Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1-y3rj-AcR9IOGD4Oz6_I94x2mQA.roa
File: 1-y3rj-AcR9IOGD4Oz6_I94x2mQA.roa (raw, json)
Hash identifier: 5gtE4iP/lxO/oh3NRrJZjg9kzjQH0tGTg7S7IDHLdF8=
Subject key identifier: FB:2D:EB:8F:E0:1C:47:D2:0E:18:3E:0E:CF:AF:C8:F7:8C:76:99:00
Certificate issuer: /CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Certificate serial: 380AD3E5
Authority key identifier: D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1-y3rj-AcR9IOGD4Oz6_I94x2mQA.roa
Signing time: Sat 01 Jan 2022 14:57:38 +0000
ROA not before: Sat 01 Jan 2022 14:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205402
IP address blocks: 94.199.232.0/21 maxlen: 24
185.108.92.0/22 maxlen: 24
185.108.95.0/24 maxlen: 24
2a02:8d0::/32 maxlen: 32
2a02:8d4::/30 maxlen: 32
2a02:8d1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940233701 (0x380ad3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Validity
Not Before: Jan 1 14:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb2deb8fe01c47d20e183e0ecfafc8f78c769900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:9e:70:c0:7a:4c:bd:b9:b3:d7:7f:3a:24:
87:fc:45:18:20:7b:b8:1c:4b:e8:c9:cd:c7:9e:8b:
c2:16:1f:7c:fd:b9:32:f7:2b:b6:62:9e:2e:77:d1:
2d:86:fa:6f:75:ad:21:45:6c:8c:04:96:56:9f:73:
dd:b7:86:ee:1b:ae:e8:6f:fd:62:80:d8:b6:fc:f0:
ae:9a:df:80:6e:96:04:c6:95:28:57:df:3d:ff:75:
f2:6b:f8:d5:36:a1:35:6f:9a:80:8c:02:b2:83:2d:
e1:46:37:4e:20:df:cd:16:17:28:a0:97:7c:55:83:
5c:2d:a8:bb:b1:02:b6:13:bb:4a:6d:49:40:30:e6:
92:82:3f:fc:be:8a:7f:74:ea:e7:00:82:3f:8a:de:
48:90:a5:3a:c5:37:63:fc:59:9a:27:62:51:f5:83:
c5:64:fe:f9:d7:58:08:39:14:5d:dd:64:34:49:dd:
4a:50:33:cd:f3:c7:6c:1e:6e:41:51:51:ee:e9:35:
1e:6b:0d:94:bc:ce:b4:18:0c:cd:92:fb:4f:b0:33:
9c:3f:31:04:be:2c:1e:a9:87:55:c7:71:5a:c1:60:
62:19:dd:9a:28:5a:cc:cc:01:b9:d3:70:73:69:35:
2d:54:0e:06:4e:a2:ff:92:6f:4e:19:34:38:72:00:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2D:EB:8F:E0:1C:47:D2:0E:18:3E:0E:CF:AF:C8:F7:8C:76:99:00
X509v3 Authority Key Identifier:
keyid:D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1-y3rj-AcR9IOGD4Oz6_I94x2mQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.232.0/21
185.108.92.0/22
IPv6:
2a02:8d0::/31
2a02:8d4::/30
Signature Algorithm: sha256WithRSAEncryption
34:f1:e6:87:96:57:95:43:80:e3:82:ec:c9:a3:3f:ec:47:93:
a2:b4:73:21:f7:6d:f9:9a:1d:6b:36:b0:ba:58:d0:69:4d:a1:
77:3c:6f:cf:2d:52:6c:98:3a:15:91:48:22:be:bd:a9:3c:30:
db:78:5d:aa:e9:ac:89:f4:33:c7:19:09:7c:9d:05:68:1f:9e:
5d:35:f5:e4:ed:9c:56:b3:a3:a8:5a:ee:c9:ec:0f:60:93:7b:
3d:75:05:e1:7f:73:89:19:36:3e:28:65:d5:c3:d7:ee:f7:a7:
e4:40:ec:50:28:e1:15:e8:91:7b:cd:65:3f:f2:1c:27:a2:e9:
b2:80:b9:8c:6f:18:8f:db:40:08:ad:57:09:c8:64:1f:37:d4:
fb:c0:e3:24:4f:b0:8d:90:f8:98:69:97:83:cc:18:7a:74:7f:
57:3b:d3:1b:18:01:7b:40:39:8d:3e:6c:5a:8b:f8:d8:9d:1f:
c6:02:1c:10:41:ab:16:9d:a2:20:b8:99:06:da:66:58:f5:12:
02:9e:26:0f:55:be:23:8f:6f:ac:92:94:e0:86:3d:11:df:fe:
33:01:e0:9b:12:99:fd:30:8d:d1:52:04:8e:38:93:9a:29:98:
f2:b0:90:0c:73:89:a7:ef:08:34:76:cc:f0:6b:fd:8b:78:4a:
fb:af:02:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org