Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/sl_qspDZUCcgpctXtEc2xSqiisI.roa
File: sl_qspDZUCcgpctXtEc2xSqiisI.roa (raw, json)
Hash identifier: mMpY9uWmJsGMzTTyU5BgE0crfFoZjOtccS5M7mAWz6s=
Subject key identifier: B2:5F:EA:B2:90:D9:50:27:20:A5:CB:57:B4:47:36:C5:2A:A2:8A:C2
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 0C920836
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/sl_qspDZUCcgpctXtEc2xSqiisI.roa
Signing time: Thu 12 May 2022 08:53:02 +0000
ROA not before: Thu 12 May 2022 08:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21050
IP address blocks: 94.187.192.0/21 maxlen: 24
94.187.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210896950 (0xc920836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: May 12 08:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b25feab290d9502720a5cb57b44736c52aa28ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:0c:c4:46:18:ae:b5:cc:fc:82:6e:e2:75:
af:a1:a5:f9:56:6a:e2:9d:a8:de:14:e2:5d:4b:c6:
19:27:0e:de:28:83:fc:4f:4a:07:4c:7d:c8:82:4b:
8b:96:41:47:35:50:39:8b:35:68:52:73:cd:3d:0c:
0b:4b:fa:e8:d1:c2:c8:d8:da:cf:a2:a8:fe:8f:60:
ff:9e:de:2e:73:21:a5:bf:3d:dd:a3:3b:4d:05:c4:
bc:e0:e4:35:45:cd:21:58:da:f2:42:0a:30:8b:85:
60:8a:36:7a:4a:4f:ae:c4:8f:28:35:f3:6f:73:04:
6f:cc:de:c1:46:29:1c:30:6b:5d:1b:2d:a6:22:e1:
4d:a9:c5:e4:bd:31:25:2c:9f:dd:4c:6d:17:2f:87:
33:e5:af:bd:70:fe:3c:91:f9:24:48:ca:66:3d:2e:
92:c9:34:7e:2b:a7:29:1e:1f:c3:38:a1:5b:b8:f3:
b9:84:37:02:88:a3:bb:89:8c:f6:a7:6f:58:d2:7d:
05:f2:66:e9:a4:27:7c:78:54:1f:d6:a4:59:88:51:
56:a0:67:8e:a7:2f:4d:5e:b3:82:ff:10:16:de:d5:
47:47:f7:eb:e4:15:7f:0f:c7:19:02:03:13:fe:10:
15:e5:ca:a6:5c:cf:2d:c7:94:f7:09:8f:91:e3:78:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:EA:B2:90:D9:50:27:20:A5:CB:57:B4:47:36:C5:2A:A2:8A:C2
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/sl_qspDZUCcgpctXtEc2xSqiisI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.187.192.0-94.187.203.255
Signature Algorithm: sha256WithRSAEncryption
89:93:7f:f8:3e:64:95:d6:c2:1e:85:c1:71:7b:d8:79:6f:06:
4f:6f:8d:0b:43:2b:1e:f7:72:1e:6e:41:97:ac:e3:b1:b0:17:
ec:65:e9:16:52:d8:70:9a:ce:7a:d3:14:d7:c9:a3:72:3c:b7:
7e:31:c5:a1:83:9b:87:96:7e:fa:29:6a:35:bb:8a:91:d3:2c:
90:3d:0a:2c:08:d4:71:e7:c3:83:d1:04:2c:cb:ea:bd:34:6b:
3e:37:42:38:e6:cd:93:c3:07:7c:09:ea:29:6c:0e:ed:65:1f:
fd:9a:21:a2:66:0c:c1:e4:c5:8c:3f:71:ba:e5:c3:7a:37:11:
f9:0b:ab:f2:1b:04:6f:82:09:44:26:dd:48:ef:47:8d:94:be:
08:40:9f:77:99:27:84:69:ed:12:d0:53:b1:e1:d2:eb:79:6a:
58:07:4a:12:81:2a:b7:9b:f8:7a:c3:a4:e8:98:5c:60:18:a8:
e2:1c:44:dc:0f:e4:8a:82:e7:4f:15:64:a0:96:41:37:b1:28:
68:d0:bf:b7:be:a3:7e:69:a5:84:32:fa:b3:48:01:46:fc:ae:
de:c3:89:c6:a2:25:da:55:53:aa:28:5c:8f:22:88:43:a2:62:
4c:5e:22:aa:2f:25:73:bf:e5:7e:1c:d4:42:b9:51:81:0a:24:
b3:2e:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:02 2023 by rpki-client on console-fra.rpki-client.org