Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/a94e0MPUwhzJfRJ5QtqJdY4ehXM.roa
File: a94e0MPUwhzJfRJ5QtqJdY4ehXM.roa (raw, json)
Hash identifier: fkvqwjFgro1okR0AMyOrRBvD9rb/1+CehX0uu64XUE4=
Subject key identifier: 6B:DE:1E:D0:C3:D4:C2:1C:C9:7D:12:79:42:DA:89:75:8E:1E:85:73
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018312184467E3BEAD015DFE373D2B696DFE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/a94e0MPUwhzJfRJ5QtqJdY4ehXM.roa
Signing time: Tue 06 Sep 2022 09:18:43 +0000
ROA not before: Tue 06 Sep 2022 09:18:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 5.8.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:18:44:67:e3:be:ad:01:5d:fe:37:3d:2b:69:6d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Sep 6 09:18:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bde1ed0c3d4c21cc97d127942da89758e1e8573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:07:13:0a:2b:7d:99:9b:15:0b:2c:db:a8:
be:01:f4:e0:df:c9:1a:e5:c8:d8:0f:1e:96:a8:91:
bf:eb:e1:aa:bc:15:1e:a6:e4:39:16:ee:5f:a8:e0:
39:56:8a:ca:ff:33:6d:14:a9:5a:ee:63:97:63:23:
9b:b5:c4:66:97:b9:c4:d9:68:25:c8:1a:2c:05:90:
cf:b3:e7:09:91:11:e1:97:80:ce:c4:c9:17:3c:d7:
97:43:1c:8b:28:4e:86:9e:e6:da:e6:98:1a:1f:71:
9d:df:95:9b:87:ab:7d:7f:be:01:c3:80:49:98:b5:
02:a3:12:13:c0:2d:1c:6b:9f:28:bc:74:50:79:5e:
cf:37:e8:ba:4f:89:78:61:38:f4:37:c0:80:2f:ac:
cf:75:ef:1c:d5:89:7a:04:c7:08:d1:64:5c:3f:65:
f9:0f:ed:d1:3c:20:47:da:41:84:f4:eb:17:82:40:
e1:21:94:a2:0d:cd:a6:27:3c:ec:f9:91:17:7e:35:
31:e2:e0:3c:b8:e1:78:95:18:41:06:f1:3b:7d:71:
c2:79:ac:ff:4b:e4:f5:07:49:16:3b:72:74:b6:03:
59:ef:a8:3f:92:fc:21:9b:a8:6a:9f:0f:07:de:f4:
91:aa:1c:0f:cb:2d:c1:b2:6b:1f:d7:ad:0c:1d:50:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DE:1E:D0:C3:D4:C2:1C:C9:7D:12:79:42:DA:89:75:8E:1E:85:73
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/a94e0MPUwhzJfRJ5QtqJdY4ehXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.63.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c6:b0:1a:60:6e:5c:2c:ff:db:8f:f5:7b:27:21:56:db:7a:
ca:1d:07:66:b3:c4:b8:05:e9:4e:e5:dc:2c:48:80:6d:00:17:
66:ef:37:e2:dc:ca:70:f2:cf:6d:8c:a7:95:41:c8:5f:f3:10:
1e:34:8d:68:fc:29:44:44:58:7d:a8:6a:16:2c:e2:87:db:98:
11:72:3c:59:79:8d:75:24:c1:2e:3b:0b:90:be:a3:58:89:13:
48:cc:f2:df:70:7b:d7:65:21:57:bc:ea:dc:af:60:9f:e0:42:
d7:b9:32:6b:1c:99:cc:bb:cf:14:ac:a3:45:e5:1d:5d:e7:90:
37:6a:ac:c1:93:76:7c:c9:5d:13:0a:70:c1:ef:99:bd:4b:c7:
dc:41:10:0b:9e:d9:29:40:24:51:da:a7:c7:b6:4e:8a:1e:49:
c4:8e:59:ec:f3:38:9b:f3:df:bb:73:55:e1:6a:2b:2b:88:71:
e1:0e:ec:05:ec:2d:eb:fa:cf:8a:87:5d:7b:92:e1:f8:9c:8b:
47:c8:21:0f:54:18:4d:57:be:ce:51:76:ce:09:ef:fd:dc:30:
9f:a2:23:45:da:21:f1:9e:e9:d6:0d:27:1d:0d:39:13:80:eb:
cf:7b:cc:58:a5:46:db:76:a3:e5:2c:9d:30:31:93:b3:f1:3e:
60:36:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org