Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9cwDRWtx5Ltl6rqAgNMN-IfSzuU.roa
File: 9cwDRWtx5Ltl6rqAgNMN-IfSzuU.roa (raw, json)
Hash identifier: 114TU1664oDe+9afwsdkzB2auXTozxzuftg6XYeasNU=
Subject key identifier: F5:CC:03:45:6B:71:E4:BB:65:EA:BA:80:80:D3:0D:F8:87:D2:CE:E5
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 05A4B60F
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9cwDRWtx5Ltl6rqAgNMN-IfSzuU.roa
Signing time: Fri 04 Feb 2022 09:56:09 +0000
ROA not before: Fri 04 Feb 2022 09:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94680591 (0x5a4b60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Feb 4 09:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5cc03456b71e4bb65eaba8080d30df887d2cee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:f3:5c:4f:b6:e7:f7:a6:71:53:4e:53:bc:
fd:c4:b2:0f:e8:77:7f:5e:06:e9:2a:34:79:e0:6a:
8d:19:79:2e:c0:4d:01:2e:d9:d9:36:d3:71:a6:2c:
c5:0f:71:2c:69:1f:31:db:79:34:04:3e:4b:91:86:
a4:5b:18:4c:22:cb:b5:f4:c0:df:fb:47:29:d3:ed:
5b:d3:3d:95:10:3b:76:17:62:b7:bd:fd:1c:f1:fa:
40:e3:dc:95:f1:86:81:7c:cf:a8:b9:57:fd:ef:8e:
ea:16:49:b1:b9:50:cb:a5:fb:6b:f8:ad:21:43:bb:
ca:d0:b7:9e:b8:8b:79:5a:04:16:f3:e9:bf:ff:21:
49:27:90:fc:ef:0e:65:c9:1c:6d:a1:50:98:86:e3:
4b:7a:a2:13:a3:30:b5:29:8f:35:9d:91:5a:35:01:
38:ed:3f:aa:ab:6a:61:f2:ec:a9:10:73:b1:e6:a3:
e6:e5:ae:f7:69:7e:9d:1d:87:b3:68:4f:cd:54:11:
9b:3e:34:8c:32:0c:d6:f3:eb:24:a8:2d:03:d2:3b:
b5:c6:3e:b0:1f:7e:4a:7d:98:77:b8:e9:6b:51:b1:
10:c3:b1:66:ce:f9:3a:65:e5:7e:71:0e:4f:87:bd:
2e:8f:c8:16:4f:39:13:11:57:18:a9:00:b4:3c:c0:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:03:45:6B:71:E4:BB:65:EA:BA:80:80:D3:0D:F8:87:D2:CE:E5
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9cwDRWtx5Ltl6rqAgNMN-IfSzuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.44.255
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a3:22:d5:9f:6a:12:9e:e8:52:05:76:6a:8f:6e:ad:8e:23:
b1:8a:86:4b:60:ee:c9:56:e5:8a:05:80:00:d2:8e:c3:f9:0c:
94:9a:fb:15:2e:89:02:76:3f:47:25:d1:1d:f7:df:ce:0d:6f:
18:83:7d:84:02:30:6f:d6:43:29:c0:47:ea:a8:da:bd:dc:1f:
e3:4b:c5:96:62:fe:25:f5:29:b7:61:f3:2e:60:94:81:12:ff:
7a:76:0a:41:18:a0:99:bd:69:e7:a0:d8:9a:15:a6:49:5a:e7:
e7:1b:f9:1d:ee:52:d2:b1:08:da:7e:7b:02:ea:91:b4:50:94:
c8:87:a0:df:0a:80:36:46:1e:51:95:23:18:74:d4:1c:53:25:
4d:c1:df:08:14:dd:17:73:97:4c:93:66:14:58:1e:bf:7c:95:
ba:ea:e9:bc:0d:6c:1b:57:ae:40:50:4d:68:02:d3:8b:f4:32:
04:8e:a2:96:5f:f5:ca:a9:98:aa:c5:ce:db:3e:fc:2a:ae:60:
85:ab:11:6f:63:70:dd:d2:72:b3:f5:5c:4b:fb:c8:09:c8:51:
80:b5:a9:0c:23:e7:b3:a2:e3:76:08:63:b1:ae:3a:34:4e:f3:
15:93:93:d3:a3:2f:8b:52:9a:d8:00:f2:04:a1:6d:10:6a:1d:
2c:20:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:10 2023 by rpki-client on console-fra.rpki-client.org