Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DPrfmVEirqnb-_kQzSa-kDzZOZo.roa
File: DPrfmVEirqnb-_kQzSa-kDzZOZo.roa (raw, json)
Hash identifier: kkcsuTFAFHmfAmuHh8RDkzU3FuYyN/wO8XqurxzEaXo=
Subject key identifier: 0C:FA:DF:99:51:22:AE:A9:DB:FB:F9:10:CD:26:BE:90:3C:D9:39:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C7C438D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DPrfmVEirqnb-_kQzSa-kDzZOZo.roa
Signing time: Sat 01 Jan 2022 01:02:43 +0000
ROA not before: Sat 01 Jan 2022 01:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139660
IP address blocks: 94.156.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477905805 (0x1c7c438d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cfadf995122aea9dbfbf910cd26be903cd9399a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:2e:48:1f:e5:ce:15:f1:6b:ef:a5:be:c6:
01:fa:68:7b:83:e7:0b:c7:08:bf:f2:c5:eb:94:b0:
03:d5:2f:7c:90:31:b4:bc:7b:22:fd:3c:79:86:43:
72:f8:11:e5:57:47:7d:f0:ad:98:9e:a1:06:b5:31:
d6:f7:5a:a2:d3:ec:59:25:f1:7b:67:76:f7:2a:43:
28:5f:a4:43:f6:ff:4a:64:37:5b:46:1c:8f:43:da:
b3:1f:63:fa:b9:f8:f1:5c:81:14:c8:4f:9f:41:55:
85:6e:4c:ce:dd:0f:ac:c8:3a:a8:e2:29:26:26:f1:
7a:f1:b9:fd:41:5e:17:f4:2a:8e:5f:cf:54:b1:e3:
30:19:a3:40:03:3f:54:a3:3f:16:81:7c:b4:6f:00:
81:98:1f:29:da:52:4c:0e:d0:ae:f6:53:45:01:f2:
58:ec:13:93:00:15:42:66:81:c2:6d:ff:58:eb:0e:
5e:37:63:aa:82:88:e3:c6:db:b8:91:5a:4f:58:71:
91:6c:29:ca:f4:73:f2:1b:9f:69:68:b0:fc:fd:9f:
80:b9:39:03:1a:23:a2:5d:95:4e:d4:8a:aa:5a:de:
a1:fb:85:cf:55:a2:bb:1d:a0:91:3e:44:78:79:87:
63:91:99:6f:b9:01:24:2c:0b:50:a7:5e:0c:2f:cc:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:DF:99:51:22:AE:A9:DB:FB:F9:10:CD:26:BE:90:3C:D9:39:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DPrfmVEirqnb-_kQzSa-kDzZOZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1f:89:3c:7c:d1:91:d2:77:da:1b:09:ce:10:8e:88:64:63:
14:a8:82:32:67:49:45:08:c6:3f:7c:af:71:c1:95:1a:d0:c4:
1a:c2:8a:07:f9:22:5d:e0:76:22:d1:f0:82:d8:d6:ab:b1:c6:
e0:a9:ce:c0:c1:de:96:e1:fa:93:18:b5:4e:95:66:17:29:17:
fe:f8:8b:b4:78:e4:62:92:a4:bd:fd:2a:7e:02:d9:09:58:e9:
00:91:71:00:81:8b:b9:df:69:26:87:d8:ae:dc:a7:17:42:81:
2c:f3:a6:d9:60:32:70:e2:db:48:a0:7b:c3:59:be:59:38:dd:
d4:32:9c:11:ba:5d:83:5f:70:23:69:88:21:88:e6:54:0c:18:
45:cc:7a:46:a4:4a:0c:15:9d:39:1b:1b:07:53:fe:5c:93:d8:
dd:31:51:0f:a9:c4:fd:54:59:b4:e6:d2:f7:e9:e5:81:36:29:
cc:e3:c2:43:84:80:fa:c9:26:4c:39:ca:f3:ae:5c:dd:fc:52:
7c:ca:c8:a7:46:9b:80:47:23:19:2c:26:89:af:de:f4:80:df:
c9:83:71:77:b2:8e:b3:7f:a5:f1:00:45:b4:a3:75:a1:f2:d2:
23:6e:e3:89:f6:40:03:45:a1:6b:1e:9d:96:d1:33:c3:c5:2c:
0c:01:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org