Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/fTqlPaCUJasOclF16N2wCe23RAA.roa
File: fTqlPaCUJasOclF16N2wCe23RAA.roa (raw, json)
Hash identifier: rLZwv4giYvqqUXUmqmcFYuF80KqeXARge9WBEwYPd6E=
Subject key identifier: 7D:3A:A5:3D:A0:94:25:AB:0E:72:51:75:E8:DD:B0:09:ED:B7:44:00
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01821B62E64B3576C9A5FA88AFCF1530D339
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/fTqlPaCUJasOclF16N2wCe23RAA.roa
Signing time: Wed 20 Jul 2022 11:34:02 +0000
ROA not before: Wed 20 Jul 2022 11:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 194.107.162.0/23 maxlen: 24
194.107.160.0/24 maxlen: 24
194.107.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:62:e6:4b:35:76:c9:a5:fa:88:af:cf:15:30:d3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jul 20 11:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d3aa53da09425ab0e725175e8ddb009edb74400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:9e:ac:de:48:da:e9:fc:57:69:e1:12:e3:
40:84:46:bf:6c:c9:a0:93:c3:32:2f:84:7c:5a:68:
ac:bf:20:6c:12:2e:54:67:bd:a6:b8:50:0d:73:36:
7e:8c:1b:c4:75:73:cb:a1:7b:71:43:54:88:b4:a4:
33:07:3c:a2:df:40:8c:0c:2a:e3:b7:9f:71:d2:7f:
86:cb:86:12:8b:e1:f1:d0:79:60:60:26:88:ef:b7:
2b:2e:05:28:06:6c:0b:9e:09:ec:e3:41:07:36:d6:
61:6a:18:bd:48:2b:97:26:d5:56:ae:42:b6:88:a4:
8c:4a:bf:04:2c:fa:30:b5:d4:29:47:ed:d1:3a:91:
4a:f0:16:4e:63:38:d8:fb:28:ee:3b:3f:f8:57:ac:
bf:28:72:21:b6:70:98:48:e5:1c:0c:75:ec:ba:2b:
0a:3d:d1:f1:99:1b:39:48:3a:a7:e6:8c:0c:d1:6c:
4f:5e:e8:f8:dd:b2:d8:36:c0:9f:d0:1d:63:4e:22:
cf:d4:c0:cb:a2:6b:3f:25:a9:7f:79:2a:5f:ba:cc:
70:5a:9d:40:c0:fa:90:22:a3:2b:3e:0c:fb:8d:f2:
a1:ea:77:34:97:92:9c:fb:17:a8:3a:a5:81:96:68:
c3:7e:32:df:fc:74:4f:41:a1:f8:b7:d4:4a:2c:86:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:A5:3D:A0:94:25:AB:0E:72:51:75:E8:DD:B0:09:ED:B7:44:00
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/fTqlPaCUJasOclF16N2wCe23RAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:f5:42:be:08:36:c1:68:55:14:df:6f:03:9a:a1:d9:05:78:
97:d2:d3:18:04:d2:bd:97:80:af:c3:35:a5:3f:47:df:65:39:
8c:1d:00:37:2e:48:fc:e9:34:dd:5f:a2:97:47:1b:d3:79:d6:
80:b2:5d:32:5e:04:2e:3e:f0:87:70:ad:32:ff:55:52:f8:7d:
de:5c:8a:08:45:2b:c8:d2:4b:a8:6d:02:f4:8a:33:37:2c:b9:
cb:54:e8:dd:3d:1b:09:31:c7:d1:88:f6:a0:93:4c:59:45:2f:
c0:5a:be:8b:a8:ca:75:bf:63:c6:ac:9e:57:52:79:3e:02:4a:
e3:7a:cf:1f:91:d1:ab:12:2d:f9:b0:85:53:88:27:e9:5d:fc:
99:9c:00:58:4e:e1:67:6a:14:91:3f:51:d6:54:11:1d:9f:59:
62:b9:4e:83:d2:d2:33:df:59:31:ba:64:be:47:d7:e6:c5:be:
25:65:e8:1a:23:c5:22:62:6c:5a:6d:d3:4e:8b:c0:b7:d5:9d:
e7:78:a8:e1:ca:4c:df:f1:b7:9b:d8:c5:ff:74:60:97:93:cc:
e5:18:a2:7b:62:31:14:8a:11:dc:3f:91:67:76:a2:81:83:1d:
05:38:f8:a7:b1:6f:ca:c9:46:e0:f6:7b:73:9c:d0:53:ee:5c:
c9:70:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:50 2023 by rpki-client on console-ams.rpki-client.org