Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/QUMLvEKKwb4Ebo6AYNWJpc93ELQ.roa
File: QUMLvEKKwb4Ebo6AYNWJpc93ELQ.roa (raw, json)
Hash identifier: 1C5Mwj/m03SJ00X9cVQjRMXAfIL7e2Yzve0FRO5FViA=
Subject key identifier: 41:43:0B:BC:42:8A:C1:BE:04:6E:8E:80:60:D5:89:A5:CF:77:10:B4
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0618E8E4
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/QUMLvEKKwb4Ebo6AYNWJpc93ELQ.roa
Signing time: Tue 22 Mar 2022 16:40:05 +0000
ROA not before: Tue 22 Mar 2022 16:40:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.44.0/24 maxlen: 24
94.154.43.0/24 maxlen: 24
94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102295780 (0x618e8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 22 16:40:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41430bbc428ac1be046e8e8060d589a5cf7710b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:89:99:69:21:e9:53:87:19:7b:23:50:d7:
d9:7c:f5:ee:1d:73:4d:26:94:a3:ee:34:aa:07:3d:
cb:01:e9:2c:0e:f3:12:ba:23:85:0a:3b:ce:66:a9:
9d:b1:3a:72:5f:16:c7:5f:5a:e2:4b:5d:f1:c1:64:
8a:3b:02:64:be:c2:29:c9:4f:fd:ee:eb:e4:93:91:
09:82:29:37:77:54:83:6d:8c:da:01:f0:85:d1:ea:
8b:04:4f:ac:34:9d:33:b5:14:67:38:90:3e:8d:56:
a6:26:e5:90:81:ca:c8:e2:90:7d:f0:87:e5:53:7b:
78:dd:8f:b7:88:a9:9a:9c:0b:55:b8:0d:5f:6e:29:
b7:36:f5:b4:82:84:90:c0:4a:05:8a:dc:4b:c9:d5:
a9:84:6b:8b:61:c9:1f:80:e5:ef:9b:3a:8e:4c:5f:
9c:19:35:ae:81:8e:65:4a:32:68:5e:43:2c:c2:13:
da:d3:08:0f:c3:45:04:5f:bc:39:5a:17:5a:41:0f:
a7:a5:46:b9:f4:4a:92:e5:71:a5:5c:c9:97:54:35:
15:5e:86:3d:69:e3:29:77:48:85:e6:d9:18:f4:6b:
8e:b0:3b:70:4d:83:24:9f:4f:ca:23:8c:ce:c9:5d:
fb:5f:3c:53:8e:bf:7a:d6:46:ce:0a:17:70:22:32:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:43:0B:BC:42:8A:C1:BE:04:6E:8E:80:60:D5:89:A5:CF:77:10:B4
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/QUMLvEKKwb4Ebo6AYNWJpc93ELQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
2b:4c:80:54:ed:88:01:9b:02:e8:fe:4c:5a:34:37:56:eb:06:
85:3f:bb:be:9c:d0:79:25:a5:42:de:3e:60:40:0b:a4:2d:9c:
a4:3a:33:10:79:3b:ca:dc:6a:ca:38:c2:eb:a3:e9:ac:44:ad:
b1:24:9b:e6:85:0d:48:ee:20:f9:e5:6d:40:92:35:e2:7a:a5:
f1:01:e9:0d:40:36:ac:4d:6a:4f:f8:18:36:2e:ff:d0:53:95:
c3:e8:34:52:b8:57:36:20:a8:07:26:59:a0:2c:52:a8:74:c3:
1e:e8:c7:01:4c:da:d6:e6:00:bd:e4:66:22:97:74:54:23:1a:
3b:d8:2f:cb:1f:6a:ea:30:18:06:e2:d0:f9:90:9f:80:a6:28:
62:d0:e9:00:f1:7e:17:c4:7e:dd:90:d4:c9:1d:38:f1:be:84:
dc:04:2c:1b:2b:ca:56:81:e1:68:06:39:b8:7d:4d:17:91:16:
8e:35:2f:74:df:74:7e:50:57:83:c3:3d:e4:53:e9:ee:83:4b:
ba:22:b2:55:39:8f:20:74:90:56:d7:0a:b6:98:95:b3:b6:fb:
91:92:28:9d:1a:5f:f2:61:c9:b2:3a:d0:76:65:1b:56:44:64:
40:5d:38:e6:d1:dd:c6:87:70:a5:db:59:4f:d5:08:d0:4a:95:
be:2c:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org