Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/YFrQXdQNmppX5B045qbRx_7l6ew.roa
File: YFrQXdQNmppX5B045qbRx_7l6ew.roa (raw, json)
Hash identifier: AF+s4wWeXTfiNrRe4JrK6qrw9cPpK/7Xk3rTEZhEQr4=
Subject key identifier: 60:5A:D0:5D:D4:0D:9A:9A:57:E4:1D:38:E6:A6:D1:C7:FE:E5:E9:EC
Certificate issuer: /CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Certificate serial: CF1C34
Authority key identifier: 44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/YFrQXdQNmppX5B045qbRx_7l6ew.roa
Signing time: Sat 01 Jan 2022 05:53:18 +0000
ROA not before: Sat 01 Jan 2022 05:53:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 94.103.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13573172 (0xcf1c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Validity
Not Before: Jan 1 05:53:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=605ad05dd40d9a9a57e41d38e6a6d1c7fee5e9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:49:60:4c:25:f4:97:3e:6e:dc:6a:57:0a:
e5:b9:cf:55:d2:f4:e6:cb:81:ed:ad:33:56:8a:4e:
16:b5:b7:2e:bd:7a:95:35:50:88:45:77:fa:3c:09:
12:4b:43:f8:ef:b4:15:9d:bb:08:f4:0f:b2:b0:51:
33:44:97:84:83:e8:a5:3a:76:95:31:c5:b5:ce:7a:
3d:eb:6d:4d:cf:b6:83:b5:11:a4:cb:21:b9:64:0b:
c5:93:95:83:9e:47:64:ea:9c:ca:d0:16:43:de:b9:
0c:67:4c:c3:04:ca:26:96:f9:33:72:af:19:71:15:
d1:35:ff:92:0a:ab:f3:b6:63:16:be:b5:b7:75:99:
af:0d:ea:c3:2d:d4:4b:9b:94:ad:7e:05:62:d4:73:
e0:65:90:97:7c:d0:6c:96:7b:a7:3f:67:ea:31:30:
d0:fb:f8:24:31:b4:35:e2:6f:88:a3:3c:9a:cb:e2:
4e:a8:e7:06:01:a3:e0:66:63:c2:07:5b:35:36:e2:
d8:54:af:a7:88:11:2d:0c:14:31:a8:b5:52:9e:72:
ab:e7:33:76:f2:e0:6b:b6:43:e5:8c:8c:17:c4:fd:
03:21:be:87:35:33:d0:73:f0:25:ed:60:25:1a:3c:
de:55:16:cb:60:12:b8:f8:75:53:35:b2:58:c5:f2:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:D0:5D:D4:0D:9A:9A:57:E4:1D:38:E6:A6:D1:C7:FE:E5:E9:EC
X509v3 Authority Key Identifier:
keyid:44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/YFrQXdQNmppX5B045qbRx_7l6ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e9:23:a9:61:52:b2:41:5d:b2:82:a5:4f:de:55:2b:79:26:
a0:7f:89:4c:e5:16:47:fb:50:ce:eb:fc:85:0b:ce:a0:71:55:
78:24:2e:58:31:c9:8c:be:a9:a1:af:b6:15:23:8d:cc:36:fb:
d4:0a:b3:8d:e7:44:99:1a:7f:b6:d7:8b:24:92:ed:7d:8c:1f:
02:25:44:32:12:27:6a:de:49:92:92:7a:c6:82:12:61:9c:bc:
7d:ed:69:e6:25:18:95:3c:a9:b3:b2:8c:ea:df:9d:13:4c:c6:
47:6c:87:1a:6b:af:4f:0f:ed:46:fd:17:03:23:bb:7b:59:70:
2f:33:c6:52:5e:3c:eb:70:d8:76:c4:1a:39:89:24:d1:00:9c:
f4:d6:9f:b7:d6:d6:83:5f:b7:24:7a:47:32:19:a3:3f:c8:0b:
2b:01:af:a9:69:b5:3b:04:a7:28:60:06:a5:fa:77:47:e5:a7:
d4:9d:a2:4d:7a:be:c9:d2:f4:15:a9:ae:a1:46:e6:4f:c3:a6:
9a:45:dd:91:38:bc:33:65:ef:fe:ee:9b:84:2e:7b:dc:43:76:
53:25:91:8e:77:43:8b:eb:37:b8:35:08:1b:03:15:d7:68:eb:
1f:5c:6f:da:40:a8:31:54:0d:22:a9:81:fd:23:8f:3a:da:d9:
18:ea:d1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:26 2023 by rpki-client on console-ams.rpki-client.org