Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/L07DVkWrPseszJXF1aGCCkKmWME.roa
File: L07DVkWrPseszJXF1aGCCkKmWME.roa (raw, json)
Hash identifier: 1fcWabeyi3wHnqbDXeDRHvh+jyRCoZq9P83V9I1Dwlg=
Subject key identifier: 2F:4E:C3:56:45:AB:3E:C7:AC:CC:95:C5:D5:A1:82:0A:42:A6:58:C1
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01840E42D955A75B83759524CE5ADA93021A
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/L07DVkWrPseszJXF1aGCCkKmWME.roa
Signing time: Tue 25 Oct 2022 08:29:32 +0000
ROA not before: Tue 25 Oct 2022 08:29:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21700
IP address blocks: 94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:42:d9:55:a7:5b:83:75:95:24:ce:5a:da:93:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Oct 25 08:29:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f4ec35645ab3ec7accc95c5d5a1820a42a658c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:48:8e:87:9f:ec:0b:85:e6:fd:3b:fa:56:82:
e5:cb:82:75:31:ef:69:32:cb:95:52:a8:cf:03:ae:
81:6a:01:08:66:e3:22:e3:a2:9b:cc:e5:cc:a5:7b:
6a:4b:a6:33:e0:dd:a0:9e:a2:51:aa:db:6d:70:9e:
18:29:60:4d:05:82:49:c5:e2:8f:0e:6c:b2:df:2f:
7a:0d:74:84:03:bd:92:ba:61:c8:c0:81:78:9c:ce:
2b:c6:33:54:74:47:7a:1f:0c:63:d7:9e:18:c6:31:
5f:69:dd:70:16:4b:94:bc:dc:96:d4:a3:34:b1:10:
d1:0f:38:9d:10:a7:b9:20:22:7f:96:44:ea:7e:0c:
fe:aa:48:36:47:7b:d0:6f:f5:32:b6:d0:7b:62:02:
f4:da:79:53:fd:a2:3b:b1:df:cc:1a:9f:d7:60:b4:
9f:d6:6c:94:5c:8b:5e:18:dd:a0:96:b8:ac:f2:bb:
4e:3e:fa:1b:a6:51:b0:04:b5:73:4e:3d:d3:b3:1f:
60:2d:9c:b1:8b:f2:cb:58:6d:3f:dd:57:b7:aa:7e:
e1:57:03:af:a6:cb:02:52:a7:24:e0:24:d8:48:66:
a0:4b:9e:a8:bc:0b:d4:fb:d5:83:77:e9:1a:9e:d3:
fa:c2:b5:90:f7:fb:6f:ed:f4:2a:68:d7:47:e5:e6:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:C3:56:45:AB:3E:C7:AC:CC:95:C5:D5:A1:82:0A:42:A6:58:C1
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/L07DVkWrPseszJXF1aGCCkKmWME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
20:24:d4:53:16:01:2d:0f:bb:95:eb:2f:e7:63:15:4e:f3:1f:
c7:02:20:e0:f4:69:e2:fd:4f:77:f1:21:c5:1e:bf:60:73:48:
f6:c6:c4:ce:86:cb:bd:ce:3f:ab:96:5f:9b:03:1c:7e:fd:48:
fd:7a:88:1f:be:04:be:5c:4e:43:a2:c3:3a:46:65:38:af:57:
c9:c0:0f:45:04:4d:84:f7:5c:04:39:7b:03:39:3d:6f:6b:3e:
84:e7:bc:29:d5:11:b0:e5:91:27:4a:f4:d8:8d:d3:85:f3:ed:
92:c6:33:2e:80:d2:93:e2:38:2e:c7:93:cf:24:f6:df:3a:63:
d3:25:3c:9a:fc:bc:30:75:03:5e:41:d0:1f:39:34:3c:11:33:
55:a1:44:48:a9:3a:3f:bc:2d:b2:70:a0:97:ac:74:d7:2a:88:
59:ac:7c:33:0e:3e:e7:cf:9a:1d:7b:a1:57:1d:c1:95:68:2f:
b0:ef:aa:b8:17:22:86:77:b6:9a:02:12:9c:36:92:01:f4:14:
36:2b:9f:23:c1:a8:d8:3c:16:54:cb:f6:f3:2a:58:68:90:49:
e5:c8:df:30:1c:25:97:2d:33:59:40:f6:ac:23:c5:5e:2c:1d:
ff:b7:c6:4a:c3:55:96:43:66:55:d5:4d:18:b7:a9:30:e3:a7:
f4:a2:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-ams.rpki-client.org