Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/SyQc70lE8Zj_iEj6VU3ou37Upi4.roa
File: SyQc70lE8Zj_iEj6VU3ou37Upi4.roa (raw, json)
Hash identifier: 0ibsLROAg7x9DuCzzJHaJNIaIw+u4dgFVh70oZ7HTTw=
Subject key identifier: 4B:24:1C:EF:49:44:F1:98:FF:88:48:FA:55:4D:E8:BB:7E:D4:A6:2E
Certificate issuer: /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Certificate serial: 12B222B5
Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/SyQc70lE8Zj_iEj6VU3ou37Upi4.roa
Signing time: Sat 01 Jan 2022 12:00:59 +0000
ROA not before: Sat 01 Jan 2022 12:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210958
IP address blocks: 93.190.56.0/21 maxlen: 21
46.254.64.0/21 maxlen: 21
2a02:a28::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313664181 (0x12b222b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Validity
Not Before: Jan 1 12:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b241cef4944f198ff8848fa554de8bb7ed4a62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1c:a2:77:ea:9b:ef:bf:ae:aa:97:21:5b:c6:
e0:f9:df:a1:00:ef:fb:4f:94:f9:e2:8d:e2:00:b0:
9c:16:bb:e9:d6:b4:3f:0d:07:90:d6:f1:64:03:f2:
fa:6a:dd:43:8e:61:2a:24:02:06:05:c6:72:e2:c9:
ef:c8:6f:41:b9:01:ff:46:3b:14:14:ac:1f:d4:9d:
55:68:5a:cd:c8:a1:c3:d6:74:40:02:fc:ba:b4:a1:
a9:3c:b4:3b:dc:32:dc:36:94:9c:fb:16:01:63:54:
1e:d9:0d:23:28:d3:ab:37:06:3b:b8:df:6a:da:6f:
7f:72:0f:e3:ea:a5:2c:94:65:24:98:c6:07:01:5f:
83:98:88:73:5f:e0:90:dc:c1:13:9d:1f:a2:f9:a7:
58:52:73:e9:5b:ca:16:48:91:f3:50:42:6e:ad:47:
71:14:d7:35:e8:2a:c6:75:3e:48:05:80:33:e8:83:
3d:ca:ee:5b:6d:b9:5c:7a:0a:5a:f3:b6:99:b3:e2:
97:b9:3f:94:11:43:f5:7c:72:0d:38:92:cb:7e:0e:
8e:51:db:ff:8b:3d:4e:9d:e8:e8:22:0b:9d:b9:22:
86:9e:29:c3:b1:0d:11:e9:96:71:c5:e4:f5:c7:67:
24:83:b2:3a:77:8d:be:a1:22:8a:c4:f6:fa:74:85:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:1C:EF:49:44:F1:98:FF:88:48:FA:55:4D:E8:BB:7E:D4:A6:2E
X509v3 Authority Key Identifier:
keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/SyQc70lE8Zj_iEj6VU3ou37Upi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.64.0/21
93.190.56.0/21
IPv6:
2a02:a28::/32
Signature Algorithm: sha256WithRSAEncryption
03:e5:42:c6:d8:d2:d7:4e:2a:4e:d4:d8:c2:78:2c:62:1c:54:
97:80:56:3b:48:65:e5:2f:dd:ac:bd:76:a0:cb:3e:6f:de:24:
35:09:56:96:85:1c:5a:a7:9b:10:cc:78:84:a2:98:da:40:59:
47:b5:89:0e:1b:fd:27:52:0a:f5:4e:1d:4e:4a:a3:e8:7d:2e:
21:a4:20:33:98:a9:00:c5:d6:ad:00:0e:65:43:52:d3:67:23:
a2:3b:6e:0a:7b:7b:72:69:e4:63:a8:ec:74:65:b5:ba:82:1e:
e1:f8:7f:d8:71:1f:fc:6d:16:d3:68:6a:a1:35:35:f0:1b:8e:
0e:35:28:32:c2:32:1f:e4:dd:bb:7f:0b:b5:29:08:36:0b:d8:
82:ee:08:a2:f1:df:4d:9b:e7:c7:95:ab:c3:ee:82:11:de:36:
2c:9b:9b:d5:f9:f7:ad:7c:e9:d6:ca:d4:fd:db:3f:4e:4e:44:
c2:89:9e:5f:3c:c1:25:e6:4e:49:c8:ec:af:32:c8:55:94:df:
cb:5f:dd:8b:a3:19:78:43:0f:55:bd:27:4e:d1:1b:c3:94:18:
12:a6:d1:10:04:51:5f:84:61:21:61:dc:c3:04:aa:5a:59:6d:
d9:92:58:c6:ef:3d:5c:1d:90:03:f6:8e:a7:b2:e5:a4:4a:4b:
86:e1:3c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:16 2024 by rpki-client on console-ams.rpki-client.org