Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CGQ7LBKZ96QxeCmzUqqlfKTgD0k.roa
File: CGQ7LBKZ96QxeCmzUqqlfKTgD0k.roa (raw, json)
Hash identifier: b7N0dv+vD5+l/yj4vOOSo5Rfod5kVEYnpxXQJG4Xj6o=
Subject key identifier: 08:64:3B:2C:12:99:F7:A4:31:78:29:B3:52:AA:A5:7C:A4:E0:0F:49
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 023E4628
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CGQ7LBKZ96QxeCmzUqqlfKTgD0k.roa
Signing time: Sat 01 Jan 2022 05:56:44 +0000
ROA not before: Sat 01 Jan 2022 05:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47821
IP address blocks: 94.131.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37635624 (0x23e4628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 05:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08643b2c1299f7a4317829b352aaa57ca4e00f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:6a:28:4e:ff:ca:9c:e6:a0:64:b0:20:83:
e0:22:2c:01:71:3f:71:1e:74:51:36:da:98:17:93:
15:bb:aa:3a:f0:0a:32:a9:30:bc:fd:62:6e:8a:a3:
3c:19:50:c1:09:ba:5b:28:c4:c6:78:df:7a:e0:d0:
45:e2:b1:0f:fb:c7:e4:6f:b6:fb:ec:a7:45:88:6b:
d6:1d:e4:76:f2:32:70:e7:18:b5:c5:62:24:5f:7b:
cc:cf:44:a0:a2:91:6b:14:9a:b7:31:2e:5a:9a:87:
75:9b:bf:fc:58:7e:07:36:ea:02:0f:d7:b4:e1:52:
10:b2:41:83:44:ec:91:ed:b1:71:6d:55:80:41:0e:
6b:ff:a9:77:e2:55:c7:99:d5:04:26:b4:25:cd:95:
9c:5d:81:3b:9c:9d:8f:d1:02:54:35:5f:9d:91:5b:
7a:7b:83:ca:37:43:44:39:e7:08:02:6a:b0:ef:f3:
24:0d:03:73:af:3b:a2:d9:8a:6c:f8:d3:a4:67:43:
93:de:81:96:18:d5:22:ed:d2:e2:48:77:c5:21:48:
3d:e7:09:d6:dd:47:52:ca:9a:5c:b8:cc:5a:f4:c7:
a6:47:d8:42:71:7f:d8:cc:09:43:8c:df:dd:1e:57:
b7:fc:81:9f:5c:f3:58:ba:8a:df:e0:d9:07:90:ad:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:64:3B:2C:12:99:F7:A4:31:78:29:B3:52:AA:A5:7C:A4:E0:0F:49
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CGQ7LBKZ96QxeCmzUqqlfKTgD0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.160.0/20
Signature Algorithm: sha256WithRSAEncryption
34:0f:4a:d0:a5:94:16:f3:5e:71:8c:63:b5:e9:db:b3:7f:81:
df:bb:a2:9f:f1:6f:84:e8:03:35:af:b4:5d:ac:db:02:b4:de:
f0:51:41:24:56:45:87:72:58:70:47:41:98:28:df:b7:1d:d2:
b3:ff:d2:9e:b9:40:ad:d6:4d:c6:dc:d3:2a:51:2c:82:4b:80:
56:8b:50:2d:1b:9d:5f:59:32:cd:13:53:26:06:b2:8a:fc:f6:
ae:41:42:9b:61:e6:22:e5:95:1a:a4:be:5b:b7:9c:b6:d6:81:
68:0c:66:74:73:60:ac:56:2d:77:fb:f0:53:31:6c:40:65:0f:
5f:75:80:02:2e:1e:f4:66:06:03:91:5d:42:1c:e5:af:7c:1f:
b4:c8:55:24:18:7d:a7:7f:f2:e3:51:7f:b9:16:d2:09:bd:8e:
74:02:bc:96:f7:a6:bb:10:db:f4:c3:09:7a:83:e0:5a:a5:05:
bb:87:0d:5c:ad:04:d3:7f:15:2b:07:66:97:c6:57:4a:40:e1:
c2:5c:95:cc:64:54:54:56:e5:90:f5:39:e3:ec:f9:3a:36:ce:
93:01:76:f4:42:45:63:fa:ce:01:60:db:37:b5:96:e2:d8:bb:
a6:a9:19:a8:d6:bb:07:c2:d2:10:2d:b8:7f:3e:ab:1b:e2:68:
05:a6:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org