Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/_PQ_2QTgqS213RfGwGw__XNjvto.roa
File: _PQ_2QTgqS213RfGwGw__XNjvto.roa (raw, json)
Hash identifier: 9O9gYBA1kucXSwfn5vxQgp+yfdF7zPf2vmrPxdbLM9k=
Subject key identifier: FC:F4:3F:D9:04:E0:A9:2D:B5:DD:17:C6:C0:6C:3F:FD:73:63:BE:DA
Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial: 01F7D5
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/_PQ_2QTgqS213RfGwGw__XNjvto.roa
Signing time: Fri 27 May 2022 11:59:13 +0000
ROA not before: Fri 27 May 2022 11:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 94.247.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128981 (0x1f7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Validity
Not Before: May 27 11:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcf43fd904e0a92db5dd17c6c06c3ffd7363beda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:94:91:91:53:1b:98:ee:98:81:d0:3e:94:
5d:40:7e:12:b8:3e:dd:de:33:b4:5b:55:d4:25:7e:
59:c3:d8:70:26:2c:e5:92:c9:19:0b:3a:8b:24:07:
74:25:40:bd:2b:41:80:04:a7:71:a4:41:ce:d9:3b:
bc:5a:f2:ad:2a:f5:75:b9:10:25:d6:79:44:05:a3:
b7:7a:9b:de:f8:e7:e8:f6:a3:ef:77:98:9c:6f:6c:
83:9a:ba:44:21:89:c4:73:d2:ff:cd:51:72:1f:9e:
6e:60:6f:f0:1e:5c:bd:f6:ef:55:b8:9c:08:da:f7:
d1:7c:04:0a:a3:10:17:e5:c2:9f:12:75:ed:05:8c:
38:7e:5a:69:d0:0f:73:0f:75:5a:6b:d3:12:6e:78:
4a:9e:b8:36:8e:5f:6f:da:c5:4e:5f:9a:bd:21:73:
29:a8:b8:7e:18:90:89:dd:cf:a3:e6:17:a7:2d:8e:
d2:d0:ec:a5:f2:34:5c:15:65:2e:4e:50:92:83:4a:
d7:4c:8c:01:e5:56:c3:24:27:5d:70:fc:76:2e:55:
ea:4f:a0:cd:da:42:e0:da:6b:03:05:c0:22:a0:2a:
54:ee:0c:d7:57:95:e4:47:8b:17:5c:26:f4:05:0b:
7f:59:ab:34:b6:f6:d6:2d:db:fd:d7:2f:2c:35:e9:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:3F:D9:04:E0:A9:2D:B5:DD:17:C6:C0:6C:3F:FD:73:63:BE:DA
X509v3 Authority Key Identifier:
keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/_PQ_2QTgqS213RfGwGw__XNjvto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.141.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3c:12:d4:61:ec:f3:b1:70:af:90:1c:e1:93:66:b3:09:43:
92:72:ef:5e:87:9e:40:5c:ca:b0:73:b1:4a:ba:26:ee:84:e3:
cc:5c:6f:c7:15:55:c6:58:db:e2:c3:5f:f1:ca:5a:8c:63:e2:
3a:07:7b:4a:85:27:dc:02:59:51:38:5f:2f:9a:bd:d4:a3:e9:
52:fe:a5:fd:19:35:12:37:e4:d4:63:fb:ff:76:88:10:81:e7:
f8:87:33:d9:05:11:ae:6b:1e:85:cd:e6:95:81:19:1a:60:f4:
8e:e5:fc:66:8b:b6:15:cf:0c:83:27:8e:9c:a8:c4:f1:fa:ed:
93:8b:4b:05:ff:6d:70:7d:4d:1f:ae:ef:25:30:d4:51:a5:14:
91:d0:08:94:1a:c3:9f:d7:8d:f1:fe:32:02:16:08:10:6f:a4:
a9:fa:ad:22:7b:94:7f:fc:32:bb:39:64:e1:a2:ed:53:72:5a:
49:2f:71:9f:3e:88:fe:0a:4d:f4:37:00:78:41:3c:27:65:ab:
89:75:04:9b:2c:9e:2e:ef:ca:61:33:78:43:37:d5:61:5a:b1:
cc:ff:4c:4f:65:24:1b:4d:9f:68:8d:cf:0e:67:ed:ea:0d:48:
07:b3:44:c9:a9:fb:1a:3c:0d:b2:88:27:22:1c:b0:56:3b:08:
23:97:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:27 2024 by rpki-client on console-ams.rpki-client.org