Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/so6g__qqbn06Rzk5o5Fe7dYWLcw.roa
File: so6g__qqbn06Rzk5o5Fe7dYWLcw.roa (raw, json)
Hash identifier: A89PKSqJsggEPVZpUE/dW7SP+mdAmJW5UykzYwtX1pw=
Subject key identifier: B2:8E:A0:FF:FA:AA:6E:7D:3A:47:39:39:A3:91:5E:ED:D6:16:2D:CC
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 084883A5
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/so6g__qqbn06Rzk5o5Fe7dYWLcw.roa
Signing time: Sat 01 Jan 2022 08:02:31 +0000
ROA not before: Sat 01 Jan 2022 08:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63956
IP address blocks: 94.250.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138970021 (0x84883a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 1 08:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b28ea0fffaaa6e7d3a473939a3915eedd6162dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:3f:a4:03:64:9b:16:73:0f:9f:a3:1b:ad:
52:e1:d5:77:b7:d1:9e:db:c0:29:1d:78:da:3a:9d:
b4:d3:ac:2b:7f:00:d3:2a:30:91:70:64:f7:f3:0e:
c7:4b:31:e7:73:3e:bc:d8:20:66:73:45:04:14:02:
b7:c6:ab:9b:84:92:b0:63:d0:12:e8:25:61:cd:e3:
85:9b:3d:94:e7:62:02:6c:d1:42:58:cb:3b:49:88:
b5:e3:34:09:01:d2:c5:70:85:8a:ba:16:b3:78:fe:
ae:2f:3f:e7:7d:d6:77:24:cb:17:28:a3:c6:c5:12:
95:cb:b3:a0:f6:e2:e9:aa:38:cd:69:65:0e:e6:d0:
ca:59:2a:c0:a8:eb:e2:79:12:75:f7:35:52:77:f7:
b6:91:6d:7c:bf:0a:f9:ee:39:79:8e:9a:00:72:c2:
ae:1d:31:f1:45:ee:e0:6e:63:5c:2c:41:e9:14:86:
b9:64:64:c2:95:9d:38:be:4e:ea:a0:ef:6c:20:f3:
29:51:b9:00:6e:6f:01:94:6f:73:dd:3c:a9:7f:f5:
ff:89:bb:48:97:e2:b4:55:09:24:c8:80:86:51:22:
e1:ae:40:69:8f:95:99:10:88:12:16:ea:79:dd:42:
fd:83:07:62:67:e1:c6:91:2c:b6:21:61:8b:db:6e:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8E:A0:FF:FA:AA:6E:7D:3A:47:39:39:A3:91:5E:ED:D6:16:2D:CC
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/so6g__qqbn06Rzk5o5Fe7dYWLcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:de:80:32:ed:7e:eb:cf:39:58:a4:a8:3c:de:78:fa:53:52:
ab:5f:cb:1e:43:40:d1:9c:7c:54:63:e2:91:e6:42:65:b4:ed:
6a:41:3f:df:5a:88:af:95:db:02:7c:a5:1d:97:7a:26:2c:e5:
40:b5:cc:d0:d9:8e:14:87:68:8b:4b:b1:15:60:ca:84:ba:32:
bb:a8:04:08:a9:d1:1d:97:c9:cb:ef:d7:08:c5:d3:8c:b5:f7:
e0:5d:29:12:bf:ea:60:20:c3:04:21:b2:93:2d:52:83:01:c3:
60:95:2e:a2:06:fb:10:fe:fb:c5:74:3c:d0:2d:4f:d0:09:34:
c9:8f:51:d8:3d:ec:cd:9e:85:01:f8:74:8a:31:81:03:98:f7:
94:29:69:d5:46:23:88:0f:62:53:0d:36:ff:c3:2e:66:39:72:
7b:7f:2b:2a:e5:a7:6c:6f:66:f3:d2:86:21:a6:f3:63:70:a0:
1d:a6:61:85:f7:d0:37:cc:2d:26:54:4d:95:64:ef:b2:1f:e5:
21:9b:b4:2e:d8:48:c1:1c:a5:ee:a0:81:fb:40:c0:1b:77:97:
f8:b4:ed:2c:83:3e:36:5e:35:dd:79:3e:e3:2f:28:1f:79:08:
3f:01:73:56:0b:bf:dc:c2:b5:15:8e:4f:43:da:38:a1:a1:02:
d1:2b:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:34 2023 by rpki-client on console-ams.rpki-client.org