Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/JosSFwqlFyc7PBIHS2eXNMkiL-M.roa
File: JosSFwqlFyc7PBIHS2eXNMkiL-M.roa (raw, json)
Hash identifier: gO8EGR5ozh1XM6mPnrRB8XAUdNnVw2QUynrR6BFYFTw=
Subject key identifier: 26:8B:12:17:0A:A5:17:27:3B:3C:12:07:4B:67:97:34:C9:22:2F:E3
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 0831216B
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/JosSFwqlFyc7PBIHS2eXNMkiL-M.roa
Signing time: Sat 01 Jan 2022 11:55:55 +0000
ROA not before: Sat 01 Jan 2022 11:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208594
IP address blocks: 45.94.151.0/24 maxlen: 24
45.94.148.0/24 maxlen: 24
45.94.148.0/22 maxlen: 24
45.94.149.0/24 maxlen: 24
45.94.150.0/24 maxlen: 24
2a0e:2ec0::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137437547 (0x831216b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Jan 1 11:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=268b12170aa517273b3c12074b679734c9222fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:24:c5:c1:8b:73:2b:7c:e6:0e:25:43:18:
fc:6f:48:57:48:4b:c0:a2:76:7c:6d:66:28:25:ad:
02:b8:f2:e2:e2:f8:a2:20:02:84:fd:00:57:af:87:
e7:1f:d1:22:7f:9a:f8:50:d2:ef:9f:ea:86:92:42:
56:b2:ea:ad:09:d9:79:05:89:c7:cc:14:51:e0:55:
ed:bd:70:c5:7e:50:0e:34:72:0b:7c:9a:4d:6d:43:
3d:0d:fe:fe:d3:6b:bd:dc:ca:65:2e:cf:7a:bc:8e:
16:df:d1:f5:53:2f:f4:3a:37:a7:bd:1c:b4:95:9c:
78:b6:0e:4c:5d:35:55:5e:be:47:19:9f:40:18:fb:
98:2f:e2:70:ee:2a:dc:8a:8f:44:63:9f:e9:84:db:
1f:91:f0:28:37:5a:18:b6:b3:66:85:57:9e:25:1c:
c9:45:cc:38:19:9d:76:87:f2:84:5c:86:1b:50:73:
94:3f:14:9d:64:23:d0:1d:70:44:0b:a6:a5:f8:1e:
20:e2:1a:4a:14:13:bb:83:a3:35:1d:09:d7:bd:fc:
d0:5f:62:67:42:53:cb:2f:fd:60:11:aa:fc:39:f1:
9a:76:6b:b0:0a:06:f8:5c:3b:9b:9a:c2:d8:ee:92:
1f:96:69:77:f8:b9:96:bf:15:75:c2:0f:62:e5:70:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:12:17:0A:A5:17:27:3B:3C:12:07:4B:67:97:34:C9:22:2F:E3
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/JosSFwqlFyc7PBIHS2eXNMkiL-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.148.0/22
IPv6:
2a0e:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
36:db:b1:a9:2f:47:12:7c:72:f5:6c:b2:f7:ad:a9:49:b5:e0:
5c:e9:8f:69:35:34:23:86:3e:c9:28:1d:d3:33:ff:61:45:02:
02:01:11:43:d5:99:64:06:7f:10:5b:04:7a:8d:87:0c:dd:4c:
4d:0c:09:49:25:d3:7b:a7:14:aa:c4:46:86:4d:ba:33:df:9d:
c4:24:ed:41:24:e1:70:0f:fc:73:7f:19:31:c8:32:3f:8d:ad:
61:f1:c8:dc:96:8a:a7:a9:f1:10:ab:74:61:70:dc:5e:b6:d4:
82:9b:a5:60:2e:a3:8e:5c:ce:3b:aa:e3:da:ad:60:28:34:8c:
fa:9c:cd:c5:0a:cd:63:b5:7d:e3:a0:e5:b9:0a:45:69:ba:ec:
2c:76:d1:9d:64:b5:67:32:fd:e2:c7:56:d4:b1:6a:94:27:9d:
3d:1f:d2:27:94:a5:cb:3e:61:95:a0:99:84:b3:a0:a3:cd:07:
30:90:7e:04:cc:79:ff:7b:0c:92:fa:73:ad:72:9c:f1:d6:24:
aa:ec:06:10:fd:b8:c7:de:34:36:21:53:ff:f4:36:31:5f:53:
93:ac:f3:f5:0b:dc:3d:a8:40:8b:56:1d:ce:1a:1f:cd:31:c5:
96:61:44:63:dc:2e:9c:f8:6e:7d:eb:42:ee:06:47:3f:90:07:
b4:0f:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:30 2023 by rpki-client on console-ams.rpki-client.org