Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/2dd66aEJr6p6PfCqUjMzmXGARiE.roa
File: 2dd66aEJr6p6PfCqUjMzmXGARiE.roa (raw, json)
Hash identifier: E378w2A5qrcvccs3NtvDa/H9Bcjpmez1QUXHQe3nrZs=
Subject key identifier: D9:D7:7A:E9:A1:09:AF:AA:7A:3D:F0:AA:52:33:33:99:71:80:46:21
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 01846B9081CC100B737785FE2788FDD6DA1D
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/2dd66aEJr6p6PfCqUjMzmXGARiE.roa
Signing time: Sat 12 Nov 2022 11:19:03 +0000
ROA not before: Sat 12 Nov 2022 11:19:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 94.137.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6b:90:81:cc:10:0b:73:77:85:fe:27:88:fd:d6:da:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Nov 12 11:19:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9d77ae9a109afaa7a3df0aa5233339971804621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:9c:5f:22:66:b0:e6:0f:74:43:c2:c8:24:
be:f1:e3:0e:1d:e3:d1:bb:7c:e4:4a:f0:19:2f:a3:
94:18:0d:e2:a3:17:45:32:c0:33:00:80:0f:fe:a2:
c4:cd:32:cb:66:8f:27:92:9b:6f:ed:5a:05:0e:3a:
d1:33:d7:d6:b1:ed:4c:24:14:66:e0:a1:fc:9d:10:
f6:dd:fb:ef:99:a7:95:a5:b8:93:22:c5:1d:ed:f7:
46:2d:11:88:43:27:ea:b5:e8:82:26:20:a3:2c:63:
2e:1c:30:cd:cd:ff:83:c2:89:18:33:10:da:a0:54:
93:57:a7:e6:40:ed:3e:df:59:81:97:c1:f5:68:08:
f3:e6:ee:72:0f:7a:6e:a2:35:52:5b:c4:18:9b:59:
15:07:2f:84:f6:3e:e9:be:31:23:eb:66:3c:a5:3f:
a5:aa:46:a2:6a:7e:cf:a8:6b:f2:a6:80:cb:c4:1e:
e1:b2:84:4b:a9:8a:b6:02:72:72:22:44:17:2e:44:
a0:4d:a8:8a:84:ee:a0:5e:87:4e:0c:6d:5b:91:71:
21:c2:f9:5e:ec:fe:06:e3:8c:05:b0:1a:51:01:0b:
98:1a:bd:da:d4:c5:fc:81:55:19:8e:fc:c5:c0:5b:
1d:c1:5b:ac:ef:27:2e:60:69:32:b1:23:a9:06:dc:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:7A:E9:A1:09:AF:AA:7A:3D:F0:AA:52:33:33:99:71:80:46:21
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/2dd66aEJr6p6PfCqUjMzmXGARiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.78.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3b:e7:2d:41:c1:d9:f6:20:cc:77:7c:ea:91:71:b2:1c:9e:
c9:da:50:d5:3e:70:28:50:28:0d:c8:bd:4c:bb:88:0f:ee:11:
27:bb:c6:d0:2a:67:9e:c4:83:60:3e:24:03:b8:32:36:b1:5e:
77:98:02:ad:67:32:20:92:2c:72:66:53:87:c1:d1:f8:a8:50:
53:c0:7f:de:0b:70:94:47:f0:8f:fd:84:55:7b:88:e7:27:a2:
56:16:87:e5:e7:0b:9f:95:70:70:69:3d:8e:f0:ef:b8:43:8b:
a3:ef:ab:6f:5e:80:2e:3a:d7:b5:03:57:1a:02:1c:58:48:f2:
47:5f:79:cd:db:45:a7:66:62:8e:01:90:57:13:86:a6:ba:50:
6d:fd:23:e5:76:72:75:b4:e0:78:b1:7d:98:29:f7:d2:7f:40:
04:ad:c1:4a:ab:68:aa:15:78:0e:83:df:4b:0f:b6:0a:62:2b:
cb:f4:46:b9:11:6a:bc:3c:0a:96:59:c6:7c:d2:a4:73:d3:ff:
d8:a0:3a:05:a7:0d:91:8b:39:cb:da:e2:26:ef:16:7b:35:6a:
b1:88:98:94:57:88:10:de:34:4b:18:81:25:59:75:81:4f:7c:
99:4a:ff:58:0e:a6:1a:6e:4d:ba:4d:be:57:37:9e:b4:22:d7:
09:17:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org