Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4BIV5uDj6czSW7GfMZUhfHbigz0.roa
File: 4BIV5uDj6czSW7GfMZUhfHbigz0.roa (raw, json)
Hash identifier: b1brn47ElgnRRrlZGLPq3OaKyNrShM5R7VG2qreDhWI=
Subject key identifier: E0:12:15:E6:E0:E3:E9:CC:D2:5B:B1:9F:31:95:21:7C:76:E2:83:3D
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E1A1E0A
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4BIV5uDj6czSW7GfMZUhfHbigz0.roa
Signing time: Sat 01 Jan 2022 03:02:53 +0000
ROA not before: Sat 01 Jan 2022 03:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26114
IP address blocks: 94.31.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236592650 (0xe1a1e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e01215e6e0e3e9ccd25bb19f3195217c76e2833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:05:1b:7a:9d:20:c2:d6:50:c5:53:00:74:
e7:9e:fb:96:bb:03:3e:ff:23:f4:ae:20:5d:6f:a8:
1f:ea:e5:14:f8:51:84:cf:ce:61:79:b2:a4:16:a5:
b5:49:da:17:88:c0:89:4d:3c:b5:ea:83:04:66:db:
8e:8f:b4:62:09:60:1d:19:2d:b7:3c:2d:0d:65:5f:
48:7d:c9:5d:67:ad:6c:b6:57:58:93:81:e0:0b:ca:
af:14:a4:7c:07:45:b8:dc:b6:b3:b5:cb:e4:1c:05:
2f:96:51:43:cc:60:54:f5:28:af:78:e2:c4:ee:b5:
ac:7c:6e:db:76:91:10:ac:22:06:40:d9:78:36:48:
a4:bf:15:4a:ed:97:09:be:a7:93:2e:99:c6:1f:fe:
7d:eb:ac:0e:b3:97:80:1b:75:97:8c:5f:12:f0:97:
95:6e:f6:50:9c:42:52:1c:f0:aa:16:c2:af:54:77:
1a:db:d8:5b:93:f7:e3:82:61:0c:46:3a:36:56:e1:
8f:7a:5a:6a:06:17:2b:4f:0a:d7:19:b6:fc:ae:b2:
90:f9:e4:eb:c6:68:15:cb:74:a0:91:1e:34:6d:e5:
a6:d7:58:4d:a8:01:cb:e8:e7:89:20:62:77:63:3a:
1d:e2:fe:46:98:b5:22:a5:b3:06:67:95:04:21:bd:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:15:E6:E0:E3:E9:CC:D2:5B:B1:9F:31:95:21:7C:76:E2:83:3D
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4BIV5uDj6czSW7GfMZUhfHbigz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.44.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b9:8f:2c:70:da:1d:4f:8d:08:2d:e4:f8:09:c1:33:cf:aa:
19:81:c6:38:15:53:c7:e1:b1:c5:71:20:21:0d:9d:85:77:96:
ed:94:cc:fb:0f:b0:b9:cf:3b:0f:46:bc:f0:5d:07:0a:2c:cd:
70:34:d3:aa:70:9e:6d:57:90:59:eb:b4:d3:c7:f0:07:ba:88:
a9:40:d5:19:81:0a:f2:3e:2e:89:d5:38:57:7e:df:8a:af:22:
23:00:93:b5:38:2c:45:6e:7c:7b:b5:28:8e:ae:3b:35:dc:1f:
bd:dd:c6:c1:57:84:27:49:7f:50:c9:f2:ab:74:2a:f2:17:d1:
06:30:43:39:6b:70:99:14:49:fc:ba:49:47:32:2d:a7:2e:ab:
e2:4c:ca:f0:31:9f:19:72:1d:95:da:c3:4b:5f:af:6d:ad:e7:
84:21:b5:11:e3:4f:ee:28:27:1c:18:1e:6a:95:57:fb:21:13:
e2:18:f7:c1:18:a4:40:8a:99:bf:bd:59:bf:1e:c5:d4:95:00:
b4:2a:9b:1f:46:c2:62:cb:d7:ee:ba:59:b8:0a:e5:2e:57:36:
06:cf:12:97:00:1b:ae:2f:36:39:f7:5c:25:d3:99:be:83:5b:
d1:ec:28:d3:be:9c:20:28:f4:1c:f9:da:77:a7:f3:17:8f:23:
e3:a3:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-fra.rpki-client.org