Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/CVeBQDuUPV1uiHzgpaqKe5UtGP4.roa
File: CVeBQDuUPV1uiHzgpaqKe5UtGP4.roa (raw, json)
Hash identifier: uLsFq4h9/Yng5iS5E0y7oEUjvrGIQ9GeiKJsmZjtmAI=
Subject key identifier: 09:57:81:40:3B:94:3D:5D:6E:88:7C:E0:A5:AA:8A:7B:95:2D:18:FE
Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial: 18F1317F
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/CVeBQDuUPV1uiHzgpaqKe5UtGP4.roa
Signing time: Sat 01 Jan 2022 12:06:22 +0000
ROA not before: Sat 01 Jan 2022 12:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48594
IP address blocks: 94.124.81.0/24 maxlen: 24
94.124.85.0/24 maxlen: 24
94.124.82.0/24 maxlen: 24
94.124.83.0/24 maxlen: 24
94.124.80.0/24 maxlen: 24
94.124.84.0/24 maxlen: 24
94.124.86.0/24 maxlen: 24
94.124.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418460031 (0x18f1317f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Validity
Not Before: Jan 1 12:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=095781403b943d5d6e887ce0a5aa8a7b952d18fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:35:41:6e:1b:3f:42:6b:95:37:9e:33:86:
4c:33:4a:ff:ca:ce:e3:ee:62:98:4c:71:f5:bb:86:
73:6a:86:11:90:99:b3:ca:7e:ff:10:81:e8:4c:d3:
db:83:b6:8d:0c:71:ba:a6:72:fc:ce:8d:9b:39:8a:
e7:33:9d:11:ad:5b:30:9e:26:49:42:c4:29:71:39:
3e:e6:0c:14:11:04:e3:ee:32:e3:6b:c4:2a:df:15:
97:e9:8c:1a:fe:12:67:ce:e1:a2:22:9b:a9:2e:07:
e6:77:75:69:0a:d6:fd:f4:13:cc:7b:55:6d:40:79:
54:e5:1c:4a:d2:8f:c5:3b:75:1e:e2:48:f5:4c:9f:
c6:c8:22:1b:7a:97:e0:69:52:e6:4d:c4:ec:1b:9a:
38:4a:60:7a:d2:87:cd:3b:d7:41:c1:20:cb:6d:1f:
92:4c:40:3a:27:00:2d:5f:26:15:16:e5:84:b0:6a:
c2:33:11:83:33:70:b8:d7:1e:59:e9:49:0b:92:fe:
e7:5d:62:eb:f5:b6:03:2f:b7:6d:eb:a3:5a:b6:86:
72:34:e5:3a:96:81:2e:2a:bb:4b:ba:09:13:99:4b:
21:19:ef:2f:61:62:6d:a8:6a:c3:17:cd:a7:a1:66:
af:f0:46:00:91:3d:e4:ea:c6:c0:dc:1e:df:a5:c5:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:57:81:40:3B:94:3D:5D:6E:88:7C:E0:A5:AA:8A:7B:95:2D:18:FE
X509v3 Authority Key Identifier:
keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/CVeBQDuUPV1uiHzgpaqKe5UtGP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.80.0/21
Signature Algorithm: sha256WithRSAEncryption
81:04:aa:1c:c6:bc:29:7d:a0:cf:52:86:11:11:36:2e:cb:35:
0a:23:01:8f:7b:f1:f1:40:40:41:e4:01:db:fd:0c:8c:96:3e:
2d:68:e8:59:bf:99:48:97:41:73:12:2a:0a:cf:ae:15:c0:3d:
bc:e9:95:01:46:be:f6:48:80:31:d4:c7:46:8b:c2:a9:db:fc:
b4:c5:ac:5a:7f:dc:3d:f0:45:8c:11:90:23:c4:75:8c:d5:ad:
fe:86:6c:e8:9b:7f:e2:f2:61:4c:84:eb:0d:b8:02:7a:ee:de:
da:96:61:ba:2e:77:6b:50:89:7f:4b:d6:2a:f3:db:d1:54:90:
a5:4a:5d:52:20:aa:31:bf:be:1f:74:14:22:fc:9c:ce:18:01:
c3:8b:cb:32:9c:76:bf:cf:09:7c:48:35:c2:4f:05:20:da:8d:
7b:39:c2:07:c4:94:5e:6b:73:52:df:aa:60:ee:86:a3:65:de:
7e:8a:02:12:97:ce:11:c9:82:0b:1e:c0:0f:4c:4a:77:77:72:
e1:9c:4a:cb:85:75:9d:68:7e:e7:54:76:13:19:18:90:b5:68:
79:e1:1f:e0:6b:f8:12:4c:f0:44:a0:ae:33:5b:43:e7:0d:94:
51:fa:3d:e6:a5:41:7f:96:68:f4:5f:0c:07:31:04:bc:57:ee:
09:1d:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:19 2024 by rpki-client on console-fra.rpki-client.org