Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/B72t5wdsGm6LCnIyMBu0N1XZy5I.roa
File: B72t5wdsGm6LCnIyMBu0N1XZy5I.roa (raw, json)
Hash identifier: bkeJ/934diCQpjsR63MBwd8L8TfSPiEvCr7rWm2cdzc=
Subject key identifier: 07:BD:AD:E7:07:6C:1A:6E:8B:0A:72:32:30:1B:B4:37:55:D9:CB:92
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0185363090C8F2605C75FA4E231AF8D8ED28
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/B72t5wdsGm6LCnIyMBu0N1XZy5I.roa
Signing time: Wed 21 Dec 2022 19:37:10 +0000
ROA not before: Wed 21 Dec 2022 19:37:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:30:90:c8:f2:60:5c:75:fa:4e:23:1a:f8:d8:ed:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Dec 21 19:37:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07bdade7076c1a6e8b0a7232301bb43755d9cb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:e3:b5:2d:3e:01:6c:15:5c:34:9a:2b:63:
f5:c6:15:43:55:ae:7c:06:17:70:86:0b:4e:bd:31:
c1:f5:49:3f:92:2a:25:58:5b:83:ec:6e:cb:3c:1e:
0d:c3:3e:d8:d6:d0:bb:06:fb:06:fc:f6:96:19:31:
27:b9:20:7d:fc:6c:10:a4:3d:e1:ad:12:35:f5:f6:
9f:b7:71:b5:64:e2:90:5e:7d:1c:b4:88:47:ff:d9:
83:48:2e:5b:49:3c:41:a4:58:fe:ff:09:ac:af:9e:
0c:5a:e5:ea:36:f3:74:74:dd:85:45:70:1c:01:37:
80:79:47:82:91:05:f0:73:56:48:1e:91:f4:af:8f:
40:30:95:b6:24:31:f7:13:e9:dd:ac:2a:7f:a3:99:
65:96:c1:e1:23:d4:90:cf:ad:be:73:82:f8:0c:04:
67:70:6c:9a:db:25:d3:81:07:91:95:2e:eb:54:48:
be:53:26:52:0b:23:af:64:7b:0f:88:f6:09:0b:5c:
6d:3c:fb:3b:3d:ec:84:e3:02:51:7b:38:8f:62:ae:
25:ff:fe:1f:f4:5b:ab:f8:9b:40:48:38:60:66:58:
56:41:04:f2:5e:19:f2:34:f9:3b:4f:9e:e3:bd:c2:
d6:be:94:1a:54:00:9e:9a:72:ca:77:fd:3e:23:5c:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:AD:E7:07:6C:1A:6E:8B:0A:72:32:30:1B:B4:37:55:D9:CB:92
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/B72t5wdsGm6LCnIyMBu0N1XZy5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:bb:c8:ee:a0:68:5f:fc:6b:85:43:0c:16:a9:6e:83:8c:16:
26:88:19:f7:15:cb:9f:77:82:cd:4e:17:c4:82:84:21:5a:93:
ce:9a:55:e0:05:af:0f:0e:b1:ff:41:04:ba:d8:2f:2c:28:e2:
3e:71:b6:01:d4:32:ba:b1:b6:97:92:a6:be:02:ee:2c:c1:08:
73:50:0b:ed:89:d1:0e:cb:b7:8c:1f:7a:c3:46:7c:8d:6f:fa:
cc:fd:5e:f6:ac:1f:be:ea:5c:c4:12:20:7d:8b:4c:dc:81:47:
08:a7:ce:d5:e8:e2:75:e6:ba:96:77:7f:ef:ae:a8:76:01:b6:
ad:cb:51:8c:71:1d:e9:03:0c:2a:fa:9f:9a:ce:44:6c:4e:92:
49:39:37:fa:bc:2f:d0:ac:6e:e1:3b:ea:dd:8c:12:33:56:b1:
59:86:6f:f7:25:11:48:0d:a4:ec:d5:19:f8:07:d3:41:f9:fa:
48:ce:cc:64:66:90:d8:38:e2:d8:82:b1:63:6f:31:40:0c:4c:
0b:0e:23:1d:01:5e:41:bb:3f:a1:c0:66:ba:71:2f:d5:b0:2b:
c7:d6:0c:74:c8:ad:10:9f:90:66:76:a3:5d:b7:b4:56:f0:71:
21:e7:6c:98:57:1f:11:e3:a2:63:b1:fd:6a:43:7b:b8:d4:ee:
fe:bc:85:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:10 2023 by rpki-client on console-fra.rpki-client.org