Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/q8_dCX2J_wVvptBPm24JlUzmge4.roa
File: q8_dCX2J_wVvptBPm24JlUzmge4.roa (raw, json)
Hash identifier: VHf4otYAqrt6ugWUSZMfyHtwcHvZ/H7X8h3pvIEhI3s=
Subject key identifier: AB:CF:DD:09:7D:89:FF:05:6F:A6:D0:4F:9B:6E:09:95:4C:E6:81:EE
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 05D5DFAC
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/q8_dCX2J_wVvptBPm24JlUzmge4.roa
Signing time: Mon 21 Feb 2022 07:33:06 +0000
ROA not before: Mon 21 Feb 2022 07:33:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.43.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97902508 (0x5d5dfac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Feb 21 07:33:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abcfdd097d89ff056fa6d04f9b6e09954ce681ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:02:a4:84:7f:e3:3b:28:80:b6:9f:89:4a:
ef:d0:e6:e9:a6:77:22:63:72:ad:51:22:ad:ea:7e:
7d:90:0f:39:b4:7c:e5:69:7e:f3:54:f4:b5:35:18:
c7:fa:95:60:4c:1f:af:e5:ff:3b:75:9d:67:94:7d:
7e:62:0c:fd:bd:b9:7c:87:07:4f:95:c1:18:ee:d3:
e6:c9:a6:e9:ee:5c:72:ac:6c:ad:d1:cd:cf:07:27:
27:16:52:64:5f:63:0c:bd:fc:6e:e5:1b:30:55:b8:
53:d7:6b:61:81:ca:e2:a4:33:24:6b:7c:67:c2:92:
9f:62:2e:b4:bf:18:67:2b:22:b8:39:c2:ef:2c:4b:
3c:9c:dd:ea:34:75:64:1a:88:d8:92:19:e7:57:86:
18:ec:3d:db:0b:47:27:b9:38:b1:eb:d1:a5:57:1b:
12:3d:65:c1:d4:c0:54:7c:b3:b2:4e:e7:28:da:f7:
2f:9c:d6:44:6b:b0:70:f1:e6:20:dc:25:7d:ee:c7:
cc:7f:97:9b:14:d3:82:33:b2:ad:c3:76:01:49:0e:
8d:a7:8d:3f:8c:e6:09:df:98:a9:c9:d5:85:a8:51:
7d:d0:f2:9e:66:e7:19:4c:44:96:bd:d8:2b:15:77:
39:46:2f:93:91:58:4c:0b:03:56:0a:3f:63:61:91:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CF:DD:09:7D:89:FF:05:6F:A6:D0:4F:9B:6E:09:95:4C:E6:81:EE
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/q8_dCX2J_wVvptBPm24JlUzmge4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.44.255
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2f:87:3e:08:96:eb:54:19:07:62:73:e2:7a:3f:4d:cb:e7:
6f:41:81:6c:da:a0:c6:4b:6e:b8:d6:a3:13:ea:83:a2:3a:d1:
62:44:7d:2d:bd:3e:06:4b:ad:d6:95:0f:9a:60:33:48:da:18:
5c:de:98:31:2e:d5:4c:3d:11:3c:fa:d0:de:5d:bc:6a:29:b7:
48:43:7d:66:d1:2e:33:43:0d:c3:90:be:bf:19:34:d0:e4:2d:
65:99:38:4a:40:b6:d4:dd:21:00:0b:c4:b2:0d:b4:03:a2:a5:
d0:6b:71:89:2d:d0:ad:f9:45:c3:e7:db:8c:7d:0a:b1:7b:24:
98:0c:23:9b:b6:65:3a:28:fb:f4:4a:27:44:95:bc:de:cd:e5:
df:d5:db:18:ed:08:5a:e3:8c:ce:4a:dc:21:9e:6b:97:99:cd:
32:78:a9:a3:69:16:41:28:0a:0a:51:d8:a9:fb:a5:a5:d6:43:
33:96:ea:d4:05:99:17:a8:86:14:7b:60:6f:b4:76:7f:e9:53:
db:44:f7:40:cc:eb:9c:93:2e:b5:67:bd:2d:44:8b:e7:c8:97:
cb:99:b1:ef:c7:e1:44:26:da:e7:ea:cd:31:97:45:98:47:ea:
e6:52:4a:84:77:0e:2b:08:25:3e:32:40:10:fc:fe:fb:7b:28:
bd:f1:6d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org