Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/edfl2fxJFhyDp1WdV8Xe2GNI25s.roa
File: edfl2fxJFhyDp1WdV8Xe2GNI25s.roa (raw, json)
Hash identifier: XfPUJquF47rfeKiWdkLx8qMQSoxi1XTLlgaeuXcFQD8=
Subject key identifier: 79:D7:E5:D9:FC:49:16:1C:83:A7:55:9D:57:C5:DE:D8:63:48:DB:9B
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 393E5929
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/edfl2fxJFhyDp1WdV8Xe2GNI25s.roa
Signing time: Sat 01 Jan 2022 08:05:29 +0000
ROA not before: Sat 01 Jan 2022 08:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29068
IP address blocks: 94.184.160.0/20 maxlen: 21
94.184.171.0/24 maxlen: 24
94.184.172.0/22 maxlen: 22
94.184.170.0/24 maxlen: 24
94.184.168.0/23 maxlen: 23
94.184.168.0/22 maxlen: 22
194.225.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960387369 (0x393e5929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 1 08:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79d7e5d9fc49161c83a7559d57c5ded86348db9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:36:e8:45:b8:a2:0f:48:84:b1:b6:04:bf:
1f:ee:41:59:72:ca:5a:eb:40:c1:28:5a:17:58:c2:
f8:a9:ec:33:a7:bc:9f:2b:22:54:97:c7:25:fc:d9:
21:70:c5:e1:f4:49:57:c8:ac:b3:6d:e7:e0:47:16:
ff:36:5a:54:b7:b1:c6:db:2b:5c:ee:da:be:2b:af:
9d:41:e0:ff:ab:f4:4f:64:04:68:89:98:29:25:b0:
72:b1:e2:b7:29:69:68:aa:60:1f:b9:95:ea:46:86:
88:bc:ab:b1:e6:87:11:30:8f:06:f3:46:ac:05:b9:
fd:07:f5:fe:5d:77:5d:75:2d:51:58:4c:53:ec:c7:
f6:2d:9c:73:05:eb:47:9e:71:60:a4:db:53:3e:7e:
29:56:51:03:51:86:b8:04:21:bd:d7:6b:b5:ba:ea:
ff:a9:bb:c3:dd:c9:5e:11:5d:15:17:12:2b:66:a3:
5f:09:3b:db:1d:b6:a6:16:d1:0c:87:69:88:51:a3:
c5:76:3e:b3:b9:63:f1:8c:2c:b4:62:a4:6f:2b:35:
8a:70:85:7d:5b:6b:c9:04:78:70:be:e5:68:36:ab:
10:15:bd:bc:4d:ba:5b:33:b9:b0:28:1f:b5:b2:c5:
85:4c:ee:85:09:b5:87:e4:fe:db:ae:b3:a7:7d:b2:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D7:E5:D9:FC:49:16:1C:83:A7:55:9D:57:C5:DE:D8:63:48:DB:9B
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/edfl2fxJFhyDp1WdV8Xe2GNI25s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.160.0/20
194.225.0.0/20
Signature Algorithm: sha256WithRSAEncryption
58:8c:6a:d2:79:24:26:75:87:45:42:75:b8:ea:84:1d:02:cc:
01:6d:29:3f:71:65:5b:d7:80:7d:39:bb:5c:0d:5f:02:9b:c0:
89:c5:a1:e9:d2:41:00:6f:76:54:f2:13:b5:96:26:dc:30:98:
9c:f6:45:b1:90:58:90:48:3e:4f:87:18:d5:5c:c1:f7:59:2b:
50:bc:c8:f4:73:8b:1a:be:b2:7e:06:b0:70:59:57:49:d0:e0:
ec:ab:48:da:67:91:47:4a:af:5d:26:54:81:d9:7a:d1:32:f2:
4e:21:05:25:5c:9a:9f:67:db:3a:01:57:41:48:81:1a:bd:79:
59:26:66:5b:4f:c2:c4:b4:41:da:27:47:94:38:72:37:31:d3:
3f:bd:39:c2:9b:a2:f8:7f:d0:c0:af:35:db:7b:32:4b:71:8d:
44:1d:1c:75:00:fc:a7:40:10:ed:00:a2:1c:d7:b3:86:f6:14:
c7:b1:ce:67:d8:1d:53:26:6d:8d:b4:79:87:c2:19:fa:e3:5f:
4c:dd:9d:14:df:82:45:f1:fa:2b:5a:c9:76:4a:9d:37:02:ec:
48:fb:d5:53:a7:a8:72:eb:32:5c:6c:cf:38:e5:2c:72:16:cd:
dd:2c:f6:20:2b:cc:e8:07:db:1c:2a:8c:2c:11:89:00:9b:3a:
92:3c:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org