Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/Dke7GLg5YfCJOp5e_S31RwYdFQQ.roa
File: Dke7GLg5YfCJOp5e_S31RwYdFQQ.roa (raw, json)
Hash identifier: jxD7e5/z9wj5AqpeyzDbX0ShfbltzXybpMJAOFyDwjs=
Subject key identifier: 0E:47:BB:18:B8:39:61:F0:89:3A:9E:5E:FD:2D:F5:47:06:1D:15:04
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 36D046FB
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/Dke7GLg5YfCJOp5e_S31RwYdFQQ.roa
Signing time: Sat 01 Jan 2022 08:54:16 +0000
ROA not before: Sat 01 Jan 2022 08:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205063
IP address blocks: 94.127.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919619323 (0x36d046fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Jan 1 08:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e47bb18b83961f0893a9e5efd2df547061d1504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:98:b8:cd:f6:a4:4f:8f:b1:c6:43:28:13:
01:72:99:82:8c:8c:58:3d:48:6e:d6:30:75:a0:c7:
11:b8:97:5e:28:99:8e:d2:20:60:a1:4c:7a:32:37:
0f:63:68:91:96:0b:8d:63:f2:5d:17:da:27:19:e6:
eb:b2:6c:bf:cb:03:42:61:b7:46:2e:36:dd:d9:be:
da:fd:b2:93:be:e8:f8:3d:f8:d9:b0:cd:e8:13:10:
c8:a1:df:aa:8b:ff:bb:c6:a1:b6:e2:ed:59:53:5d:
d2:d2:8e:0c:46:f6:c7:e1:c8:21:5b:32:53:a2:6d:
35:de:ac:cc:19:97:cd:13:6c:e5:77:49:2f:65:c9:
83:22:52:fd:82:74:1a:c2:f4:e7:99:f2:76:e4:5a:
b8:1b:bb:0a:6b:fc:45:db:fe:ce:00:83:87:5e:a5:
67:2b:33:4c:34:1d:c4:ab:3b:ec:e2:4a:1b:8e:38:
d4:29:b4:ac:56:39:7d:dc:ae:48:e0:0b:9b:16:df:
16:da:7f:20:b1:61:5a:91:84:bc:f2:7a:85:8c:95:
7f:1e:da:0d:d9:26:6e:d0:ac:93:f3:b7:de:b8:95:
5f:d9:a6:94:a2:59:ff:02:57:95:dc:00:a6:e7:1a:
91:6d:33:75:b7:ab:19:c4:f4:48:f4:6b:bf:e1:b0:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:47:BB:18:B8:39:61:F0:89:3A:9E:5E:FD:2D:F5:47:06:1D:15:04
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/Dke7GLg5YfCJOp5e_S31RwYdFQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.93.0/24
Signature Algorithm: sha256WithRSAEncryption
32:30:f4:2e:88:90:f5:a9:d4:c1:da:27:fa:88:13:ef:64:e4:
5a:55:ae:41:25:b4:44:e0:dc:a4:94:18:13:78:d7:af:7a:c8:
90:2a:e6:1c:6c:60:ec:a0:ca:f9:78:dc:40:30:e0:fc:12:a0:
70:63:5f:12:ef:33:92:65:d4:49:40:86:ba:1b:fa:ac:45:d5:
78:31:21:b4:21:23:4e:81:b6:0d:95:51:e4:86:ec:b5:45:66:
8f:76:45:6b:d7:5d:21:80:31:cf:6b:c2:01:25:20:5e:a1:32:
d1:d1:f6:fb:ce:d7:2e:49:b4:54:df:6d:dc:b4:c5:db:eb:67:
67:32:61:68:70:58:cb:c2:ad:17:6f:e7:cd:a9:a7:23:60:88:
d5:7b:ff:72:24:2e:24:2f:78:20:11:25:f3:97:d4:0b:e9:26:
62:c7:57:01:11:aa:66:d4:57:82:1e:a2:32:2b:86:02:28:bc:
9d:82:ce:77:f2:15:46:4d:9e:76:75:e9:09:e0:1f:61:87:7d:
9e:64:f2:d0:8e:ef:c2:42:8a:71:cb:4e:1b:3d:8c:0c:07:30:
c2:9a:fb:ab:46:a1:66:29:8c:b0:b3:7f:ea:36:63:a5:73:b8:
f8:99:8c:54:41:06:88:26:78:83:01:11:eb:d6:b9:f3:3c:1b:
55:dc:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:06 2023 by rpki-client on console-ams.rpki-client.org