Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/ffCnkCdV-pyPjlNQO32LnE26Cek.roa
File: ffCnkCdV-pyPjlNQO32LnE26Cek.roa (raw, json)
Hash identifier: pdWlEEizrYQaEW09GDo+f8xfMByxc4/wsq3mja54Rl4=
Subject key identifier: 7D:F0:A7:90:27:55:FA:9C:8F:8E:53:50:3B:7D:8B:9C:4D:BA:09:E9
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 35AFFE7B
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/ffCnkCdV-pyPjlNQO32LnE26Cek.roa
Signing time: Sat 01 Jan 2022 04:58:11 +0000
ROA not before: Sat 01 Jan 2022 04:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30848
IP address blocks: 94.185.124.0/23 maxlen: 23
94.185.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900726395 (0x35affe7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jan 1 04:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7df0a7902755fa9c8f8e53503b7d8b9c4dba09e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:85:9c:fd:fc:68:bc:43:c5:8f:74:85:13:
39:f6:04:dd:aa:06:f0:26:6b:1e:ef:1a:e2:7a:3d:
3c:c8:a0:ab:81:1a:6c:e9:5c:74:61:97:b9:5d:fc:
e6:5b:13:82:e2:14:2b:0f:21:cf:68:a4:55:79:1a:
ad:8b:a1:6c:0e:22:0d:02:f2:9b:6e:d7:17:b3:d9:
f5:36:c2:1b:14:39:3b:a6:ab:71:7e:02:98:e4:16:
19:01:8b:a4:e7:fa:86:a8:f4:b7:3f:3c:ef:d0:fe:
d8:93:0c:ba:bb:b1:dd:eb:7b:a4:47:c7:3f:23:a1:
7f:38:db:b4:2d:42:6e:6d:db:a8:57:10:97:01:9a:
97:d7:f3:41:fe:45:3c:1c:26:6d:09:e1:33:14:d8:
08:87:76:d9:0b:29:b7:4a:28:f5:fb:42:bc:10:bb:
df:70:6d:4b:3b:e5:c8:49:c7:65:5a:af:21:7b:69:
06:7c:e7:25:2d:aa:eb:c4:b3:62:08:78:01:ba:48:
d4:f2:00:99:68:e3:72:94:d2:25:cc:1d:ca:bd:cf:
4b:8d:72:dc:c8:6c:ad:33:02:2d:9b:c3:af:83:e6:
c9:39:3e:ba:e7:00:f3:a8:06:2e:59:85:e9:48:37:
17:f7:a1:fc:0f:9f:c7:c5:c4:1d:8f:65:ec:a5:b7:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F0:A7:90:27:55:FA:9C:8F:8E:53:50:3B:7D:8B:9C:4D:BA:09:E9
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/ffCnkCdV-pyPjlNQO32LnE26Cek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:3d:4c:0c:1e:ea:88:51:d3:a1:a3:a2:0b:af:b9:f8:12:43:
1d:b4:f7:19:b9:7a:1e:0c:fa:8e:2f:ee:cb:80:9c:41:65:54:
bb:e6:bb:cb:49:b8:73:23:4b:03:55:59:86:67:2c:60:5f:75:
8d:43:0b:53:a3:ff:47:18:fa:db:22:7d:73:d8:2d:57:6f:39:
5a:1e:d7:a6:1f:98:6d:7e:fe:04:13:f8:28:86:34:ab:4c:60:
59:da:1f:fb:5c:44:63:a2:ec:d6:6d:df:17:46:a2:ec:3f:67:
bd:df:73:08:df:f1:5f:c8:ae:eb:53:2b:a3:36:5a:51:cf:73:
31:d9:8e:34:7b:ba:a8:5b:65:c3:6e:8a:ad:ce:03:d0:01:f9:
53:1d:cd:63:3c:53:70:c0:ed:fe:7d:42:01:c9:d6:61:cc:24:
bc:a7:14:0d:24:c4:71:8b:05:0e:cc:bc:d2:14:b1:78:69:48:
9a:57:fe:dd:b0:e5:0a:a2:e3:10:be:15:40:e5:82:1b:46:a1:
ae:e2:c8:fa:60:4b:6d:81:a0:a3:de:3e:bf:ba:46:4e:c1:26:
82:85:10:8e:e7:f5:b2:73:6f:df:f9:2b:c5:54:87:0c:5f:fd:
bf:a4:ed:99:88:ea:ad:e7:00:dd:99:a5:fd:da:ba:16:3c:57:
ba:b0:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:48 2023 by rpki-client on console-ams.rpki-client.org