Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/43h44VmEnZB2fdjewO3kBKPloCM.roa
File: 43h44VmEnZB2fdjewO3kBKPloCM.roa (raw, json)
Hash identifier: o01h55B8YH0t0bdvYrImYlOkuRQlgAKEwzRvdVaFZKM=
Subject key identifier: E3:78:78:E1:59:84:9D:90:76:7D:D8:DE:C0:ED:E4:04:A3:E5:A0:23
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0182DC21A960BA2FD19B164E3AF44B4194C7
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/43h44VmEnZB2fdjewO3kBKPloCM.roa
Signing time: Fri 26 Aug 2022 21:49:29 +0000
ROA not before: Fri 26 Aug 2022 21:49:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48108
IP address blocks: 94.131.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:dc:21:a9:60:ba:2f:d1:9b:16:4e:3a:f4:4b:41:94:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Aug 26 21:49:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e37878e159849d90767dd8dec0ede404a3e5a023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:9d:9a:48:0a:e8:9a:51:8e:4e:27:79:87:
30:9b:65:c3:9d:02:de:26:96:c1:ce:4a:5d:bb:ac:
d3:08:7d:c8:c7:61:a8:98:45:5c:55:5d:a5:97:b9:
e0:4c:69:6d:de:36:4d:dd:06:d8:7c:a1:19:3c:c5:
c4:7f:a7:b4:63:c0:e7:33:cd:6e:c9:ed:87:c5:8c:
8b:8f:c7:76:c8:19:49:10:a1:87:c0:f9:f5:aa:37:
75:17:b7:3d:a8:9d:cf:1a:79:4b:f8:4c:6f:3e:01:
e0:77:fa:c1:d1:6e:b9:bf:e6:f9:42:d0:69:ed:63:
06:04:db:6b:c5:dd:7a:a9:a3:fd:d1:75:17:7e:a9:
f8:64:47:61:59:3a:06:9d:41:10:a8:a4:25:86:ee:
b8:eb:c7:66:8f:a3:29:10:b4:21:ce:30:49:24:22:
60:c5:6a:7f:11:81:1a:7b:76:1a:de:c3:26:0c:b2:
63:c0:a1:8f:71:99:ef:4e:a1:0a:3f:34:8a:38:e8:
5e:b5:6d:9c:cc:bb:ec:72:d1:16:08:31:18:e9:e6:
76:af:f5:30:69:f6:58:e9:31:f5:d4:a4:52:1c:a0:
fb:5a:84:31:cd:4a:23:45:e4:5c:ae:b9:f3:b8:26:
77:a4:9a:97:ad:cf:21:1b:e3:ad:63:e0:1b:22:a3:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:78:78:E1:59:84:9D:90:76:7D:D8:DE:C0:ED:E4:04:A3:E5:A0:23
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/43h44VmEnZB2fdjewO3kBKPloCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.104.0/24
Signature Algorithm: sha256WithRSAEncryption
08:45:19:0f:fb:d1:c9:ce:31:90:d3:ae:eb:54:e9:6a:d0:9f:
30:a8:da:0a:ba:84:bf:72:3d:da:ad:e1:49:06:c1:d2:0c:19:
be:b1:52:e6:77:54:dc:8c:b0:fc:3f:e2:06:be:09:c4:76:e2:
74:66:2d:93:e7:75:04:20:36:54:1d:4e:44:fd:07:a4:78:ef:
cf:67:89:50:64:d9:34:0e:d3:4f:b8:11:db:61:da:4f:9c:cf:
c1:2e:dc:8c:e3:19:42:cc:74:96:d0:2c:63:45:eb:3a:2c:ca:
26:2b:e3:ee:93:52:84:61:e0:fe:7d:87:ff:db:8b:7e:1e:77:
14:4a:9b:76:3a:ef:be:08:fc:26:ad:dc:be:19:d1:6d:1e:56:
2b:6f:26:1f:38:eb:e1:f9:3f:09:8c:69:e9:24:79:57:3a:54:
75:43:a5:96:b9:b6:66:47:a4:fa:ef:af:2d:da:df:78:28:d3:
7f:4f:52:70:ee:39:be:c3:ff:5a:d9:e9:b0:47:ba:27:62:96:
1f:56:06:95:3d:72:83:54:33:15:cf:7c:38:e6:34:35:9a:f9:
be:5e:f6:87:9c:19:1a:ef:e4:26:e4:fa:ba:9e:d4:88:76:d0:
f3:ca:f6:8b:46:1b:1d:42:37:c2:39:07:be:ba:bd:c7:ea:0b:
a9:9d:2b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org