Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/I6HNm_u-hLcESJGj8ROE3LhKOyE.roa
File: I6HNm_u-hLcESJGj8ROE3LhKOyE.roa (raw, json)
Hash identifier: oOjKicVxzBL+1ieURTSesHgZHZiMODCKGE8jB6PPd5A=
Subject key identifier: 23:A1:CD:9B:FB:BE:84:B7:04:48:91:A3:F1:13:84:DC:B8:4A:3B:21
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 16727CA8
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/I6HNm_u-hLcESJGj8ROE3LhKOyE.roa
Signing time: Sat 01 Jan 2022 04:01:14 +0000
ROA not before: Sat 01 Jan 2022 04:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 94.127.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376601768 (0x16727ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Jan 1 04:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23a1cd9bfbbe84b7044891a3f11384dcb84a3b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:fe:8b:3b:16:ab:a2:30:f7:99:0f:cd:3e:
8b:87:b2:f8:5f:c1:2b:5f:b1:20:57:68:a3:9e:f7:
50:3e:11:f9:70:ed:55:0d:05:60:92:65:7d:89:42:
80:40:99:c6:2d:ec:e6:26:8c:0d:2b:80:8e:f9:75:
36:e3:d4:d4:4c:b2:7f:40:c3:b0:4b:d1:93:d9:24:
15:67:8c:a6:a3:e7:13:be:c8:f6:8e:e3:96:18:64:
ec:20:6b:6f:b4:b3:f0:57:d0:b9:6f:1f:66:b2:08:
02:a9:f6:17:a0:51:a6:06:2d:ef:04:53:b4:23:a4:
12:f1:25:a2:49:80:53:de:d0:98:36:64:9c:bb:fe:
da:b7:f6:eb:06:5c:6f:65:fa:f3:9b:e2:91:9e:ed:
6c:cf:c1:00:56:a4:d2:77:d8:19:8a:ed:15:74:95:
85:19:d2:ae:a0:c8:58:aa:2f:10:81:13:03:b4:2f:
17:32:38:0a:de:fa:7f:ce:29:80:d9:6d:15:55:f3:
db:69:c8:f1:62:77:67:c1:23:c8:bd:4a:c9:21:f9:
a7:6e:9c:3d:0a:01:e3:d7:af:93:74:3b:d4:6d:97:
63:9a:05:ac:86:1d:45:48:57:32:77:3e:c4:c6:45:
be:28:d1:12:e9:a8:d7:41:80:5d:11:00:29:15:ad:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:CD:9B:FB:BE:84:B7:04:48:91:A3:F1:13:84:DC:B8:4A:3B:21
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/I6HNm_u-hLcESJGj8ROE3LhKOyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.189.0/24
Signature Algorithm: sha256WithRSAEncryption
17:af:60:eb:e2:af:ba:38:ab:09:67:9d:50:fe:45:62:dd:64:
ee:3a:86:67:85:90:eb:cb:06:90:fb:5c:c3:e7:c4:33:75:e8:
01:64:52:41:81:84:ea:6d:31:ea:1a:36:98:ec:b3:4f:32:9d:
d4:c6:7d:d6:6e:5e:a0:a3:f4:7e:94:9e:c3:27:06:a2:32:1b:
62:b0:7e:59:ab:18:b8:d2:08:11:a2:23:7b:65:d9:5c:1d:2d:
65:a7:2b:85:fe:f7:e0:fe:be:28:d6:ae:4c:40:29:f1:28:a4:
b3:69:7a:87:9b:82:43:ee:5e:fb:96:f9:b9:4c:ca:00:bb:2a:
e1:15:c0:38:7e:d5:ea:60:11:39:4c:e6:4e:58:0d:66:6b:e7:
c3:f4:26:ac:f3:48:40:b4:48:cb:11:64:41:ed:2a:0b:d7:80:
03:d0:71:0a:5b:cb:e0:c0:01:4a:dd:77:19:d1:a4:4a:83:68:
b9:b5:04:43:51:0e:a9:b0:a3:51:70:b8:fe:3f:58:f0:e0:72:
15:9d:a2:ae:41:03:8a:2b:90:20:c8:ee:8c:8b:71:bd:a8:6c:
bc:7f:38:63:0c:6f:01:f4:4f:34:99:44:f6:f3:98:4c:df:5d:
33:1a:06:5e:fa:b0:a5:79:ec:df:0b:b5:8f:df:e7:82:01:96:
2e:41:e0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:45 2024 by rpki-client on console-ams.rpki-client.org