Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/QW2tropJoYdgJ8XatgbFlvKXII8.roa
File: QW2tropJoYdgJ8XatgbFlvKXII8.roa (raw, json)
Hash identifier: gkT7PxXZVwC/x5qAzuMIsR/sG8RqibWrfcS0232OCLA=
Subject key identifier: 41:6D:AD:AE:8A:49:A1:87:60:27:C5:DA:B6:06:C5:96:F2:97:20:8F
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 057AAA73
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/QW2tropJoYdgJ8XatgbFlvKXII8.roa
Signing time: Sat 01 Jan 2022 02:51:39 +0000
ROA not before: Sat 01 Jan 2022 02:51:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57100
IP address blocks: 94.154.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91925107 (0x57aaa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 1 02:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=416dadae8a49a1876027c5dab606c596f297208f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:6c:ae:fa:07:63:3b:66:76:6b:93:5d:a6:
87:07:55:5a:b2:a8:dc:4d:2b:99:c9:20:f0:64:1c:
67:53:c0:a5:6d:55:82:1e:69:42:33:7b:54:09:dd:
0f:cc:b3:7d:1a:b6:fa:c0:57:8e:ab:a7:06:99:13:
4d:ae:70:25:e4:7a:2a:b7:5f:f5:b0:4b:35:50:fb:
b1:d9:55:83:0f:44:b4:11:5f:cf:70:2a:b3:19:9a:
d6:62:98:8e:56:09:72:7d:c9:ef:72:8f:4b:02:58:
fe:be:e1:38:1b:f3:d2:6f:f2:1f:4c:8d:10:6a:cf:
9a:0d:c2:b6:d1:2b:b6:e6:a0:14:91:e1:00:04:f6:
ba:fd:25:82:64:8e:3f:37:52:45:65:86:9e:15:0a:
a5:28:58:bf:a4:a1:29:3e:a1:d4:dd:a1:f3:bc:81:
14:36:88:0d:26:fc:a6:8f:79:6b:7f:7d:88:1f:d0:
74:8f:e7:72:62:1f:59:a5:e0:b8:df:6e:6f:73:94:
18:06:e0:5c:d0:c7:9e:1e:27:78:d9:d9:7e:db:bc:
81:a0:36:e5:30:d2:bf:6f:e7:9a:91:f9:20:e0:03:
1e:18:36:40:22:85:a5:fb:b4:6a:c2:f3:5f:5b:95:
11:1b:f5:42:99:81:36:f0:b1:d5:a5:24:9b:1f:fa:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6D:AD:AE:8A:49:A1:87:60:27:C5:DA:B6:06:C5:96:F2:97:20:8F
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/QW2tropJoYdgJ8XatgbFlvKXII8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:66:ff:47:ca:aa:74:bb:0d:e5:dd:26:a9:c7:e2:3d:d3:71:
02:dc:1d:e3:44:3d:e8:f0:fa:1d:c8:02:40:87:bd:04:c1:0f:
0a:75:d9:1d:f8:54:c8:17:8e:98:1c:d0:62:31:37:72:33:f2:
2c:20:e5:8d:2d:ea:e3:b6:b4:6a:0a:31:3f:f2:cf:d4:60:a5:
2b:c1:7e:4d:b7:47:4c:31:ac:e4:1e:c0:4f:f0:25:07:1d:b4:
17:08:78:b0:25:66:21:5b:8c:d0:95:06:50:35:b6:25:d6:ba:
7b:a9:e6:58:5f:a1:72:22:0a:06:4f:4c:8d:55:a8:90:aa:fc:
7b:26:5e:10:9f:3a:40:6d:d4:48:d9:4f:66:2a:0e:19:4d:b8:
27:dd:74:db:a0:00:e7:85:07:37:1a:10:18:2b:49:3b:be:02:
70:ee:76:b9:c6:a5:85:a6:a1:9a:a0:2e:31:c1:6a:ef:14:e8:
3e:b0:fb:81:63:c3:4f:9e:51:cd:ea:e2:3d:ee:b7:72:c4:5c:
71:8c:5f:3b:28:9d:00:81:1c:3c:06:2d:e1:09:0b:f9:62:46:
7e:fe:64:4e:17:c9:f0:65:00:75:a5:59:5a:f6:94:f4:5a:ff:
32:79:99:d5:a3:25:3e:21:48:a4:00:a5:c8:e0:c3:5c:8b:a7:
80:cb:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org