Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/eyj5hch_ZeXPNj_yaCDwxDkOJIA.roa
File: eyj5hch_ZeXPNj_yaCDwxDkOJIA.roa (raw, json)
Hash identifier: 1Ey+wWMNztgHn6P6bThlNaULscZjekojjDBbc/Fj9aU=
Subject key identifier: 7B:28:F9:85:C8:7F:65:E5:CF:36:3F:F2:68:20:F0:C4:39:0E:24:80
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018511206667BF8D1B5622CFCB12110F42E2
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/eyj5hch_ZeXPNj_yaCDwxDkOJIA.roa
Signing time: Wed 14 Dec 2022 14:53:34 +0000
ROA not before: Wed 14 Dec 2022 14:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.43.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:20:66:67:bf:8d:1b:56:22:cf:cb:12:11:0f:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Dec 14 14:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b28f985c87f65e5cf363ff26820f0c4390e2480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:41:7d:3e:b4:12:8d:0f:70:6c:39:b3:f8:
e1:34:3e:3f:4b:11:fe:33:1e:11:ad:7f:49:1f:88:
9c:ad:3a:a9:03:43:32:30:a7:28:7e:2e:ee:0e:da:
86:44:f9:2f:62:e8:1d:67:a6:06:0d:99:d6:eb:bc:
dc:01:ca:48:47:32:5c:ec:00:7e:a2:cc:e9:48:68:
0b:d2:1c:8c:9a:68:32:c9:5b:71:1a:35:e9:65:bb:
d1:ce:b8:63:a5:a5:85:c0:9e:2d:45:7c:ed:be:88:
d4:cf:f2:44:c5:00:08:ec:97:3c:b4:19:32:fa:68:
d3:e5:74:9d:4e:85:49:8d:34:6e:94:69:6f:89:7e:
69:bd:81:a1:d3:8f:26:25:2a:77:af:a2:55:d9:9c:
06:9a:15:9b:88:c2:cf:c6:31:2c:0a:6a:79:fc:f9:
9e:77:92:31:a4:40:01:ad:bb:fd:36:77:a2:db:9b:
21:2d:ad:c9:18:6e:1e:65:5a:51:5e:cb:20:58:e9:
44:af:f6:0f:2a:d7:5b:d3:fa:d6:2d:ca:2c:f4:e0:
27:99:2c:fa:4a:a0:76:40:cc:65:c4:e7:19:17:4f:
0d:8a:6d:b6:4b:eb:aa:1a:e8:e9:91:6e:41:38:4c:
52:6b:bd:76:f5:e2:08:95:07:26:0b:87:26:a0:3d:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:28:F9:85:C8:7F:65:E5:CF:36:3F:F2:68:20:F0:C4:39:0E:24:80
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/eyj5hch_ZeXPNj_yaCDwxDkOJIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.45.255
Signature Algorithm: sha256WithRSAEncryption
60:dd:68:43:cd:7a:49:89:33:43:e8:d0:e1:8d:3e:8c:d1:36:
fa:fd:5a:52:a8:34:d8:6a:0d:8c:ec:e5:ca:50:2c:18:1f:80:
22:d4:00:01:a0:2f:13:7f:03:7b:f6:1a:e6:7f:c5:05:c3:74:
75:97:88:0f:43:c0:b6:20:ef:03:a2:5d:70:cd:a2:3f:21:e6:
c6:e5:12:3f:f8:51:fd:71:2d:20:35:dd:19:61:6f:50:10:30:
8a:e0:2f:db:1e:be:fa:40:68:11:c4:55:10:71:9c:09:ef:19:
28:9c:47:4d:3b:7a:af:5c:2c:1b:b9:2c:16:5f:88:af:64:11:
eb:15:f1:f4:cc:76:d0:e5:7a:cf:9f:10:6c:b2:b1:2b:fc:a7:
4b:ec:ec:98:5f:09:c1:b6:9d:e9:68:1c:e7:0f:47:42:59:ba:
ad:70:ac:39:9c:d1:55:cc:c8:1c:a5:b2:3a:b7:9c:f9:01:d2:
64:37:0d:e5:b7:46:2d:d6:25:12:14:6c:36:5f:7c:a4:b2:21:
88:c3:e9:d3:a1:8e:9a:07:a7:32:93:9d:0d:c5:30:15:fd:7a:
d6:7c:f9:16:3d:f1:0f:23:88:5a:1a:5b:72:22:50:db:e0:8b:
a8:61:67:62:c8:4a:cd:9c:e5:08:3f:0d:38:3c:ad:bf:75:08:
e1:19:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org