Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/O1l6PirovSloEZ81tx9d3XPc7wk.roa
File: O1l6PirovSloEZ81tx9d3XPc7wk.roa (raw, json)
Hash identifier: q76inZ/U2evEGzHD6Mj3KmXORc+otcl2OYLaggISnDg=
Subject key identifier: 3B:59:7A:3E:2A:E8:BD:29:68:11:9F:35:B7:1F:5D:DD:73:DC:EF:09
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 37919E19
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/O1l6PirovSloEZ81tx9d3XPc7wk.roa
Signing time: Sat 01 Jan 2022 06:01:51 +0000
ROA not before: Sat 01 Jan 2022 06:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56765
IP address blocks: 94.182.242.0/24 maxlen: 24
94.182.242.0/23 maxlen: 23
94.182.243.0/24 maxlen: 24
94.182.236.0/24 maxlen: 24
94.182.236.0/23 maxlen: 23
94.182.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932290073 (0x37919e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 06:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b597a3e2ae8bd2968119f35b71f5ddd73dcef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:e9:7c:7f:cb:d7:ed:07:cf:96:74:4c:ba:
aa:25:d9:ed:64:fd:9f:24:d9:4b:7a:2c:60:ff:6a:
d6:75:6d:03:4a:de:ba:14:ca:de:29:25:8e:45:6d:
36:91:17:e5:b8:82:a5:45:fe:74:9d:a5:f3:59:51:
19:2c:ca:0b:1d:ce:a9:30:a6:01:ed:30:6c:0e:4b:
b5:59:e0:d8:e9:f4:ec:7d:d4:d0:6a:c1:89:71:32:
a2:da:8b:1b:b3:2e:7a:14:50:51:7b:14:43:72:05:
e2:ce:ea:c4:2b:bf:29:6f:c2:3e:31:18:97:f8:ec:
d3:d1:ea:98:db:64:58:3b:a4:fd:75:ca:bb:0a:d2:
b9:47:16:47:0b:86:c4:97:4e:91:c0:3e:22:43:d0:
e7:f7:ce:00:4b:a9:81:b2:50:af:17:1b:4f:d8:e9:
51:d5:db:d6:cb:a8:bc:74:1e:3f:2b:0e:8a:a1:90:
b0:b2:aa:b9:4e:0e:22:71:01:5d:cd:6f:a9:c2:a8:
3a:ac:21:7e:e2:05:ae:1e:78:40:ad:75:6f:dc:d8:
e1:81:78:b1:99:d8:85:fe:0f:e2:ca:2e:8e:27:75:
35:26:3c:a9:d8:54:c3:c1:81:e9:75:36:5d:dd:dd:
2a:47:6f:f1:bf:76:7f:a8:8f:88:fb:d1:6b:36:0c:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:7A:3E:2A:E8:BD:29:68:11:9F:35:B7:1F:5D:DD:73:DC:EF:09
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/O1l6PirovSloEZ81tx9d3XPc7wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.236.0/23
94.182.242.0/23
Signature Algorithm: sha256WithRSAEncryption
71:8f:cf:74:ea:32:bb:a4:1d:11:08:d8:4d:4e:c5:06:a3:b9:
e3:bd:4f:57:ed:b7:9c:4a:52:f8:78:d8:dd:0f:4e:b9:8f:10:
6b:28:9c:2f:c3:f8:d3:22:3e:4b:5d:3b:52:a7:7b:e4:bc:96:
88:81:d3:d9:6c:cd:6d:a7:58:d6:04:a6:9d:e0:52:7b:df:79:
52:16:1d:69:9a:e1:f0:6d:8b:3d:6e:cc:f3:08:dd:9e:46:e3:
a2:f1:29:e3:56:ac:cb:ff:d4:70:2a:c0:fa:a7:6c:3a:b0:95:
64:1f:6c:95:61:2f:68:6a:a5:d5:ef:0c:c6:1f:85:82:94:36:
d3:b7:a8:1a:a4:95:99:01:2d:5b:16:ce:cc:a2:4e:9b:dd:f8:
ac:9c:3d:90:3d:e1:9e:ea:e1:23:4d:8a:e0:bd:4c:03:46:33:
01:37:ef:7c:1c:3e:86:9c:56:b4:da:33:74:af:e2:9b:80:09:
70:47:1d:1a:f0:9d:14:36:47:72:10:20:48:bd:2c:46:7b:83:
22:8c:26:71:87:90:ff:35:13:20:bf:75:35:44:8c:ba:be:96:
87:c6:62:8c:47:ba:68:0e:53:5e:2f:84:f2:73:cd:0b:4b:5a:
34:9f:95:2b:60:7e:dd:a4:a8:25:11:27:52:42:4e:d5:88:1e:
59:d5:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:51 2024 by rpki-client on console-fra.rpki-client.org