Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/e_cRgl05pSMLm0OJtj8lr3MrzdA.roa
File: e_cRgl05pSMLm0OJtj8lr3MrzdA.roa (raw, json)
Hash identifier: y3I4dGsM4g6qrGIjFlqne8PQQwiPTp/tphn71XQQsLQ=
Subject key identifier: 7B:F7:11:82:5D:39:A5:23:0B:9B:43:89:B6:3F:25:AF:73:2B:CD:D0
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 06FBA124
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/e_cRgl05pSMLm0OJtj8lr3MrzdA.roa
Signing time: Wed 20 Apr 2022 07:42:24 +0000
ROA not before: Wed 20 Apr 2022 07:42:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 94.137.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117154084 (0x6fba124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Apr 20 07:42:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bf711825d39a5230b9b4389b63f25af732bcdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:3f:d4:13:38:df:17:fc:5d:11:9e:22:23:
f8:72:58:13:fd:21:d4:ef:e5:23:f0:85:3d:7c:37:
f6:c4:8c:3f:f2:57:4a:e0:49:81:0f:10:c4:c5:c8:
66:ec:85:b4:9c:cc:22:9a:eb:16:5d:1d:fa:40:b2:
81:18:03:16:4d:06:44:03:76:52:b1:a6:03:70:d5:
af:3c:43:ec:24:2c:52:ad:fa:9d:6e:ca:6e:7b:3e:
40:e5:30:93:4c:5f:52:e6:53:ee:66:cd:8a:eb:5a:
86:88:d1:79:42:b1:c9:8a:38:63:21:3e:a4:ea:82:
9b:c2:f7:24:9c:07:3a:b7:12:72:c3:29:07:74:18:
c0:1e:0a:76:b0:ab:2d:54:82:db:8f:dd:9f:0b:f5:
d3:61:2d:52:c9:01:05:95:e3:50:44:13:98:49:6c:
72:01:ae:6a:91:6d:4f:3c:72:fb:88:a1:0f:49:e5:
88:da:1a:8b:4a:4e:58:b2:9d:8f:46:e2:34:29:1d:
f4:fb:5e:e0:f9:0a:ee:02:60:bc:ca:2c:56:45:8c:
e1:15:c3:b8:03:15:9c:b2:03:d8:5a:38:59:2b:24:
b6:8c:83:64:83:f6:e3:94:b8:f7:29:b7:77:5e:d3:
0d:42:bb:fa:cd:06:45:80:eb:18:35:b2:e4:12:44:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:11:82:5D:39:A5:23:0B:9B:43:89:B6:3F:25:AF:73:2B:CD:D0
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/e_cRgl05pSMLm0OJtj8lr3MrzdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.78.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f4:6b:ed:d4:44:a6:5a:8b:d2:f7:52:d6:d2:0a:d5:43:4d:
eb:58:6a:08:63:42:3b:c4:91:bd:97:9b:f1:c2:63:4f:83:e7:
ce:15:55:68:b6:1a:3b:d6:4e:8f:10:14:eb:67:6a:05:81:a4:
37:56:15:fa:d8:68:4e:28:87:5a:57:ce:7c:73:f6:0e:70:ca:
ca:55:d1:2b:90:a6:97:fd:16:c3:ce:97:77:30:c1:3e:85:5e:
a6:78:24:4f:44:5c:5d:c4:b0:9e:93:d9:7c:9e:76:14:4a:71:
64:05:61:27:a8:6b:e5:c7:42:e4:b1:bf:42:03:aa:52:05:21:
a1:12:34:ac:70:54:38:fd:a2:ce:16:b7:48:06:34:d6:28:8c:
1a:bb:77:fc:bd:43:0f:51:f1:1a:59:89:0a:57:fe:80:1b:1f:
49:43:f2:f4:b9:a5:db:28:57:79:cd:a8:86:59:6d:a3:31:f5:
19:6b:02:4c:25:9b:6d:d2:ef:5f:10:69:90:17:3f:8e:27:ac:
eb:57:55:f9:40:66:93:d6:69:64:90:29:29:99:1a:39:77:d8:
94:33:08:0a:ce:e5:40:52:11:56:fe:b4:58:40:98:5b:69:ab:
a7:8f:98:1c:23:60:1b:75:26:80:83:85:5e:df:7b:3c:a3:56:
6e:a2:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org