Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/C4ndrwD-1DnCzY1iXXrjxIJPEcw.roa
File: C4ndrwD-1DnCzY1iXXrjxIJPEcw.roa (raw, json)
Hash identifier: xQXGUprOACwWArKPQhvQm84GJ+tewSCRPR1y22wQvo0=
Subject key identifier: 0B:89:DD:AF:00:FE:D4:39:C2:CD:8D:62:5D:7A:E3:C4:82:4F:11:CC
Certificate issuer: /CN=7b8254253dc0213fe58a7aff4b82463e47978063
Certificate serial: 1E35B6
Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/C4ndrwD-1DnCzY1iXXrjxIJPEcw.roa
Signing time: Sat 01 Jan 2022 00:56:07 +0000
ROA not before: Sat 01 Jan 2022 00:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 94.154.125.0/24 maxlen: 24
2a11:fd40:1000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979830 (0x1e35b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063
Validity
Not Before: Jan 1 00:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b89ddaf00fed439c2cd8d625d7ae3c4824f11cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:53:3e:e6:1e:09:72:6f:a5:60:c6:5d:91:
66:98:48:38:84:54:63:32:3a:66:87:ee:38:c1:6a:
4f:ae:39:db:9b:df:d3:56:ef:9d:95:3b:2e:00:dc:
73:18:20:ac:07:b1:05:0b:e9:f2:90:c3:0b:18:4b:
0c:6a:96:c8:0f:26:27:cc:83:8b:05:17:55:32:98:
f3:c1:96:e8:25:d0:e9:62:16:0d:7e:64:62:fa:f0:
5e:83:fd:ba:de:ca:b2:3b:59:a3:94:7b:f5:d6:03:
fb:f6:0b:ee:b0:25:6f:09:a7:ce:ec:e1:54:1a:94:
c5:0c:58:29:e6:24:55:ad:35:6e:0e:78:2f:d0:cf:
13:a9:98:f5:f3:8f:f5:9b:05:8d:4b:cf:fb:ba:77:
69:47:dd:1b:6e:d6:e3:bc:5a:8d:f9:d3:91:7f:58:
73:5e:da:ca:f2:00:0f:5f:96:56:d8:86:b2:2c:02:
e2:3d:6f:ba:26:1d:24:82:3a:8d:6a:e2:7e:d9:ad:
96:65:c1:f1:9c:fe:e1:ec:de:20:94:2d:18:47:99:
9c:6d:e9:00:ba:77:9a:c8:de:2d:96:49:15:bd:18:
e7:b9:e2:61:b9:33:39:15:15:8f:1c:59:ab:d7:54:
d3:76:7f:ba:38:0a:62:c4:1a:d5:50:15:de:63:c5:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:DD:AF:00:FE:D4:39:C2:CD:8D:62:5D:7A:E3:C4:82:4F:11:CC
X509v3 Authority Key Identifier:
keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/C4ndrwD-1DnCzY1iXXrjxIJPEcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.125.0/24
IPv6:
2a11:fd40:1000::/36
Signature Algorithm: sha256WithRSAEncryption
a7:bc:e6:f1:72:e1:6d:ab:84:7f:e6:1b:8d:67:68:63:13:65:
2a:f5:1f:2a:47:7f:c8:fe:a7:de:fc:19:79:0a:7f:6b:24:b3:
41:73:a1:f9:d6:01:f8:c9:c6:6b:46:38:bc:45:87:b6:4a:a0:
e6:c0:ee:08:bd:df:0e:39:79:7c:4b:51:bd:06:52:c9:fd:a8:
76:65:b1:a1:d4:c5:40:54:87:d4:46:da:d9:ed:64:19:f3:b7:
86:c8:3b:0a:99:c5:3a:37:8f:1d:1e:14:1f:06:5f:c6:37:b2:
1d:72:30:c7:cb:b9:99:58:98:52:32:42:fb:25:61:98:78:65:
f0:0d:66:0b:62:9d:f9:6d:90:b9:c0:20:06:ee:ed:e5:08:e7:
a4:6e:75:34:60:ac:94:a0:5a:6b:d2:b5:4d:10:a7:28:a2:8d:
75:e4:6b:44:f7:9a:62:ed:3c:fc:ad:ac:f4:ec:f5:03:8b:c5:
16:19:e4:3a:95:50:1e:58:44:29:87:e3:14:d4:eb:ee:59:80:
b3:3e:16:67:56:8b:90:45:91:ee:ce:da:a8:d2:39:f0:61:97:
ce:b2:7e:a3:20:84:2f:27:47:93:18:b3:51:c4:2e:43:fd:82:
35:9d:74:64:d6:3e:76:a7:9c:9f:73:63:b8:38:56:4e:0d:92:
94:ee:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:48 2024 by rpki-client on console-fra.rpki-client.org