Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/uej3wVqdilO1_24pCu_Rnv_vMVg.roa
File: uej3wVqdilO1_24pCu_Rnv_vMVg.roa (raw, json)
Hash identifier: BnD1XuEWRn2O9DMSsUdFYUJtU/PFXwWFjqLOIZdfvNo=
Subject key identifier: B9:E8:F7:C1:5A:9D:8A:53:B5:FF:6E:29:0A:EF:D1:9E:FF:EF:31:58
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0183D307F0D84D3E712DAD0DCA3630201FDD
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/uej3wVqdilO1_24pCu_Rnv_vMVg.roa
Signing time: Thu 13 Oct 2022 20:27:36 +0000
ROA not before: Thu 13 Oct 2022 20:27:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.41.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.43.0/24 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d3:07:f0:d8:4d:3e:71:2d:ad:0d:ca:36:30:20:1f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Oct 13 20:27:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9e8f7c15a9d8a53b5ff6e290aefd19effef3158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:7a:de:e0:8a:12:53:77:99:e2:a5:2e:fa:
2a:c1:5e:ce:f5:1f:26:db:23:dd:c4:d9:74:fb:29:
ea:c0:9c:b0:a9:17:df:a5:b5:69:94:5a:99:92:75:
0d:10:47:4c:43:ea:0a:9f:2c:b6:33:bb:69:00:3d:
cb:09:3b:9f:96:e9:df:f8:7b:b8:6e:b0:40:69:c4:
bc:1d:66:bf:84:dd:5f:1e:62:91:fa:e0:2e:83:45:
e2:b8:7b:97:bf:dd:bf:43:75:d3:3f:a9:a0:9a:8f:
eb:d2:a6:f3:87:de:45:96:7e:82:bf:bf:0b:9e:6d:
27:2e:20:82:57:5c:d0:ec:76:74:ae:49:b5:c1:06:
5a:e9:df:0c:c7:96:27:3e:f8:b9:e9:4b:b9:82:72:
9e:62:9f:b3:2e:b8:54:8a:d5:36:29:ab:b4:f2:04:
17:91:4a:4e:ce:c5:50:91:59:9e:81:c2:66:09:cb:
56:a1:92:d5:a5:59:ae:da:3f:46:96:39:40:20:0d:
6c:61:7d:48:65:de:57:85:c9:db:c2:a8:3f:fa:46:
d2:7b:2d:e9:7d:03:4e:74:4d:20:13:96:2b:a0:17:
77:ed:fc:da:00:b5:d5:5a:ad:35:53:c6:95:b7:7c:
a2:eb:c3:14:bd:c7:8a:6f:a6:e3:fd:59:eb:65:35:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E8:F7:C1:5A:9D:8A:53:B5:FF:6E:29:0A:EF:D1:9E:FF:EF:31:58
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/uej3wVqdilO1_24pCu_Rnv_vMVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
9e:f6:f0:33:d1:23:a5:3e:98:d1:24:9e:b3:07:88:07:5f:1c:
d4:31:61:f7:3b:a9:70:86:aa:11:33:ce:40:d7:97:c1:77:f8:
89:d8:a8:ec:21:a6:00:ab:53:81:d7:f0:6c:8f:cd:06:27:d6:
c3:5f:fd:55:f7:0e:03:c9:8a:2c:3b:b7:ca:c6:8a:48:cd:cc:
dc:cd:1d:8e:c0:4b:f0:88:6c:41:79:b4:5e:a9:b2:c7:ca:99:
06:75:88:5d:ba:a0:cc:c1:8a:31:5c:b2:1c:eb:59:2f:a3:4c:
9a:c8:04:f9:3e:ba:2c:9a:ff:db:6b:12:73:d3:65:1a:9b:03:
90:09:98:48:62:9c:be:2e:9d:88:6c:fd:3a:92:53:6b:f2:ea:
bc:16:9e:5c:bd:c3:7d:0f:5e:b3:0f:c5:82:ab:96:4e:60:59:
60:67:c2:39:a2:d8:24:b8:b0:a1:fe:d1:1f:5e:8c:5b:9c:e9:
a3:10:42:57:35:7d:c3:bc:17:f5:b8:49:d3:6d:2d:c4:ca:33:
d9:24:4a:93:32:be:02:ea:47:dd:21:ee:21:07:59:af:ab:ce:
2e:cb:46:07:2d:45:8a:8c:ee:a6:48:aa:9d:17:3c:c7:c5:b9:
30:b5:c7:89:a0:1f:f1:bf:18:2c:1e:0c:ba:ad:60:bb:26:76:
75:29:b4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org