Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hSkGSzlA-yHixf5N-YVa_Nc5tuY.roa
File: hSkGSzlA-yHixf5N-YVa_Nc5tuY.roa (raw, json)
Hash identifier: dNU6trfRFphRZtqiViCE02RJK1qT7ljDM4LEgvJ58gA=
Subject key identifier: 85:29:06:4B:39:40:FB:21:E2:C5:FE:4D:F9:85:5A:FC:D7:39:B6:E6
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10C872E2
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hSkGSzlA-yHixf5N-YVa_Nc5tuY.roa
Signing time: Sat 01 Jan 2022 13:02:24 +0000
ROA not before: Sat 01 Jan 2022 13:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204192
IP address blocks: 94.40.7.0/24 maxlen: 24
94.40.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281572066 (0x10c872e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8529064b3940fb21e2c5fe4df9855afcd739b6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:10:37:2b:80:36:ea:89:ca:51:b0:e3:08:
94:82:36:c9:bc:17:cc:24:a8:96:7d:e9:15:18:41:
9b:60:ee:f1:5d:12:68:08:1f:e8:a5:3a:3b:c3:9b:
25:f7:8d:ff:94:59:03:18:00:56:7a:c2:b3:91:db:
0b:44:d8:45:05:b7:d5:82:e5:89:28:2e:75:38:f4:
75:69:a6:c2:e3:b9:4e:a5:af:de:f4:a6:0c:eb:5f:
8b:d2:e3:46:66:70:37:b9:12:c6:4b:08:58:39:10:
ee:18:ab:fa:d9:6f:62:f7:bc:8e:08:b2:0a:e5:27:
a2:46:37:3c:09:3d:9f:03:a6:22:54:34:ee:b2:39:
20:62:66:1d:20:6b:f9:d7:31:42:10:cc:89:3c:5c:
13:fe:38:b2:1d:77:ce:3e:cc:1b:35:86:6c:e4:e0:
a4:27:95:46:1d:16:dc:55:55:47:cc:c7:08:aa:a6:
68:8e:6a:d8:c3:f6:14:1c:53:8f:07:f5:dc:41:fd:
ae:4a:48:d9:ca:45:4d:89:38:f3:4f:12:25:cf:db:
f9:17:c8:d3:32:9d:53:14:b7:84:fc:5d:a0:0d:f3:
ab:fb:65:27:70:bb:b7:ff:51:90:83:28:51:fd:18:
9e:60:92:df:51:ca:40:c8:1a:60:dd:32:dc:e4:1e:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:06:4B:39:40:FB:21:E2:C5:FE:4D:F9:85:5A:FC:D7:39:B6:E6
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/hSkGSzlA-yHixf5N-YVa_Nc5tuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.40.7.0-94.40.8.255
Signature Algorithm: sha256WithRSAEncryption
8f:26:82:d5:08:65:d9:91:8d:9d:db:f2:50:0c:d4:c4:12:d8:
db:8b:51:c2:86:e6:5f:c1:9b:32:c7:89:85:39:f7:93:59:38:
d8:1a:3e:bc:07:a4:2a:36:94:60:4e:85:6f:22:c3:b1:eb:80:
5f:3d:19:f2:09:fb:d8:17:d1:d9:ea:99:4f:45:fc:d9:74:c1:
b8:37:6d:34:d0:83:de:58:0d:de:82:d0:5a:4a:e5:b3:23:19:
ac:c0:d7:0b:6d:87:e0:6b:9e:e1:aa:5b:39:0d:fb:7c:6f:52:
c1:63:e6:b8:7f:f9:8c:a8:99:2a:89:2d:48:2b:45:3a:1b:22:
0f:32:3d:bb:2a:d4:47:48:67:0b:1c:a6:7e:f7:14:02:f8:58:
d3:5f:0f:0c:4c:e6:5d:1e:fe:8d:ac:36:30:13:32:6d:9d:6d:
6c:6f:fe:56:27:a0:57:e2:52:7b:0a:32:d0:eb:63:da:41:bb:
bd:7f:9f:f7:7e:26:9a:1f:4a:bd:8e:0b:f6:03:e1:a5:b6:b0:
70:d9:b4:6b:09:13:b1:ed:60:9f:40:13:81:a8:c9:6c:07:8a:
c9:db:ab:91:21:3d:d4:6a:b1:48:35:2e:8d:f9:05:cd:95:17:
31:93:1f:81:5e:31:a7:50:89:09:68:b1:11:18:f1:f4:1d:e2:
e1:23:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:15 2023 by rpki-client on console-fra.rpki-client.org