Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/53AY1bd62jT-oFhEhy5esq01cmQ.roa
File: 53AY1bd62jT-oFhEhy5esq01cmQ.roa (raw, json)
Hash identifier: 50GQtMHetx4yKbqtQ6FmRy/+Q92mWJ72u1dNdnLsZUg=
Subject key identifier: E7:70:18:D5:B7:7A:DA:34:FE:A0:58:44:87:2E:5E:B2:AD:35:72:64
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 066309BB
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/53AY1bd62jT-oFhEhy5esq01cmQ.roa
Signing time: Thu 24 Feb 2022 14:37:08 +0000
ROA not before: Thu 24 Feb 2022 14:37:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 94.137.72.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107153851 (0x66309bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Feb 24 14:37:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e77018d5b77ada34fea05844872e5eb2ad357264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:c0:b8:e8:d7:e2:b6:b2:ae:f3:cd:7a:5c:
c0:6f:44:65:fe:5c:56:c6:99:e9:27:34:ff:91:8a:
43:77:6a:5a:54:87:20:03:96:45:ee:4c:9b:67:bc:
6f:8c:0c:4f:43:a2:f4:c7:9a:64:2d:6e:f8:d9:af:
56:20:41:6c:8b:e2:ed:68:70:cb:1e:41:99:95:e8:
f1:25:f4:75:23:d1:5d:98:01:90:15:46:2c:f2:d7:
fd:1d:64:f4:28:38:c1:20:75:73:53:6b:31:88:d6:
20:52:f3:53:c7:df:77:33:b4:ea:78:80:7d:a8:7b:
6d:19:e3:fa:73:c1:2b:33:9e:07:76:0d:8a:9f:6a:
6e:6b:c2:7e:c7:cf:84:3a:32:a2:4f:d6:bb:6f:8b:
6d:b2:9e:3c:58:0d:fd:cc:34:d1:5f:8a:fd:8d:18:
7d:26:44:96:90:fc:38:21:07:b6:a1:b5:17:c8:d4:
6a:73:6b:46:11:e7:cb:52:6b:54:3e:af:71:9a:ec:
1b:de:1a:2e:a8:fd:87:8a:9a:96:51:51:42:e2:ae:
cc:82:57:9d:74:ed:a6:63:fd:ce:1c:92:69:d5:79:
8d:e7:4e:77:78:99:12:7a:1d:b1:37:03:b6:8f:36:
6b:9e:58:fa:3c:72:c2:5a:1f:81:a3:2d:15:6f:cc:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:18:D5:B7:7A:DA:34:FE:A0:58:44:87:2E:5E:B2:AD:35:72:64
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/53AY1bd62jT-oFhEhy5esq01cmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c4:03:26:8f:1c:20:58:b3:53:22:68:17:c7:c2:07:2c:fb:
1a:7a:05:8f:d1:d9:6b:9e:fd:4c:f7:98:c4:f8:11:50:49:26:
9c:32:71:7d:2c:8d:59:9e:9d:a6:f1:11:7f:9d:8e:8c:f8:3c:
5e:95:58:0d:59:2e:f7:3a:b2:a0:f6:3c:6c:84:cc:47:4d:9c:
2c:e0:c7:eb:f5:e1:9b:c9:27:96:3d:52:32:99:19:79:68:25:
f8:15:39:69:6e:04:11:f2:3c:5e:f9:8a:da:b0:34:f5:b6:9a:
10:06:6b:e4:14:c0:6d:da:1c:79:63:a7:85:53:a7:ce:90:f7:
39:2e:87:3d:a9:b3:d1:72:30:a3:20:f3:c1:6b:4c:47:d4:e6:
de:8a:bd:2e:15:cd:93:aa:3d:b9:22:1d:25:69:a4:d0:07:94:
c4:26:e2:95:24:2b:33:2d:71:0d:3e:4e:43:91:0c:2e:6b:e5:
ce:f0:9d:d0:d1:e0:8e:ed:1d:5d:a9:77:7a:12:10:75:4d:ad:
7d:51:bc:46:6c:51:18:a4:4d:85:09:6b:bc:ad:d7:bd:aa:eb:
43:0d:f9:05:6d:d2:53:d1:70:c2:a9:eb:44:c7:7a:72:7e:08:
68:26:1c:93:eb:57:a9:4d:d4:4d:8c:9a:1a:d6:61:ef:2c:52:
b8:f0:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org