Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/g06GCqCwrWTha_OpfgfLpKZWTFc.roa
File: g06GCqCwrWTha_OpfgfLpKZWTFc.roa (raw, json)
Hash identifier: W6GNB/rsAUxAp8anbp+qa6UmtTlwZzVSyQyxwrEkf3E=
Subject key identifier: 83:4E:86:0A:A0:B0:AD:64:E1:6B:F3:A9:7E:07:CB:A4:A6:56:4C:57
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0183A4316B2EE15FA49587F80ED489649B06
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/g06GCqCwrWTha_OpfgfLpKZWTFc.roa
Signing time: Tue 04 Oct 2022 18:10:45 +0000
ROA not before: Tue 04 Oct 2022 18:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:31:6b:2e:e1:5f:a4:95:87:f8:0e:d4:89:64:9b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Oct 4 18:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=834e860aa0b0ad64e16bf3a97e07cba4a6564c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:be:c5:af:d9:02:23:5c:ab:ae:d7:6b:ad:
2f:a4:99:c6:f5:3f:a0:16:5a:21:a3:8e:7f:43:52:
4f:58:eb:60:11:61:ad:0b:76:96:f0:47:39:51:31:
58:f9:83:cb:73:77:71:4b:b7:06:a2:e1:84:67:69:
4a:61:33:69:4b:73:8e:58:28:f8:57:df:32:b0:50:
0a:67:4c:95:21:57:d6:0d:78:72:9d:9a:d6:24:e6:
c2:27:76:fe:de:96:bb:2f:41:60:25:50:ca:2c:64:
91:c7:e6:e6:f8:02:37:d8:a1:90:95:d1:88:68:57:
e7:27:3a:f3:d4:9e:5c:b7:9f:06:75:bb:cb:72:a5:
b3:34:65:38:91:d8:e5:ee:86:ff:bb:73:3a:6e:e7:
0d:78:6c:00:fb:6a:16:24:c8:80:52:3e:b9:ec:d5:
54:4b:c8:d4:07:4b:46:25:57:b1:d9:1a:48:68:3a:
14:ba:0e:d8:51:8e:0a:77:42:16:63:2b:79:28:e7:
f4:ac:b5:e6:ba:b3:97:dc:24:89:a0:cc:82:e3:d6:
d2:ab:77:a5:1d:27:a5:8a:33:58:2e:76:ae:da:ec:
54:17:89:af:a3:8c:7d:df:43:d4:5f:51:d0:2b:16:
49:19:b4:ba:9e:d4:6a:b0:85:5a:08:c4:c4:c1:90:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4E:86:0A:A0:B0:AD:64:E1:6B:F3:A9:7E:07:CB:A4:A6:56:4C:57
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/g06GCqCwrWTha_OpfgfLpKZWTFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
94.154.45.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
31:96:2b:95:10:fa:93:62:ad:3c:7d:3c:c2:e7:9b:f2:3d:2f:
5a:83:c7:74:05:bd:08:49:10:7c:27:0a:69:ea:1b:02:ba:c9:
21:29:10:f9:8d:8c:e7:e3:19:75:e8:19:c9:9b:89:43:4a:af:
86:ca:fa:2d:24:24:74:2a:2e:6e:df:0c:5d:07:3f:c7:15:45:
ec:80:38:92:f1:79:17:6f:a4:08:66:c3:69:f6:74:ff:ef:c0:
b7:00:5d:07:46:19:cf:af:b9:68:84:6e:1c:06:ab:56:7c:11:
a5:df:47:53:60:5a:e5:2b:a2:d9:02:9c:f4:23:ca:ad:1b:10:
bb:72:30:5e:f3:5b:6c:6c:29:b2:42:73:b9:6a:99:2e:f8:2f:
f2:ec:aa:c1:c0:4c:47:5a:ea:9e:7b:63:f8:d0:19:73:57:4c:
6a:f9:33:df:60:2a:c7:c1:5c:47:8b:f6:56:df:ad:06:1a:7a:
91:4f:c3:87:0a:0e:48:63:03:1c:44:a8:91:50:2c:1d:15:39:
e2:b1:bd:dc:22:4b:13:aa:30:eb:da:0e:4d:a8:41:3c:b8:ae:
fe:be:fe:ba:f9:70:6d:ae:c4:d4:5b:0f:e7:17:de:9f:4e:29:
45:9f:ae:26:36:75:08:65:c1:e9:25:67:d9:62:97:46:aa:43:
9d:d1:d0:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:10 2023 by rpki-client on console-fra.rpki-client.org