Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/c2JvEvgga44ohGUjgkxQLHzUAl0.roa
File: c2JvEvgga44ohGUjgkxQLHzUAl0.roa (raw, json)
Hash identifier: Mhwx07DBtvCO73FB6Z8evquHxuYCoZbQvxGGMSXdkgY=
Subject key identifier: 73:62:6F:12:F8:20:6B:8E:28:84:65:23:82:4C:50:2C:7C:D4:02:5D
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0579A1DE
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/c2JvEvgga44ohGUjgkxQLHzUAl0.roa
Signing time: Sat 01 Jan 2022 02:51:38 +0000
ROA not before: Sat 01 Jan 2022 02:51:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35478
IP address blocks: 94.154.33.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91857374 (0x579a1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 1 02:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73626f12f8206b8e28846523824c502c7cd4025d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:20:ab:40:17:02:c5:12:9c:a1:94:d7:10:
c8:92:36:4d:ef:b0:bd:7f:e0:4b:13:a8:f1:3c:29:
d2:c0:09:98:b3:28:c7:a5:40:7c:19:50:65:cb:f5:
84:1d:b0:95:f1:41:ee:69:5d:f5:34:1c:34:d4:dd:
20:97:ce:94:2e:e5:dd:12:16:3e:30:39:96:91:ec:
74:a5:b2:eb:e6:cd:18:da:95:f5:6e:8a:c1:fb:47:
44:22:a4:8c:49:44:a7:4b:5a:ae:9e:83:1b:b4:b7:
42:cf:3f:78:9e:7f:4d:33:86:6f:6f:b6:70:33:e0:
56:79:e1:3e:34:6e:2d:1f:46:86:ed:58:01:0c:1c:
93:3b:df:55:2b:71:c8:31:14:94:9d:2d:5a:0d:f1:
4b:76:e2:8a:6f:03:8b:c6:3f:d2:51:bf:1f:93:63:
f6:86:b8:c9:e2:19:f3:84:e1:c8:81:53:ef:ff:41:
58:9d:53:87:48:66:bf:b1:9e:ea:7b:77:eb:2a:df:
a5:c2:57:3c:36:33:da:23:89:b5:7b:d5:ae:48:1e:
1a:cb:21:af:59:27:7b:18:06:14:03:d2:11:03:86:
91:47:3b:23:c9:18:99:b5:93:e9:0f:74:a1:6b:32:
a5:8f:fe:6a:e4:98:4b:ca:d1:bc:41:00:3d:57:7f:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:62:6F:12:F8:20:6B:8E:28:84:65:23:82:4C:50:2C:7C:D4:02:5D
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/c2JvEvgga44ohGUjgkxQLHzUAl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.32.0/22
Signature Algorithm: sha256WithRSAEncryption
26:14:ae:ea:29:aa:eb:a3:6b:53:1d:d6:01:8f:56:33:7c:7f:
a3:9a:d7:45:58:df:fe:b7:d2:27:72:87:9f:ac:0e:69:6f:0d:
e4:4b:22:0f:b0:a1:b5:47:26:d1:70:6f:15:b4:ed:c4:f0:fe:
d5:13:14:eb:75:6d:2e:6a:e0:75:2f:00:a7:a1:90:8f:d3:b1:
5e:d5:9a:07:1e:f0:0e:32:fd:49:ac:08:96:4e:b1:ae:40:4a:
7f:3e:b8:6f:45:65:e5:5d:54:50:ea:0c:7d:87:ad:e3:e5:7c:
ad:b1:56:5d:e9:10:aa:b6:80:57:74:5e:eb:4a:dc:46:f2:fa:
ba:33:33:35:64:82:05:d7:70:06:c0:7c:b2:d1:d5:45:f5:6d:
d9:f8:35:72:b0:9a:24:6e:08:55:32:23:57:01:3e:8a:24:e8:
b2:13:ef:c3:23:37:9e:ef:86:4b:94:44:34:c8:15:56:23:31:
fb:b2:ba:90:de:a0:48:a8:81:c2:b3:23:35:ff:fd:95:9f:c9:
b1:a7:05:80:db:88:23:b9:02:ee:a1:b5:46:07:1f:6f:ac:47:
4d:87:2d:ff:38:61:56:a2:d8:02:09:99:e3:3e:52:8a:ca:25:
a1:ae:46:a6:de:1b:6c:17:fb:93:62:fd:fb:0c:bd:a5:d5:1f:
cd:84:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org