Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/U6G7SjK3EYPa5wlM_xFdbcrM3hw.roa
File: U6G7SjK3EYPa5wlM_xFdbcrM3hw.roa (raw, json)
Hash identifier: 9gfTW8DXURErm2N40eeoloStZdz7cJXWuMYhK1RiPno=
Subject key identifier: 53:A1:BB:4A:32:B7:11:83:DA:E7:09:4C:FF:11:5D:6D:CA:CC:DE:1C
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 33D54F
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/U6G7SjK3EYPa5wlM_xFdbcrM3hw.roa
Signing time: Sat 01 Jan 2022 01:52:11 +0000
ROA not before: Sat 01 Jan 2022 01:52:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5405
IP address blocks: 94.103.180.0/24 maxlen: 24
2a11:4140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396943 (0x33d54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Jan 1 01:52:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53a1bb4a32b71183dae7094cff115d6dcaccde1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:49:a1:a9:89:5c:06:10:6f:0f:2c:56:23:
15:9f:00:7f:e6:f6:a5:fb:4f:a6:91:2d:56:ca:e3:
94:07:2e:52:19:f5:80:e6:d2:1a:55:46:83:c9:f4:
5d:29:9f:c3:bf:7f:67:07:ae:c1:89:6a:ec:3a:27:
e6:07:8f:15:e4:49:4c:81:48:45:40:78:70:96:8c:
8f:55:78:75:94:b5:4a:21:4b:6a:18:c9:a8:9a:bf:
2f:ff:89:72:e3:2e:cb:19:19:00:0d:c5:99:e2:5a:
16:c6:3b:0a:6a:43:b1:8a:48:87:43:54:00:59:5f:
17:39:ba:f3:02:e9:c7:5f:4e:5a:31:e2:44:63:28:
9d:12:8a:02:df:14:cb:8a:27:6c:3f:2d:7c:7a:b7:
7f:8b:3f:3f:4c:0c:38:0d:7b:55:c5:57:29:3b:25:
a7:16:28:16:94:f3:47:97:60:81:3c:13:3c:eb:48:
72:ef:6f:c9:8c:d8:6c:82:27:2a:3c:43:a9:2e:72:
a1:3b:0b:ee:e4:29:df:0f:27:4a:88:31:48:c6:92:
78:41:96:7b:f3:59:8c:bf:2d:e6:c6:b0:0f:03:83:
d4:f5:0e:40:71:ab:bd:5d:73:98:c9:aa:b7:05:e1:
00:b0:1b:96:b1:e6:76:86:5b:52:d5:a7:b0:a1:d9:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A1:BB:4A:32:B7:11:83:DA:E7:09:4C:FF:11:5D:6D:CA:CC:DE:1C
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/U6G7SjK3EYPa5wlM_xFdbcrM3hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.180.0/24
IPv6:
2a11:4140::/29
Signature Algorithm: sha256WithRSAEncryption
5a:e4:9b:99:1a:76:31:a8:54:43:f1:dd:9c:a4:44:71:3e:a5:
53:3e:5e:3c:7f:8c:dc:73:e6:fc:08:6d:b5:ab:9e:09:2b:9e:
e8:c7:8e:30:36:91:33:8e:82:b8:3b:91:79:43:4e:0b:a3:4f:
f7:7e:cd:26:80:ca:57:a0:3a:7c:92:69:28:1e:fb:45:b5:95:
5d:50:01:a3:e5:50:71:02:3f:53:22:3a:38:24:1d:03:0a:e8:
37:64:d0:e6:30:0f:68:c8:62:1c:65:c8:35:ea:70:d6:23:cb:
a5:5e:81:6d:f2:c8:2a:5b:03:6f:ee:65:5b:47:d1:e3:57:33:
6d:c2:80:73:b2:6f:b7:4f:30:17:05:ad:3f:49:e7:0f:83:5c:
a9:ba:f9:d7:e2:4d:e1:d4:81:a2:f8:85:72:b1:2a:1f:67:38:
a3:d9:45:51:a0:9e:a1:c6:3d:12:eb:49:f0:7f:19:70:3c:74:
c8:0c:35:ac:d9:2d:3b:f2:95:bd:61:f6:56:3d:07:ef:b4:3d:
23:bf:a6:1e:cd:fa:2d:e8:6c:b2:63:d7:49:62:35:81:41:d6:
fa:37:16:97:f2:91:27:fc:c7:94:df:75:c8:10:c0:26:f1:01:
16:9b:ad:ad:37:98:9e:28:8b:41:e5:09:8b:7d:be:97:ee:22:
c7:89:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:49 2024 by rpki-client on console-fra.rpki-client.org