Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DNvW7qICaDRbfycDTDi8Mzks0Nc.roa
File: DNvW7qICaDRbfycDTDi8Mzks0Nc.roa (raw, json)
Hash identifier: Hola6jn1RZ/4BeyxKpWMYA3k2Ytvq9AZamY+ZLl4MdU=
Subject key identifier: 0C:DB:D6:EE:A2:02:68:34:5B:7F:27:03:4C:38:BC:33:39:2C:D0:D7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C7721D0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DNvW7qICaDRbfycDTDi8Mzks0Nc.roa
Signing time: Sat 01 Jan 2022 01:02:41 +0000
ROA not before: Sat 01 Jan 2022 01:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60701
IP address blocks: 94.156.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477569488 (0x1c7721d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cdbd6eea20268345b7f27034c38bc33392cd0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:f3:cd:f5:01:68:2f:77:71:cd:37:90:70:
f1:e3:cc:a2:c2:24:b9:60:92:c4:7a:73:6c:1c:9b:
c0:ed:f6:2e:7c:47:40:52:10:63:4d:df:c0:66:07:
81:5c:9a:e6:35:d7:a8:b5:97:28:44:99:e6:95:d3:
44:4a:00:4c:cc:84:06:5d:f2:bc:7d:ff:45:36:17:
0f:36:0f:f9:ef:37:27:b8:45:b3:da:66:fb:53:cf:
cc:28:0c:cd:25:1f:40:85:91:af:61:c4:76:d4:d3:
74:a7:99:36:fa:80:53:bc:c6:a5:b1:1e:cf:87:0f:
84:64:d5:e2:e9:19:a9:8f:a6:c5:85:9b:b4:41:fa:
6a:3a:e5:18:3e:df:2a:a3:e2:fc:77:22:18:ba:bb:
7b:c1:ab:5f:66:a8:de:c8:ee:24:2f:11:d6:e6:e9:
c3:f1:16:f9:5b:aa:ef:78:a2:bf:17:4c:e8:44:4a:
71:46:d6:77:06:58:18:9e:06:46:c7:c8:04:4e:1a:
4f:2b:ce:19:c0:1d:7c:1d:97:4b:3d:89:10:af:8c:
93:4b:0e:be:80:6f:d1:bf:7b:d4:2f:a2:fa:aa:6b:
44:d3:28:d8:39:e2:72:6d:d3:7f:90:cb:b3:cf:75:
a8:53:5e:89:f2:9c:40:42:a3:f6:a2:c4:28:d8:78:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DB:D6:EE:A2:02:68:34:5B:7F:27:03:4C:38:BC:33:39:2C:D0:D7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DNvW7qICaDRbfycDTDi8Mzks0Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3d:9d:b8:ab:0d:d5:1f:2f:a5:25:39:37:0e:b0:f1:93:e9:
ec:51:5e:b4:48:fb:27:e9:ec:9f:47:8b:d3:fb:06:59:54:5b:
34:54:48:e7:e9:93:a5:91:d7:11:7d:c7:5d:07:53:bc:c7:2b:
5d:d8:fe:5e:34:6f:fa:38:fb:d3:0f:29:0f:9b:50:3b:1c:cc:
13:8f:e1:c9:20:87:61:18:91:39:9d:88:ab:ab:04:27:9c:73:
d3:51:ae:20:41:32:5b:87:0f:21:21:7f:e1:b5:e6:69:a7:3e:
94:97:99:7b:0e:85:0f:9d:37:1b:70:a1:31:03:a6:b5:7b:85:
49:8e:ed:05:45:e7:17:d5:48:0a:ed:c0:4e:97:4a:ab:46:fa:
6d:57:aa:bf:42:ac:5e:56:d7:1d:e5:b4:4a:1f:93:34:bc:5b:
32:dd:66:6b:f0:48:d1:5e:c2:73:ff:2e:56:ac:38:2b:1d:d4:
a1:59:d2:5f:2e:b4:3d:cd:56:33:26:68:cd:22:49:5a:22:e2:
f5:d2:21:60:77:b1:a5:af:5e:ea:6e:0e:8c:73:c0:fa:1d:69:
b2:a7:23:56:4a:fe:25:58:05:0c:9e:f3:07:da:a8:71:35:fe:
09:69:5b:b7:2a:8f:96:6f:5d:46:c8:46:56:8d:38:06:c2:69:
a3:01:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:01 2024 by rpki-client on console-fra.rpki-client.org