Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Vo4bcyVfPwcNGu8zrgiIncNGghk.roa
File: Vo4bcyVfPwcNGu8zrgiIncNGghk.roa (raw, json)
Hash identifier: giza+UVaD7AoN1W21QGduXOc4EmRscF8hE4YWWnh+BM=
Subject key identifier: 56:8E:1B:73:25:5F:3F:07:0D:1A:EF:33:AE:08:88:9D:C3:46:82:19
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 05D9BC14
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Vo4bcyVfPwcNGu8zrgiIncNGghk.roa
Signing time: Mon 21 Feb 2022 18:41:08 +0000
ROA not before: Mon 21 Feb 2022 18:41:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.43.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98155540 (0x5d9bc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Feb 21 18:41:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=568e1b73255f3f070d1aef33ae08889dc3468219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:49:5a:be:35:93:2f:c9:be:27:e8:b4:23:
ac:c1:46:f6:fa:f9:43:0a:ab:ae:b7:ab:a8:9e:cf:
8e:31:65:08:f7:00:37:93:27:85:fb:b9:36:a4:9a:
67:32:25:d3:cc:6c:dd:c4:0e:11:07:15:2f:18:62:
ca:3a:d7:4c:54:ee:51:2b:42:55:70:67:d2:9d:da:
1a:4a:c0:bd:a4:3d:cf:54:ba:a2:93:c6:57:24:05:
93:af:5b:e9:36:53:cf:21:7f:5f:c2:c0:dc:ac:d7:
ec:90:12:1c:7e:a4:9a:8d:51:6c:42:ba:89:49:24:
24:89:c6:21:09:f5:2f:05:ec:22:51:36:4f:47:1c:
cd:5e:7b:f9:2d:df:47:29:21:f4:f6:75:c7:8c:9e:
56:82:a2:ed:ac:84:33:6e:fa:c0:b9:cb:d5:5a:88:
15:fd:e7:b9:ac:d0:6f:8e:bc:03:33:84:8f:4a:32:
fa:db:d9:c0:59:c2:e1:92:d9:c1:08:f7:83:dd:c3:
28:cc:e1:c9:c1:a5:f1:6b:8c:ed:df:b3:e5:fe:1e:
15:33:27:89:6d:df:d6:b4:6f:79:8f:1f:97:4c:96:
1c:3a:c2:65:6a:e7:86:79:62:22:84:ba:3d:06:35:
ef:01:06:88:e3:1e:45:db:a8:d8:1d:85:44:6f:9d:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8E:1B:73:25:5F:3F:07:0D:1A:EF:33:AE:08:88:9D:C3:46:82:19
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Vo4bcyVfPwcNGu8zrgiIncNGghk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
73:ba:79:1d:f8:d1:e5:e3:f1:e1:b3:44:bd:61:13:62:0c:11:
c5:b4:f5:fe:22:e4:9a:ba:16:d6:16:78:dd:3a:5c:26:9b:4e:
c7:9f:43:4d:80:91:46:d2:82:00:ad:d1:ee:36:e6:c9:c8:0a:
55:3e:e4:cb:68:ff:ad:1c:27:df:c8:1b:fe:0e:e6:7e:6f:56:
bf:e3:5d:b8:78:e1:76:a7:3c:53:76:71:0d:b6:b4:68:8b:5d:
2c:d4:c4:68:bb:b6:ba:64:76:92:3f:7b:6e:cf:ac:09:34:8f:
c1:6d:fc:f4:22:89:ce:6c:46:08:a3:15:d2:92:2a:87:b1:0d:
2e:fd:1f:6f:19:48:b1:13:83:f7:84:23:eb:ff:f3:d1:1f:1b:
f5:85:f1:b8:15:88:a9:0c:cf:67:44:be:10:1d:e3:67:a7:71:
69:7d:75:ef:21:e1:28:18:9d:9f:77:b8:6a:4d:2d:27:81:69:
46:58:b2:6a:d2:6a:43:d1:85:af:f5:14:46:e5:38:43:f7:2f:
43:d9:dc:1b:fb:63:0a:f4:75:f7:96:a8:f8:af:85:dc:2e:a4:
27:76:ab:b4:25:e2:e5:57:97:a3:d0:ef:08:83:af:72:a6:1d:
7c:c7:d4:18:33:ff:03:f6:d2:10:d3:7e:c5:ec:d6:42:f6:aa:
db:cc:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org