Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/I3xyYapzISusKrvZdh9o6odye_E.roa
File: I3xyYapzISusKrvZdh9o6odye_E.roa (raw, json)
Hash identifier: r1TBoEE0djeEvOQXgNO2gutMLQ2QvZpo+DRq3JdZNKI=
Subject key identifier: 23:7C:72:61:AA:73:21:2B:AC:2A:BB:D9:76:1F:68:EA:87:72:7B:F1
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17F548A9
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/I3xyYapzISusKrvZdh9o6odye_E.roa
Signing time: Sat 01 Jan 2022 04:00:06 +0000
ROA not before: Sat 01 Jan 2022 04:00:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49330
IP address blocks: 94.236.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401950889 (0x17f548a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=237c7261aa73212bac2abbd9761f68ea87727bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:05:72:c0:7f:ec:f1:6b:cb:39:9f:8d:1a:
e4:84:7a:9e:f2:82:ff:51:f2:98:91:88:0b:bf:6d:
18:3e:20:ee:18:45:2c:7d:09:e3:5f:5e:8e:8b:2a:
ab:23:00:c4:26:93:fc:1f:87:a4:11:5b:54:18:5c:
e3:03:d0:e6:71:05:a6:b3:ba:cb:c5:86:61:bd:1b:
d9:7a:32:0f:74:e6:ae:a7:63:a6:bb:b8:45:6c:19:
04:67:9e:d5:95:6a:0d:18:f2:2b:62:dd:34:20:e5:
98:50:83:79:10:ab:76:23:a1:7a:8e:66:78:eb:a9:
5b:21:b4:0e:a6:ae:59:50:c9:c8:62:f9:af:2f:5e:
64:10:fe:3b:69:a2:9a:8f:00:7c:4f:be:c6:f6:e9:
95:69:2b:c9:b9:1d:4a:6d:3f:eb:77:54:76:33:1f:
6c:16:b7:b9:9c:42:ef:df:a2:6e:67:0c:16:7c:1d:
25:4f:9a:82:43:09:5b:c6:df:64:b5:c5:f7:cb:dd:
ec:6d:80:a7:58:e6:41:e9:05:82:1c:68:b1:ca:cd:
da:62:bf:02:bb:c9:5b:2b:f9:f9:70:b8:62:60:43:
92:a9:79:70:dd:7f:3d:aa:66:65:1b:2d:d5:1b:60:
ab:e3:50:ce:87:0d:a9:a0:9a:f7:6f:c3:53:ce:54:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:72:61:AA:73:21:2B:AC:2A:BB:D9:76:1F:68:EA:87:72:7B:F1
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/I3xyYapzISusKrvZdh9o6odye_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.236.162.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b0:e0:2a:9a:49:8b:b5:b7:7f:24:51:3b:30:15:dc:80:de:
5c:95:78:a4:c5:cd:31:90:a1:07:0d:0c:47:d3:58:32:52:10:
e2:4a:a5:b9:be:59:27:47:ed:6b:d3:49:d1:6d:92:0f:63:5c:
0a:ae:a4:bf:66:fe:ac:3d:c0:da:93:dc:52:49:b4:55:7b:a3:
a4:f0:a5:17:b0:16:be:b6:f2:63:33:f2:9d:96:2c:9b:18:69:
a1:42:03:db:8a:97:81:ae:41:45:60:47:90:3b:9d:03:93:41:
54:50:e7:29:34:36:4f:21:59:87:11:31:e0:ce:1f:e9:4a:10:
59:06:75:5e:5a:6f:b8:a9:7f:b2:b8:42:27:7b:97:d8:bc:df:
c4:e8:34:5f:3a:7e:c4:48:bd:a2:2f:e8:aa:76:18:80:b7:83:
1f:72:40:37:be:83:f3:9b:ea:bc:af:a8:85:f5:ce:bd:22:49:
d5:27:bc:c2:16:4e:d0:3a:fb:e4:f5:9a:1f:68:a3:42:b2:77:
02:44:33:ea:d4:e2:56:4f:6d:40:38:5a:67:8c:de:28:b4:2f:
5e:1c:0f:58:ed:ce:c8:4c:27:6b:de:d7:63:2a:86:49:50:34:
65:27:b1:e5:96:73:b2:56:69:d3:ef:7f:7b:2d:bd:16:a4:da:
0e:e1:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org