Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/1-SCQ--_gtbb5bepQrS_WrCxQRuA.roa
File: 1-SCQ--_gtbb5bepQrS_WrCxQRuA.roa (raw, json)
Hash identifier: 0NgiuhQ60PsbO17aHYyYa8BLusVVddDwkBvh0ZugrCk=
Subject key identifier: F9:20:90:FB:EF:E0:B5:B6:F9:6D:EA:50:AD:2F:D6:AC:2C:50:46:E0
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 0E54F9B2
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/1-SCQ--_gtbb5bepQrS_WrCxQRuA.roa
Signing time: Sat 16 Apr 2022 13:54:55 +0000
ROA not before: Sat 16 Apr 2022 13:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56791
IP address blocks: 94.243.224.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240449970 (0xe54f9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Apr 16 13:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f92090fbefe0b5b6f96dea50ad2fd6ac2c5046e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:bc:da:d2:58:bf:ad:53:cd:ff:6a:14:42:
01:63:a7:8b:96:e7:e2:41:40:c3:2d:6a:24:6c:a5:
7f:9c:fa:f5:7d:4c:be:b9:22:eb:04:1f:39:4e:90:
31:40:90:98:94:5d:cc:ed:35:9a:91:ee:5f:76:f1:
22:a4:53:3d:5d:ac:27:98:cb:0e:56:be:96:7b:ce:
0b:84:f2:20:29:08:09:aa:db:9e:c9:86:a9:4b:a1:
8e:6f:eb:24:c2:67:1c:df:33:0b:4d:38:48:ef:68:
65:7e:52:97:a5:1e:6e:8a:98:10:52:4c:30:5f:b8:
a3:de:68:79:23:8f:86:99:18:76:ed:76:ae:15:fd:
b6:4e:7d:0d:24:00:e6:b2:ca:ff:d2:bf:61:36:17:
08:a9:5c:ae:3f:a0:9d:24:73:38:6e:ba:b0:c6:94:
fe:94:a3:28:bb:e2:62:c0:32:96:fe:98:1a:03:cc:
79:44:6a:67:13:3f:ac:09:a2:b1:0e:9e:84:f5:2f:
7e:ff:a9:33:61:fc:8c:16:a8:a9:20:f4:80:cb:9b:
0b:da:5d:7e:19:85:23:f0:04:25:e1:6f:42:00:6c:
5c:80:a6:02:8c:9b:d8:d5:1d:ff:37:9a:80:22:38:
a2:87:37:e8:af:3f:43:9b:bc:70:ba:7a:e5:d3:85:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:90:FB:EF:E0:B5:B6:F9:6D:EA:50:AD:2F:D6:AC:2C:50:46:E0
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/1-SCQ--_gtbb5bepQrS_WrCxQRuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.224.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:33:10:53:73:9d:82:d0:bc:db:ce:1c:5b:2e:d0:76:e1:c6:
4e:40:ad:39:9b:d9:0f:ff:92:27:6b:9f:3d:46:89:c5:d7:73:
28:11:0b:52:96:78:00:ac:cb:db:01:fc:4c:0e:14:21:5b:6d:
b3:75:05:24:01:40:c6:b4:1d:01:57:53:04:4b:c1:8e:ed:e7:
7f:33:d5:a7:b2:2f:25:be:4f:86:b8:88:cb:91:d0:3c:68:83:
e3:03:b7:0a:0e:17:83:c1:e8:ae:24:9d:0d:58:b7:9c:a0:fd:
0c:9a:9d:08:ce:3c:87:a4:40:05:20:22:fb:74:06:25:00:9a:
2f:b1:0a:82:f8:b3:02:c4:6b:cd:99:3c:d9:8f:4a:9f:f3:8e:
08:cd:c1:72:44:8d:9c:c7:40:47:ef:42:21:34:48:61:12:25:
97:b0:c5:10:8b:c1:e8:c2:54:b8:87:6e:69:fa:b9:37:2f:b8:
61:57:fd:65:4c:63:f8:37:91:db:88:c3:f0:c5:5a:ee:c3:d5:
be:a0:8a:f9:24:60:ea:ae:bd:84:d3:01:6c:b1:68:98:f1:b9:
dd:60:d0:7e:1a:9c:8a:fe:f6:e3:2c:2c:30:6e:4d:5e:f6:1b:
b3:62:e7:df:f4:b3:9f:a2:96:dc:ff:e5:20:7c:de:28:52:cc:
b5:5e:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:53 2025 by rpki-client