Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/8oJXKLN8kyP4pcXjS9pcj5V7QLg.roa
File: 8oJXKLN8kyP4pcXjS9pcj5V7QLg.roa (raw, json)
Hash identifier: N9tGQsPqbCJMGVR4qGqvVW4/aGLVam8qaBlWKZlr0cg=
Subject key identifier: F2:82:57:28:B3:7C:93:23:F8:A5:C5:E3:4B:DA:5C:8F:95:7B:40:B8
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 079052BC
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/8oJXKLN8kyP4pcXjS9pcj5V7QLg.roa
Signing time: Sat 01 Jan 2022 08:58:22 +0000
ROA not before: Sat 01 Jan 2022 08:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49099
IP address blocks: 109.94.166.0/24 maxlen: 24
109.94.167.0/24 maxlen: 24
109.94.166.0/23 maxlen: 23
193.34.246.0/24 maxlen: 24
193.34.244.0/23 maxlen: 23
193.34.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126898876 (0x79052bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Jan 1 08:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2825728b37c9323f8a5c5e34bda5c8f957b40b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:d4:29:a7:de:ea:ea:7e:10:cc:cb:17:43:
6d:ab:1c:d0:5e:87:b3:85:96:7e:6f:21:95:14:9c:
29:4f:ad:f0:f1:a0:a5:15:41:c0:21:fb:08:38:8a:
29:b4:13:cb:86:cb:db:65:13:8c:4a:97:80:ac:8b:
60:c9:eb:61:71:ef:3b:07:1c:4a:4b:85:1a:fd:c3:
4c:70:cb:29:15:50:1d:8c:f1:46:20:64:13:c5:74:
fd:72:10:7d:bd:6a:14:1e:30:10:9b:3e:c9:3f:51:
c9:92:a8:52:cf:73:e5:85:24:b5:ba:87:ea:40:64:
c5:3a:b5:f9:9b:93:39:43:35:2b:69:09:59:1a:dc:
99:7f:60:e0:30:d0:10:93:69:23:55:fe:44:cd:10:
49:f4:aa:81:4a:5c:a8:20:d9:2b:64:dc:4a:e8:dd:
ad:0c:d7:52:53:b5:c8:59:f8:b8:8d:b9:ce:95:10:
72:8e:93:06:21:e6:ce:52:99:f3:82:c9:e0:a8:29:
81:0b:3a:4f:a0:6a:19:d0:8b:f4:39:2a:05:e7:49:
22:97:a6:e0:2f:92:e9:59:3e:77:85:96:c6:cd:21:
4b:2a:2b:e5:b4:f3:f5:23:1d:5a:b3:7d:04:9b:7b:
da:db:b2:03:03:d4:cc:ee:dc:7c:48:20:3f:07:e7:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:57:28:B3:7C:93:23:F8:A5:C5:E3:4B:DA:5C:8F:95:7B:40:B8
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/8oJXKLN8kyP4pcXjS9pcj5V7QLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.166.0/23
193.34.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:05:5c:95:26:65:45:01:57:29:30:58:00:4d:9a:f3:6e:54:
7e:55:c8:d8:80:e5:c6:61:64:31:0a:30:16:d2:ff:5c:4b:79:
f9:b0:3f:31:ea:ae:df:21:3f:63:09:8b:3b:02:dc:1a:50:8b:
32:0f:87:c1:f3:41:67:b4:23:e5:70:19:44:25:77:06:a0:93:
e3:93:51:f4:56:1a:32:26:b4:bc:78:d1:0e:42:74:25:f7:43:
ca:50:cd:1c:4f:03:3e:c2:c7:07:6e:3a:7e:5c:27:22:f9:2b:
99:86:30:57:09:a2:0b:aa:1b:06:84:9e:35:4e:5e:da:2e:7d:
f6:c5:25:2a:62:eb:9a:7f:4e:44:d2:31:c1:32:8d:09:be:78:
85:28:6c:c0:4c:82:62:fd:a5:9e:6b:38:35:1b:4e:58:3f:d0:
53:45:9b:f3:64:28:4e:18:b7:59:04:65:97:31:a5:a8:c4:ed:
5f:76:a1:ed:4a:2e:c6:d0:8a:be:9a:01:d2:80:34:d2:76:41:
43:08:0f:ca:76:a8:b8:f7:29:d9:a8:2e:55:34:c2:df:d8:3d:
92:1a:9d:10:5e:9e:1d:53:89:ad:31:09:cf:7e:44:10:d8:a1:
fe:cb:91:3e:f9:96:8a:06:49:2a:8b:ea:54:de:9c:f8:5c:79:
18:7b:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:18 2024 by rpki-client on console-ams.rpki-client.org