Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/uQRJrAwVlo6ftOdSKOxYC_DfyLg.roa
File: uQRJrAwVlo6ftOdSKOxYC_DfyLg.roa (raw, json)
Hash identifier: eHiEhRNsyMRdieZKW+V4XgS/CftUqoeYMhCBicBiqlo=
Subject key identifier: B9:04:49:AC:0C:15:96:8E:9F:B4:E7:52:28:EC:58:0B:F0:DF:C8:B8
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01841DF64B33E1224A6BE2C5EC669BC1E6BC
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/uQRJrAwVlo6ftOdSKOxYC_DfyLg.roa
Signing time: Fri 28 Oct 2022 09:39:51 +0000
ROA not before: Fri 28 Oct 2022 09:39:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 94.154.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:f6:4b:33:e1:22:4a:6b:e2:c5:ec:66:9b:c1:e6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 28 09:39:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b90449ac0c15968e9fb4e75228ec580bf0dfc8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:d2:5d:7e:82:16:21:96:3e:85:59:56:ec:
0b:40:17:72:82:2d:ec:04:11:7b:c7:cf:82:f7:95:
39:aa:b7:34:c2:4f:7d:e4:86:6a:27:4b:8e:61:6a:
1d:dd:e1:30:26:e2:4c:ed:10:67:fc:cf:57:21:82:
02:15:7d:e3:7b:a7:36:7b:15:79:0d:b3:f2:80:3c:
27:cc:0f:13:52:ae:97:67:89:8f:2e:fa:0b:e5:c0:
42:19:0e:c9:d5:c1:3e:cd:85:ac:6e:59:49:07:7d:
75:21:75:6d:7e:f5:06:5f:bf:68:d6:e2:13:e3:f1:
af:c7:0e:d8:8b:a0:e1:4d:6f:c3:b0:0b:9b:51:4a:
11:80:5e:cf:44:6a:7b:b1:4d:aa:44:89:84:db:5b:
8d:1c:58:e7:b5:7e:ac:87:65:52:c0:9a:e0:bf:3d:
c2:d7:c4:8d:48:79:78:d6:19:ca:f3:dc:6a:e5:41:
6c:a2:da:75:75:64:af:80:1d:45:f9:c4:99:6d:95:
62:f2:70:bd:5a:4b:78:f2:8d:67:ba:71:07:35:b1:
d5:bf:df:bc:8e:86:76:f4:80:69:36:5d:29:65:51:
c7:f7:ff:7a:23:27:d2:f2:55:68:a5:75:52:ef:85:
17:a0:59:e2:67:31:1e:93:49:f5:32:94:9a:a8:39:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:04:49:AC:0C:15:96:8E:9F:B4:E7:52:28:EC:58:0B:F0:DF:C8:B8
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/uQRJrAwVlo6ftOdSKOxYC_DfyLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:c3:54:2f:ba:c4:87:8b:ff:6a:bd:00:c4:b0:ec:1f:c1:e7:
9f:9b:59:bd:b3:5f:bb:98:36:ad:d5:6b:04:30:fa:2d:74:72:
7c:7a:33:6b:a0:cc:e4:64:e5:d9:7b:8f:3e:27:5e:91:b5:0b:
da:24:08:d3:d5:17:f9:12:b8:8c:0c:e5:07:86:34:f7:80:e8:
3e:ad:95:45:76:ff:81:07:e3:4e:c1:fa:fe:eb:df:22:4f:5c:
0a:6d:12:99:83:cf:32:ed:0d:5f:18:cc:31:e8:11:b5:0e:e0:
31:cc:16:44:7e:c4:32:69:77:02:19:8e:89:35:c8:7f:02:fb:
1e:fe:1d:6e:e5:a5:b4:8a:57:c6:28:25:3b:f8:e1:e1:4d:ac:
ac:6c:70:83:7e:03:66:fe:06:6d:b3:6c:9f:b9:01:23:05:f9:
a0:ed:5a:76:8d:0a:d2:20:af:4b:f6:75:ea:35:57:0e:4c:8c:
91:59:4a:40:34:f8:cd:f4:36:32:01:e4:c0:d1:03:0d:f0:ec:
4d:21:f8:0d:d7:8e:42:33:f1:48:57:e4:9a:74:b2:cb:82:0f:
79:89:e6:42:e4:b1:a6:b9:e5:e6:f7:b4:c9:32:e1:24:a2:b1:
63:2f:05:d8:39:88:c8:8b:92:31:50:5c:29:9f:e1:30:88:6b:
c6:29:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org