Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/48wXE8kvYu-qkWJY8iopN-_pyrM.roa
File: 48wXE8kvYu-qkWJY8iopN-_pyrM.roa (raw, json)
Hash identifier: JQ92OiZPJhJyXbgYN62+ZtRFhfFZCq4LwS81ezZDAFo=
Subject key identifier: E3:CC:17:13:C9:2F:62:EF:AA:91:62:58:F2:2A:29:37:EF:E9:CA:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C8501C4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/48wXE8kvYu-qkWJY8iopN-_pyrM.roa
Signing time: Sat 01 Jan 2022 01:02:47 +0000
ROA not before: Sat 01 Jan 2022 01:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201159
IP address blocks: 94.156.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478478788 (0x1c8501c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3cc1713c92f62efaa916258f22a2937efe9cab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:49:36:8b:a0:dc:4f:cf:50:bb:b0:b1:76:
80:bd:a6:a6:1b:57:e6:00:e6:a3:12:7a:c1:cf:07:
c0:90:c5:6d:c1:35:af:90:11:2b:ed:ee:80:2b:fb:
a9:0a:e3:33:71:a4:b7:13:db:9d:f1:19:2e:50:38:
50:b6:68:4a:b0:e3:13:a9:c8:fc:85:a9:6d:4a:0c:
73:61:4a:89:5e:9e:a0:26:da:8f:9f:52:43:cd:20:
ca:1d:0d:3b:fd:79:9c:80:81:57:b9:b1:e2:39:40:
7e:a5:ff:a1:71:29:53:3e:50:89:81:5c:bb:f4:42:
6c:06:a7:f8:81:ba:07:90:7f:a8:e3:f0:dd:7b:b5:
95:fd:3d:c5:ec:28:b1:ea:b5:54:aa:43:64:22:e1:
16:78:7d:ba:75:f4:0c:ab:de:e0:4c:08:28:47:bb:
da:84:0d:f8:d2:0b:68:f9:f5:c3:0a:24:e6:24:c2:
c2:8f:de:ad:73:1c:fc:a8:1b:d7:e7:99:7d:1b:91:
16:2c:17:29:4b:d8:da:bd:ce:45:fd:6d:f0:5f:c0:
0d:c1:f3:25:71:85:94:fa:0d:5e:1c:dd:26:3b:49:
6f:60:a8:78:6a:09:82:d1:dd:52:35:2a:e0:a3:77:
44:6d:80:ae:4f:b6:4e:af:c6:a4:ca:dc:e7:f2:7e:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:17:13:C9:2F:62:EF:AA:91:62:58:F2:2A:29:37:EF:E9:CA:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/48wXE8kvYu-qkWJY8iopN-_pyrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.253.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9a:b9:f0:f9:f5:4c:64:b7:31:4a:4e:9a:e8:02:78:9c:89:
b9:a8:fe:5a:e6:5a:71:90:1c:fe:d6:a0:65:16:74:ba:97:45:
b7:d0:fa:23:c3:87:a7:38:7a:58:2f:65:cd:aa:ca:b0:ea:c3:
f9:b5:32:5a:1e:28:0a:2e:c7:37:e1:24:1d:22:af:2c:17:a6:
3b:be:96:22:1a:97:c9:0b:1a:86:67:99:e7:7b:86:cd:28:86:
93:ee:51:5c:31:66:1a:79:b1:f2:17:4b:11:fc:55:ff:e5:7e:
62:1e:39:1a:ff:da:d3:83:d8:43:df:ac:bd:e5:31:8a:34:d0:
4c:01:0e:85:90:19:f5:2c:2a:b5:fc:9d:2f:51:10:19:f8:a0:
8c:d0:c6:8d:fd:f6:b3:c8:14:ce:36:9f:b2:09:2f:20:be:46:
f2:d6:ee:cb:80:03:d2:0b:0f:c6:16:09:5e:14:37:a5:82:61:
e3:3d:37:be:d8:84:d0:cf:14:a8:48:27:a4:89:6e:02:60:e5:
23:44:4c:8e:46:11:1c:f0:aa:4a:bb:0f:68:d7:9b:2d:ec:e9:
73:44:9b:8c:7f:4e:c2:b4:cf:5f:75:5f:6e:0e:25:f6:6d:76:
8a:f9:40:76:e0:4b:8e:ca:48:b2:9d:d4:3e:a8:55:0d:27:43:
cd:c4:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org