Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CR4aARIcbz9iN9RQ_2flAruVEkw.roa
File: CR4aARIcbz9iN9RQ_2flAruVEkw.roa (raw, json)
Hash identifier: RrjKeGrh+RiAAcK8Ufa4lGPVQgdrGrdZQg0r2vv1fLs=
Subject key identifier: 09:1E:1A:01:12:1C:6F:3F:62:37:D4:50:FF:67:E5:02:BB:95:12:4C
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0183D2B675D30D8E9331937ACDB7BCAEC074
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CR4aARIcbz9iN9RQ_2flAruVEkw.roa
Signing time: Thu 13 Oct 2022 18:58:36 +0000
ROA not before: Thu 13 Oct 2022 18:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 94.154.44.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:b6:75:d3:0d:8e:93:31:93:7a:cd:b7:bc:ae:c0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Oct 13 18:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=091e1a01121c6f3f6237d450ff67e502bb95124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:60:60:35:aa:e6:ea:99:41:8f:7c:f2:6f:
58:23:78:36:7e:4b:f1:e8:71:d3:c0:07:6c:3c:5e:
27:5a:25:a3:88:eb:3b:07:53:6d:31:12:ab:9e:a5:
0d:19:32:d9:02:1f:27:9f:22:1e:78:b3:38:ad:0d:
aa:8f:23:8f:d5:4c:63:6f:d8:dc:ac:f7:f3:24:a4:
0c:2e:d1:3b:c4:95:5b:98:9a:ea:36:5c:6f:57:29:
82:3b:e1:e4:5e:5b:2a:2f:24:cd:8f:37:55:b5:99:
33:12:8b:c7:71:ca:96:82:c6:de:47:5d:b7:67:21:
cf:4d:cf:63:cf:c8:56:ac:1a:de:3e:7a:6b:73:1b:
32:c1:3d:fb:40:25:66:3d:f8:f9:9e:01:b8:dd:1f:
f7:33:56:a9:a0:e0:f9:f9:5b:33:39:d8:25:f9:c6:
d2:0c:74:f0:e5:46:52:1e:ed:33:a9:27:55:9e:3a:
3b:96:bb:68:ee:9c:6e:52:8b:aa:11:d9:96:d7:36:
28:f9:03:f2:cc:f7:d7:82:bf:ed:30:7f:ff:f2:92:
e5:67:a7:72:39:6a:c6:f7:4d:cb:05:45:7f:98:78:
4d:2e:77:7f:93:1f:7f:19:b3:3f:87:be:85:d9:e6:
0b:fe:18:45:b3:74:da:c5:43:b6:9f:02:c3:c1:89:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:1A:01:12:1C:6F:3F:62:37:D4:50:FF:67:E5:02:BB:95:12:4C
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/CR4aARIcbz9iN9RQ_2flAruVEkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.42.0-94.154.44.255
Signature Algorithm: sha256WithRSAEncryption
4a:14:fd:0c:c4:e8:33:e0:2c:66:07:b0:b3:7e:3c:01:de:37:
e2:2b:92:43:99:9a:b1:24:50:5d:16:40:6c:61:ed:27:56:f9:
11:83:9b:8e:79:bb:c8:4a:b5:50:73:2b:6e:8f:40:04:08:5d:
f1:8e:2a:fa:4c:de:f1:ec:a0:14:98:c0:cc:a7:8a:45:04:11:
88:6c:20:91:b7:79:85:15:f1:69:82:4f:2b:32:e6:b0:39:e5:
57:3b:33:23:26:fc:97:de:d4:13:79:49:9c:cf:dc:42:c0:87:
d0:a8:f8:67:e1:44:c7:e9:60:76:6c:2f:4d:8c:59:4d:32:56:
2d:72:eb:f5:0f:cb:88:b5:8d:1d:c2:fe:03:bd:ce:85:48:b7:
38:26:83:32:8d:37:90:18:14:c3:02:40:8e:c0:7e:63:e6:9a:
b4:a4:08:55:af:1c:d7:fb:e0:bb:4e:01:85:7c:c3:0f:a2:e0:
ea:e6:48:b1:d2:45:7d:b3:90:d3:85:9b:31:45:a7:d1:ee:77:
e8:9c:54:98:7a:dc:91:94:7d:0d:6a:d1:a0:18:a1:cd:39:b1:
11:23:e7:19:ca:57:5e:aa:c6:22:83:ca:73:f9:56:83:48:c8:
12:59:5e:4b:fb:7e:f8:8f:ef:06:d6:0d:5c:ed:4d:57:27:76:
7f:77:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:10 2023 by rpki-client on console-fra.rpki-client.org