Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/yiFucAulZExNCAYbn7sWQk-BvyI.roa
File: yiFucAulZExNCAYbn7sWQk-BvyI.roa (raw, json)
Hash identifier: YggFWSctFYYl1SRt78lhe8zg5LbHFjaO86KZGtJQUVc=
Subject key identifier: CA:21:6E:70:0B:A5:64:4C:4D:08:06:1B:9F:BB:16:42:4F:81:BF:22
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01853EA55A5EFF31264901B849DF684FEE33
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/yiFucAulZExNCAYbn7sWQk-BvyI.roa
Signing time: Fri 23 Dec 2022 11:01:42 +0000
ROA not before: Fri 23 Dec 2022 11:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:a5:5a:5e:ff:31:26:49:01:b8:49:df:68:4f:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Dec 23 11:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca216e700ba5644c4d08061b9fbb16424f81bf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:86:de:11:b5:85:40:3c:b4:cb:42:7c:3c:
a4:6d:d8:91:51:b7:45:ef:b3:a6:47:6a:d7:f5:54:
97:5f:fd:4b:4a:ac:a1:91:2f:8e:d1:86:27:73:ac:
12:89:59:e1:b3:1a:bd:f5:17:03:49:1f:8f:b0:e2:
36:d6:62:c5:1d:9e:24:b7:6c:1b:07:0f:5a:78:b7:
06:55:58:ac:7c:a2:c4:32:9d:47:3b:b1:aa:ed:13:
e6:f7:67:76:f7:c5:09:97:45:08:21:a9:11:31:52:
74:27:6a:be:b1:bf:2b:04:80:74:b2:86:cf:cf:20:
f8:51:45:a9:00:39:38:c4:f8:2f:e3:e1:bc:3c:8e:
a3:e8:89:8d:68:90:44:3b:19:b4:c0:35:7d:ab:39:
8a:04:76:a4:a3:05:75:30:5a:a5:cf:6e:e8:ae:bf:
ec:50:9c:f3:57:99:d6:af:a1:3f:66:20:9d:6e:41:
e7:86:45:c2:98:ec:17:d3:c6:96:c3:ff:33:e1:01:
b8:b6:33:40:d1:3c:2a:20:21:23:b0:b5:de:18:82:
72:b6:94:be:02:19:42:8d:39:b7:b1:21:89:ae:08:
d3:c4:5f:2a:c6:fc:67:73:6e:c7:b4:83:c3:24:2f:
50:bb:d2:5e:89:55:53:96:42:96:d9:00:1a:1b:57:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:21:6E:70:0B:A5:64:4C:4D:08:06:1B:9F:BB:16:42:4F:81:BF:22
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/yiFucAulZExNCAYbn7sWQk-BvyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
66:c7:35:a2:57:f5:a9:7c:2e:40:39:90:b6:f9:b7:f4:44:9c:
97:cc:5e:34:2e:f2:d1:45:dd:a4:d9:b4:20:8b:16:34:9e:69:
4d:a8:5d:28:e9:be:d1:a5:f0:40:fe:2f:e2:21:cc:21:93:a5:
ca:df:20:54:bb:b4:6c:7a:52:8a:7a:a3:f1:70:c7:33:3b:42:
a4:90:18:5e:67:89:05:0b:50:0d:ac:97:02:fb:a1:d4:72:62:
66:79:b3:5b:dd:0d:76:d5:ca:44:26:c3:3d:bb:77:a0:b3:d8:
54:3f:fb:28:46:c5:4e:eb:76:b5:7f:64:17:44:1c:c5:0a:74:
8b:59:82:b3:ac:73:16:b9:bb:28:a7:2c:d2:dd:23:71:4c:08:
9c:4c:2a:1a:e7:07:46:27:35:75:5f:fb:5a:b1:47:76:7a:9e:
e0:4b:19:65:eb:a2:35:dc:67:f2:df:94:93:72:9d:07:fb:97:
a8:b8:9b:a8:55:11:d4:f0:b8:54:20:ce:a6:96:2d:3d:23:67:
3e:91:e7:04:73:c5:52:a0:f5:e5:9c:cc:f8:ed:6f:e2:29:7a:
23:ab:d8:31:5e:bc:d7:a7:f9:a2:25:33:97:59:2e:ff:ed:ca:
a9:dc:01:2d:28:8e:cd:2a:62:c2:5d:8c:26:3d:30:28:43:39:
b8:23:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-ams.rpki-client.org