Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/a4QxZXpM8o2p0V3i8hWaPoxA9TQ.roa
File: a4QxZXpM8o2p0V3i8hWaPoxA9TQ.roa (raw, json)
Hash identifier: LpffCr8lsN63qFAsLzBF7vhgNba2gG7RBw9tTDLRNvI=
Subject key identifier: 6B:84:31:65:7A:4C:F2:8D:A9:D1:5D:E2:F2:15:9A:3E:8C:40:F5:34
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 062C0698
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/a4QxZXpM8o2p0V3i8hWaPoxA9TQ.roa
Signing time: Tue 29 Mar 2022 18:43:10 +0000
ROA not before: Tue 29 Mar 2022 18:43:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 94.154.44.0/24 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.43.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103548568 (0x62c0698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 29 18:43:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b8431657a4cf28da9d15de2f2159a3e8c40f534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:5d:c1:a6:f7:c1:ba:a6:b6:bd:c4:b5:64:
86:af:10:d8:b5:fc:98:ec:28:77:6a:b5:17:7b:86:
a5:78:e4:7c:66:04:cd:46:94:cf:a4:5f:bc:36:a6:
09:0e:05:c1:2c:e7:fb:15:9e:48:92:2a:f2:61:11:
3e:6a:a6:04:1a:3a:22:8d:dd:24:d8:bd:5d:9b:88:
81:1d:3f:1a:76:86:d7:ec:0b:bb:d6:a2:1c:14:a6:
ef:40:ed:fc:b5:01:20:76:cb:11:11:db:3e:60:cc:
e9:1d:1c:12:55:a6:3c:4a:54:78:ad:88:b3:76:78:
43:02:02:f1:ee:a9:43:ef:a8:e2:3b:e9:27:91:a7:
ec:47:a9:da:6d:cd:5c:5d:67:75:fb:e1:d2:2c:6d:
d3:07:27:79:dc:b6:fe:d7:5c:8f:b4:4c:dd:3c:7b:
74:7e:0b:2e:e3:9e:38:a0:c7:e4:99:25:0f:04:86:
69:c6:bc:16:8b:c7:0f:45:5f:14:78:65:fb:94:5e:
42:d3:cf:80:73:cb:52:19:91:83:86:10:53:61:ab:
5e:89:28:18:57:1b:77:3a:1e:5e:c5:b7:cb:53:26:
ff:f9:d7:ae:45:3e:4a:a0:f7:1a:c2:d1:f9:5f:f9:
7a:2c:a3:f1:3f:8a:ae:31:38:99:ea:37:ab:ff:78:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:31:65:7A:4C:F2:8D:A9:D1:5D:E2:F2:15:9A:3E:8C:40:F5:34
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/a4QxZXpM8o2p0V3i8hWaPoxA9TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.45.255
Signature Algorithm: sha256WithRSAEncryption
20:56:8d:92:99:b1:18:47:4d:e6:6c:3d:42:94:c9:e9:13:8a:
dc:ab:5b:c5:e5:a3:e5:97:a1:be:bd:db:6a:0c:02:4c:6a:d4:
4e:07:32:b5:d9:a0:f5:61:5b:5a:17:9e:b9:09:ba:2f:f3:86:
ba:4d:7e:39:22:8d:fb:53:55:e6:f2:84:3c:4b:8f:5d:4f:4b:
07:9a:c2:b3:21:3d:1e:30:70:7e:21:7e:c7:cb:dc:07:d1:ce:
0d:50:04:ef:b9:f7:bd:64:77:a6:74:2e:53:e3:b9:eb:30:d9:
3d:2a:1c:2a:8a:6a:d7:21:6a:59:f6:65:c5:23:f8:cb:6f:ef:
9d:76:fb:5a:9d:94:b1:b2:bc:f5:4b:ad:6d:3b:e3:23:11:74:
af:9a:e2:60:11:24:c2:8b:4f:d7:e3:3b:7b:c1:9d:ca:6d:fd:
99:1a:52:bd:58:83:5c:61:32:30:3e:8c:fc:4b:32:8a:b8:9d:
aa:1a:2c:01:84:99:9e:4b:e5:4e:79:38:f7:8a:33:bc:c0:7d:
fe:5f:d8:ee:4d:9e:6c:0b:0f:a1:ce:ef:2b:1d:dd:d5:b7:b0:
c8:19:6f:b5:cb:58:ee:62:aa:8b:7e:40:d8:6f:6c:2a:a6:6c:
5b:a4:0e:66:f4:51:c7:24:0e:05:e9:bf:71:c2:b5:3c:9f:e5:
39:f2:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-ams.rpki-client.org