Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/IhwWYq8eqXLjDNbs9nBoS-XlnHU.roa
File: IhwWYq8eqXLjDNbs9nBoS-XlnHU.roa (raw, json)
Hash identifier: 6x5DqwXZH5WVMMPQjLzvjgJBkiKDuC+dq623HoWTZcw=
Subject key identifier: 22:1C:16:62:AF:1E:A9:72:E3:0C:D6:EC:F6:70:68:4B:E5:E5:9C:75
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 1A042ACC
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/IhwWYq8eqXLjDNbs9nBoS-XlnHU.roa
Signing time: Sat 01 Jan 2022 07:57:41 +0000
ROA not before: Sat 01 Jan 2022 07:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213220
IP address blocks: 94.159.96.0/24 maxlen: 24
94.159.97.0/24 maxlen: 24
94.159.98.0/24 maxlen: 24
94.159.93.0/24 maxlen: 24
94.159.94.0/24 maxlen: 24
94.159.95.0/24 maxlen: 24
94.159.103.0/24 maxlen: 24
94.159.104.0/24 maxlen: 24
94.159.105.0/24 maxlen: 24
94.159.100.0/24 maxlen: 24
94.159.101.0/24 maxlen: 24
94.159.102.0/24 maxlen: 24
94.159.99.0/24 maxlen: 24
94.159.107.0/24 maxlen: 24
94.159.108.0/24 maxlen: 24
94.159.106.0/24 maxlen: 24
94.159.71.0/24 maxlen: 24
94.159.84.0/24 maxlen: 24
94.159.81.0/24 maxlen: 24
94.159.86.0/24 maxlen: 24
94.159.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436480716 (0x1a042acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jan 1 07:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=221c1662af1ea972e30cd6ecf670684be5e59c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:4d:85:94:b1:68:fb:0d:8d:89:d6:60:6f:
37:f8:78:eb:f4:81:6e:e7:27:ad:39:f4:39:33:fb:
60:d3:ea:47:60:16:16:f6:b6:f7:be:f9:fd:5c:17:
9e:a9:20:87:1c:f1:df:b2:53:b0:dc:4b:b8:59:5b:
ed:7e:9a:49:bf:c0:4a:6f:65:02:04:6a:54:11:b7:
94:37:28:b0:cb:b9:cd:c6:56:0c:31:a1:5a:1e:0b:
fe:79:28:88:b6:b5:fb:ca:a9:bd:54:4c:56:05:4f:
5f:4f:10:4b:92:a5:25:6f:a3:66:f3:ec:c9:de:f5:
81:d6:93:68:7b:2c:df:ac:a7:94:f3:e3:2d:36:8e:
1a:90:c9:7d:46:96:33:b7:2c:47:58:65:d0:bc:b5:
43:25:53:c1:48:59:b2:a8:fb:49:8f:ac:0a:2e:16:
67:b4:0f:96:9c:c7:46:64:fc:3b:db:e8:bd:34:fa:
a6:77:30:aa:f9:dc:0a:1a:75:54:bd:7c:a4:fc:7c:
a4:34:b5:22:be:01:34:a4:94:75:c0:ab:2e:e0:98:
9a:cf:1c:96:26:f9:2b:2c:66:67:0d:89:c7:fe:9b:
74:56:24:49:f2:21:50:b4:31:bb:c2:b9:3c:03:9b:
bf:37:ca:34:ca:a8:80:b3:2e:b4:ba:d5:49:99:ec:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:16:62:AF:1E:A9:72:E3:0C:D6:EC:F6:70:68:4B:E5:E5:9C:75
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/IhwWYq8eqXLjDNbs9nBoS-XlnHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.71.0/24
94.159.81.0/24
94.159.84.0/24
94.159.86.0/23
94.159.93.0-94.159.108.255
Signature Algorithm: sha256WithRSAEncryption
09:79:33:87:d1:d3:00:95:22:27:9a:28:82:13:77:58:62:c0:
3b:62:ed:59:bc:ad:77:37:b1:90:54:7f:12:ca:e9:4f:9d:83:
9f:7f:f8:01:cd:da:88:66:3a:a3:92:27:98:9f:85:fd:7d:eb:
ce:4e:e5:ab:ca:12:e9:16:8f:7e:f1:37:11:c5:a8:5c:61:24:
32:97:06:47:9b:e2:6a:33:97:0f:db:70:50:02:8d:8e:65:69:
f3:01:73:bf:52:ba:8c:d7:2d:8b:06:82:f9:c6:b9:89:88:be:
9c:d2:e9:95:79:39:03:f2:db:78:ef:83:fa:59:15:d9:7c:5a:
e1:9c:43:c4:11:7b:ea:65:5e:9f:a9:cd:20:08:a5:16:1c:3d:
7a:6e:90:b9:e2:7a:d5:f7:27:40:80:d3:3c:71:ea:f4:21:bc:
20:bd:81:4b:f4:1d:aa:80:0d:31:24:59:77:44:a1:2d:fb:f5:
2d:e3:4f:00:6f:be:36:3c:67:48:59:31:47:e4:e4:ea:38:69:
93:bd:05:e6:11:7b:3e:19:df:d1:86:7d:57:4f:f8:9a:3c:71:
91:e9:c7:64:94:8c:26:1c:58:9b:de:05:0c:fa:f9:ac:32:aa:
be:38:ad:e2:c6:0e:43:33:c8:16:40:5f:ed:a6:9f:73:41:99:
d3:7c:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:26 2024 by rpki-client on console-ams.rpki-client.org