:e2:74:f6:f0:99:88:e0:c7:2e:d4:b4:bd:22:7f:51:
e0:ff:3a:36:94:12:5b:8a:f3:9d:3c:48:6e:2d:1a:49:5b:c1:
bf:15:63:22:e8:42:a4:c5:85:94:54:32:ae:cb:45:66:6e:67:
77:2b:21:b6:94:84:bd:ee:f3:21:c0:88:2a:75:15:6c:51:2a:
49:81:b4:ed:69:b2:ec:0f:e4:7a:e2:74:73:90:37:0f:28:a9:
74:ee:4e:f8:01:53:f3:be:39:24:7e:ce:41:e0:9c:72:13:b9:
92:c1:e5:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOfi8xqeWo/vy+Lz+YLIznGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjIxMDAzMjAzMTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjVhYjAwODI3NzViZGY5YjIzZjAyNTI1MGNkN2Q3ZTY0M2Y1YWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxgd5evTG67egQmlN55ROX78J4Hk
jydgUPY5LzA6ZwDhyuMzoAkKxtDipd5N/9fqX8lZdhf3J1BVwbLrk5Zn5+rtfB2t
MZLsrOjRYf5n1SaJSMd+3SS7KLTtDdLfCAn19HVhrNveEpkwdVGemnAQyS+6hsmr
nVX9blMmBETBYHGzV+3z/NQYJuSthVW1p+GR2lxrv0uUsWToXhg83vi/1Fg+b1BJ
b+WNEpaZD8fJ+6oaMw9WjmHUi+xklgEBZKgzc1TSEs31iGhQAVFKtJJ1lnyrioEk
ELqFBHETSSs55s6+6dkAa56/HcyMIrOgmv8kRRGMfLti+rdrPqiwc0Uy0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9asAgndb35sj8CUlDNfX5kP1rkMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvNzFxd0NDZDF2Zm15UHdKU1VNMTlmbVFfV3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpooMA0G
CSqGSIb3DQEBCwUAA4IBAQB4IwqP9sEoDrtJ04x5teBFcRSaChUyufwq771PSkK1
FE4onXG7UZ6FFdg18gahjpL1hAXkd8Fba7TwZ4HRbQIJ9nVvZDXJdCkZ5+LEM8yM
PLkUur2qRAFh3v0M+I5Ah+qTOW2nIB3BNdy/VJUflZlXFTTlz1BedQY/4SpcdRuj
uZqBjkJhkvro29/aVDOD4nX/pXfidPbwmYjgxy7UtL0if1Hg/zo2lBJbivOdPEhu
LRpJW8G/FWMi6EKkxYWUVDKuy0Vmbmd3KyG2lIS97vMhwIgqdRVsUSpJgbTtabLs
D+R64nRzkDcPKKl07k74AVPzvjkkfs5B4JxyE7mSweU7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org