Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lJ4B4hP5anDqfUItpjH3KzBwuOo.roa
File: lJ4B4hP5anDqfUItpjH3KzBwuOo.roa (raw, json)
Hash identifier: /qtQINaglyraUb9Pe4mXVTbGVMqiaBHfQXasP/PQUuc=
Subject key identifier: 94:9E:01:E2:13:F9:6A:70:EA:7D:42:2D:A6:31:F7:2B:30:70:B8:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E39E751
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lJ4B4hP5anDqfUItpjH3KzBwuOo.roa
Signing time: Fri 29 Apr 2022 17:14:30 +0000
ROA not before: Fri 29 Apr 2022 17:14:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 94.156.11.0/24 maxlen: 24
37.221.120.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507111249 (0x1e39e751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 29 17:14:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=949e01e213f96a70ea7d422da631f72b3070b8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:78:b9:94:56:7f:d3:c6:14:77:fa:c8:57:
56:31:4b:69:68:d7:0f:9e:fb:7b:2b:b4:2f:ad:32:
1b:65:f1:64:31:2f:ea:22:be:ca:0b:24:33:e4:d9:
21:ce:0b:d6:a7:34:81:2f:51:6e:7a:c6:ed:02:ce:
40:9f:a9:ef:72:e5:06:27:f6:fd:09:0a:b0:bc:a1:
6e:82:2f:86:fc:a8:ca:44:3f:5b:da:c3:29:44:53:
85:14:1f:7f:2e:78:5c:64:6c:8c:e8:f3:c3:1d:8e:
b4:6a:95:63:41:2a:4f:fd:48:58:92:ce:2a:47:99:
8a:32:04:de:55:9a:04:f6:0f:31:da:b4:ef:ad:d0:
b8:28:6e:91:47:de:27:61:20:72:c2:63:be:af:62:
b3:28:4b:b0:36:54:df:cb:59:16:c3:d2:fe:27:eb:
bf:9a:9f:8c:68:7b:13:80:54:a1:78:5f:a0:43:46:
a1:39:58:83:87:d9:ee:2b:ae:23:98:bf:ea:ad:2a:
3c:23:2b:47:8d:ba:5b:04:bf:a8:31:e1:1e:bc:00:
69:21:14:27:cd:fe:63:b3:24:17:b2:52:db:e2:a8:
17:9d:b4:72:24:13:1f:a9:93:a7:3d:a4:4e:c7:f8:
28:e9:d1:a4:43:9b:73:ca:ef:f3:a6:a7:ed:eb:66:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9E:01:E2:13:F9:6A:70:EA:7D:42:2D:A6:31:F7:2B:30:70:B8:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lJ4B4hP5anDqfUItpjH3KzBwuOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
94.156.11.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
26:49:21:cd:d5:cf:eb:0f:43:52:1c:93:81:db:1e:60:53:5f:
16:70:3a:e7:ab:59:8f:54:f8:f4:fb:9a:d2:12:45:42:bb:fe:
13:09:27:57:c8:a0:7e:74:1c:91:84:ef:29:80:16:00:c3:51:
5b:c4:2a:85:44:19:10:0d:63:62:2f:75:f4:65:1f:5f:75:b4:
6b:83:7d:cb:33:90:57:02:25:16:ea:78:f3:fa:94:c4:17:63:
a0:a9:33:e6:94:37:2e:44:20:4f:52:d3:09:d5:ff:b3:8c:61:
4e:87:ef:37:58:e3:b7:1e:e8:43:ce:e4:65:7d:4f:f3:5f:59:
69:90:aa:8e:f0:78:f5:b2:c5:b4:10:73:ae:8e:4b:90:86:14:
89:b2:7c:ff:e6:2c:62:f9:b9:02:37:46:62:00:c6:be:53:97:
1d:36:45:fb:4d:15:e0:c0:f2:35:9b:a3:29:a1:c9:22:75:88:
39:1d:37:5d:bb:13:9f:54:79:55:b0:dc:c3:c1:d1:55:56:9f:
52:70:92:19:60:2c:16:d3:ad:3f:ab:d8:65:e7:40:e1:d4:da:
89:fc:ff:e0:65:30:42:2f:73:0e:90:49:d0:ad:3b:3d:97:b5:
3a:3c:82:15:34:be:49:44:8c:7a:74:98:86:f3:f7:ed:1c:5a:
d2:e5:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org