Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CJWxKRE10nRzlyJmxrJljWYLlag.roa
File: CJWxKRE10nRzlyJmxrJljWYLlag.roa (raw, json)
Hash identifier: xlhkrXkY5CCIx7PBsIvVXTDysH/SPL/bXq2GviNeSzE=
Subject key identifier: 08:95:B1:29:11:35:D2:74:73:97:22:66:C6:B2:65:8D:66:0B:95:A8
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018511206579D9FFA9404042BAF6D8E00FBA
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CJWxKRE10nRzlyJmxrJljWYLlag.roa
Signing time: Wed 14 Dec 2022 14:53:33 +0000
ROA not before: Wed 14 Dec 2022 14:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:20:65:79:d9:ff:a9:40:40:42:ba:f6:d8:e0:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Dec 14 14:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0895b1291135d27473972266c6b2658d660b95a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:30:0b:ff:0f:84:95:5e:d7:25:62:e3:e5:
fd:65:6e:ba:ab:ba:e5:57:4a:ef:31:38:47:cc:78:
6f:4b:c5:35:a8:bd:20:bb:a0:ba:79:f8:29:e0:a7:
86:96:fe:04:2d:0b:3c:72:ae:95:55:40:8f:57:ad:
cf:48:82:21:a8:d4:60:54:de:2f:2c:96:23:a1:7a:
14:ba:bc:99:8f:e9:a9:7e:15:9a:61:70:e1:da:87:
4c:37:ff:58:d0:8c:55:13:27:ce:6e:07:4b:cb:81:
a8:02:74:47:e1:37:c4:a5:fd:d9:4d:7e:79:1e:4e:
97:93:a0:db:45:4d:a8:43:f7:ba:08:11:c7:19:c3:
f1:0e:1b:7d:08:8f:f3:77:63:14:9a:8a:cc:54:ee:
b1:b1:9a:ae:01:e0:d9:fd:c3:51:cf:51:e8:40:41:
b5:f1:5e:bc:bd:c8:43:e5:fc:a3:aa:53:9e:e0:ca:
ca:fd:81:f7:8e:46:62:78:6b:91:da:ce:64:cc:9a:
60:72:30:b8:bf:55:a2:d3:c5:6a:19:8f:ea:4d:9d:
95:98:d0:6f:6f:3a:bd:df:20:02:96:a5:16:f9:b2:
df:c9:6a:1c:c5:d4:04:ea:24:57:89:67:8a:f3:b9:
53:03:2a:49:68:49:a1:32:34:2d:ec:6a:b7:2d:bc:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:95:B1:29:11:35:D2:74:73:97:22:66:C6:B2:65:8D:66:0B:95:A8
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CJWxKRE10nRzlyJmxrJljWYLlag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/22
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fb:93:80:1b:91:d2:ab:71:eb:1f:7f:4f:ce:cf:6f:7b:93:
8d:4a:a0:25:a1:c6:f5:2f:63:05:22:d5:46:0c:07:09:2d:97:
d7:c6:25:c6:c6:65:6f:65:44:e0:f8:a3:89:93:08:0b:04:3b:
54:7b:9d:f5:8b:7b:4e:53:19:da:ca:4d:12:2c:4e:e8:32:e3:
eb:02:33:55:99:26:a2:63:e8:6d:60:49:bf:ce:5b:77:7a:7b:
03:8c:0d:ca:00:09:03:6b:c1:e5:46:c8:13:3b:ea:9d:8c:d3:
18:b6:96:43:b5:90:1e:41:1c:59:5e:fc:71:00:75:04:aa:a4:
71:ba:aa:7d:d0:36:cf:21:6e:08:ac:29:7b:91:bb:3a:fb:3a:
a1:a9:92:79:83:18:52:a3:a2:11:b1:16:8d:1b:22:2b:5c:71:
27:7e:a6:26:a8:7f:4a:09:91:bc:a5:5d:42:94:ff:00:ec:29:
4f:84:4b:c0:34:65:5c:38:b6:ba:1d:8b:67:a6:25:d7:02:1d:
4e:29:1b:7c:5c:75:c7:e9:e5:e5:9a:54:59:94:1b:db:d6:0b:
4c:30:4a:96:26:67:1c:50:22:5c:95:6e:32:3b:93:65:cf:55:
de:b2:33:f0:b3:27:d1:11:08:8a:82:85:07:ce:fd:03:b0:60:
ce:d5:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org