Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/Oj5qnJoO11eFS5ESWuA-XUXlPeg.roa
File: Oj5qnJoO11eFS5ESWuA-XUXlPeg.roa (raw, json)
Hash identifier: gZZOOF3QVxA714vwBXALCIpmXQ+3ZGVse3KsXQ2EM5I=
Subject key identifier: 3A:3E:6A:9C:9A:0E:D7:57:85:4B:91:12:5A:E0:3E:5D:45:E5:3D:E8
Certificate issuer: /CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Certificate serial: 0184EFF9DEF595EED2842567E1A6A210060C
Authority key identifier: AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/Oj5qnJoO11eFS5ESWuA-XUXlPeg.roa
Signing time: Thu 08 Dec 2022 04:24:00 +0000
ROA not before: Thu 08 Dec 2022 04:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62160
IP address blocks: 94.198.240.0/21 maxlen: 21
78.108.176.0/20 maxlen: 20
78.108.187.0/24 maxlen: 24
94.198.224.0/21 maxlen: 21
2a04:a380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:f9:de:f5:95:ee:d2:84:25:67:e1:a6:a2:10:06:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Validity
Not Before: Dec 8 04:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a3e6a9c9a0ed757854b91125ae03e5d45e53de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:2d:11:a6:61:f8:bd:d2:1d:c1:8f:e7:81:
ee:77:bd:eb:6d:73:f0:53:d2:f9:77:04:8d:ad:54:
2d:be:c7:85:69:fd:f4:f8:72:f1:46:0d:42:f7:b8:
b4:a5:6f:60:99:77:ea:80:75:3d:0e:55:57:b5:cc:
66:c4:63:ed:b7:ce:0e:1b:26:6d:5d:c4:3a:f1:b6:
1c:9a:9a:55:08:38:e5:58:5e:f6:b6:67:4f:47:9e:
8b:7e:18:e8:67:e8:d7:cf:cd:b1:4e:54:0a:5d:4f:
75:79:fc:18:78:ce:43:2e:06:6f:d4:22:db:ff:89:
85:1f:38:da:4d:d4:8a:b4:a0:e5:71:f7:e0:b7:39:
c4:0f:fc:99:07:94:77:db:93:bf:78:7f:48:f8:9c:
4d:ad:89:f2:ac:c3:93:77:f4:db:d3:db:66:31:5b:
a1:d1:82:c4:ed:60:ed:5d:97:1d:a4:bd:92:7e:8d:
7b:01:55:44:74:fd:d3:b3:a6:21:b3:03:93:8a:e1:
bd:36:ae:62:69:81:0d:e5:b6:74:4a:d8:26:b4:bb:
51:58:d0:ac:e1:c5:3f:ce:29:da:b4:b3:f7:64:40:
24:4e:ca:d6:5d:13:6f:de:9c:b1:53:3d:03:2b:1c:
1f:35:42:f3:97:b1:62:05:c6:85:40:65:02:1d:73:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:6A:9C:9A:0E:D7:57:85:4B:91:12:5A:E0:3E:5D:45:E5:3D:E8
X509v3 Authority Key Identifier:
keyid:AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/Oj5qnJoO11eFS5ESWuA-XUXlPeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.176.0/20
94.198.224.0/21
94.198.240.0/21
IPv6:
2a04:a380::/29
Signature Algorithm: sha256WithRSAEncryption
cb:4f:9d:c0:ce:53:32:97:ee:96:e5:e9:78:85:0d:23:88:01:
78:cd:e1:32:bd:91:45:b8:0a:40:e0:2f:7b:6f:c5:a3:52:5a:
3d:52:8e:45:7f:1c:0d:cc:4a:ca:2a:35:13:52:0a:64:ea:59:
d4:ed:77:4a:36:c2:36:24:8b:b2:45:47:a8:1f:aa:c1:f7:00:
85:14:e5:30:f0:8f:a5:a0:c7:01:a9:23:39:51:19:a2:07:fe:
65:1a:de:e7:97:83:50:43:7f:2e:44:f3:65:b7:4f:59:26:7a:
3b:38:7f:bf:24:ff:d2:b4:ac:2c:02:79:e9:ca:3c:4e:d6:6a:
1c:6d:c6:a4:fb:25:26:d5:69:ab:bd:01:2a:d9:dd:e5:50:36:
39:1f:38:77:a5:2d:3a:4f:a2:e1:af:81:98:97:4c:c2:ac:c1:
43:8a:59:77:b4:2f:2a:65:06:f3:3b:41:c2:c2:89:e7:04:98:
73:f0:49:42:c7:2c:85:41:d6:b6:ab:e8:07:f9:90:0a:b5:b7:
1f:71:ab:79:ab:1b:b0:39:5a:04:e6:80:d5:1c:3c:68:34:18:
06:f5:8c:21:cb:12:e8:80:f5:6b:c6:07:cf:a2:2b:55:9e:60:
4e:08:d2:29:eb:39:85:03:dd:a9:ea:e9:bf:00:5c:dd:2a:28:
e6:d8:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:17 2023 by rpki-client on console-ams.rpki-client.org