Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2Y2Dj_T0-Z4hXT4WFpR4u7CEDF0.roa
File: 2Y2Dj_T0-Z4hXT4WFpR4u7CEDF0.roa (raw, json)
Hash identifier: OKK1kx2N0MrBv8ROt6rVa3cA62ZeXWG7bAS13XZEqWE=
Subject key identifier: D9:8D:83:8F:F4:F4:F9:9E:21:5D:3E:16:16:94:78:BB:B0:84:0C:5D
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 04552FF8
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2Y2Dj_T0-Z4hXT4WFpR4u7CEDF0.roa
Signing time: Sat 01 Jan 2022 03:51:24 +0000
ROA not before: Sat 01 Jan 2022 03:51:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35444
IP address blocks: 94.154.155.0/24 maxlen: 24
94.154.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72691704 (0x4552ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Jan 1 03:51:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d98d838ff4f4f99e215d3e16169478bbb0840c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:dd:ff:d5:75:34:6a:19:d6:6b:35:77:c0:
20:b6:15:47:b5:5e:66:d5:b0:3f:23:a3:11:c0:4e:
59:7f:14:43:58:4c:76:9d:b5:71:08:ce:15:6b:ad:
27:3e:3f:b6:22:49:b6:5a:9c:9c:9d:45:fd:16:19:
81:b8:4f:2b:1e:c2:7d:bf:e4:93:ac:45:20:68:55:
67:45:48:f9:df:36:50:bb:df:e6:4b:b9:ca:5d:35:
c1:3f:a3:06:47:2b:57:ca:d5:f0:e2:a3:74:0a:d9:
bb:53:b3:ab:58:3c:3f:85:52:ae:05:75:f9:2d:56:
63:b4:da:15:cd:44:6c:25:fc:af:1b:e0:63:57:7f:
4e:9f:f7:c7:c6:97:bf:54:18:42:3a:5e:13:ae:d3:
0f:c9:41:7c:b3:63:00:c6:02:07:29:86:80:37:92:
8a:8b:64:d6:41:72:02:ae:6c:de:ff:f8:8b:fd:5e:
50:b9:c3:8b:d5:8b:f6:51:c5:b6:c2:a6:ab:af:24:
ba:0f:ff:20:ad:c7:c6:53:92:50:2e:20:e8:66:11:
95:00:26:8c:93:38:30:ea:b6:5d:8f:15:7a:5f:be:
47:1f:59:9e:ed:f2:ab:64:22:94:24:25:c5:20:a2:
b5:c1:bc:f5:f8:1d:18:33:3f:02:1e:a8:03:f9:46:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:83:8F:F4:F4:F9:9E:21:5D:3E:16:16:94:78:BB:B0:84:0C:5D
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2Y2Dj_T0-Z4hXT4WFpR4u7CEDF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.154.0/23
Signature Algorithm: sha256WithRSAEncryption
73:96:e3:58:29:87:e6:b4:6b:68:d9:05:fb:53:e0:97:5f:b1:
5c:e3:04:06:7a:ea:15:71:52:9e:8c:18:ed:51:75:ef:da:c4:
4f:87:30:d0:e9:f6:a3:6c:ef:ea:ea:1a:58:74:d1:70:24:9d:
06:0b:35:3f:19:54:13:77:54:55:cf:9f:6e:2d:26:77:fb:9e:
a7:8f:b5:f0:5b:dd:75:35:07:ae:f1:15:35:48:bb:6b:90:82:
c3:dd:65:d5:28:52:b6:b0:54:81:04:d3:8f:83:8d:6f:75:ad:
92:1a:83:3e:2c:3c:a1:2a:e9:cf:7a:81:42:ed:49:73:9c:42:
6b:2e:52:af:56:28:e4:5b:7d:b5:82:8b:18:8c:85:01:1f:03:
f7:f3:5b:2e:de:b9:06:54:9d:2d:56:ef:b9:6a:52:06:c1:4d:
6c:15:a5:69:0d:7e:fc:76:a7:d0:e1:e8:c7:15:e0:88:da:75:
b1:dc:b7:be:c6:af:26:5e:87:14:02:be:8f:f2:bd:04:61:a4:
ec:21:af:9a:18:4e:d1:3a:77:8d:5e:ba:62:d6:4a:c3:c0:a0:
09:4a:db:9a:12:06:20:94:3d:b0:0f:f8:f6:b8:7e:4c:c1:26:
0e:e4:ca:0b:d4:97:a0:71:dd:f9:a2:0c:ee:0b:61:d3:66:78:
45:4c:33:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:30 2024 by rpki-client on console-fra.rpki-client.org