Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/O41Dqorovh4TL0FFkWWowcXeZME.roa
File: O41Dqorovh4TL0FFkWWowcXeZME.roa (raw, json)
Hash identifier: 6/2VAkX9Rn0s30hgO5/7v0Y0jrSsGUAxZGfK2iphULc=
Subject key identifier: 3B:8D:43:AA:8A:E8:BE:1E:13:2F:41:45:91:65:A8:C1:C5:DE:64:C1
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 074081C5
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/O41Dqorovh4TL0FFkWWowcXeZME.roa
Signing time: Sat 01 Jan 2022 10:02:06 +0000
ROA not before: Sat 01 Jan 2022 10:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6798
IP address blocks: 194.177.128.0/19 maxlen: 19
94.136.96.0/20 maxlen: 20
2a00:12e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121668037 (0x74081c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Jan 1 10:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b8d43aa8ae8be1e132f41459165a8c1c5de64c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:f6:7e:95:26:a9:a6:5c:b9:86:92:8c:3b:
97:d3:25:5c:be:01:55:0e:9a:f2:d8:59:fe:4f:55:
7b:93:f2:1f:83:20:5f:eb:83:4d:40:de:5b:5c:ef:
c9:6b:b7:93:88:c9:de:60:c7:9e:e8:cd:f1:20:e9:
3d:e8:45:05:22:bc:6a:10:b9:58:c0:02:dd:f0:8f:
0f:a4:50:bc:0a:4d:bb:64:96:e2:98:93:5b:42:d1:
bd:03:85:39:19:86:83:09:da:2c:1a:e4:b3:85:e6:
78:7e:3d:e3:47:7a:dd:a2:71:e8:9f:7b:2c:f7:63:
12:5e:4c:57:49:32:ea:d8:b0:e4:ef:ce:b6:72:5e:
8a:7c:df:1d:5c:73:95:de:24:80:49:ab:fe:b8:6d:
3d:fc:3b:51:49:95:7f:7d:aa:85:dd:de:43:db:4e:
65:16:e6:d5:bb:d0:d2:d1:7f:64:4c:01:c7:e3:38:
a7:36:0e:16:52:f1:32:84:88:5f:d0:04:07:6a:36:
2e:60:0c:43:95:e6:e1:49:05:45:da:83:7c:74:7f:
a0:07:a2:d4:91:00:dc:95:5a:71:82:ec:20:3f:41:
3b:5f:4e:94:d6:ef:eb:95:e7:0d:49:86:7c:19:74:
3d:b3:1f:25:fd:7b:ac:c5:3b:99:c2:8b:93:7c:e0:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:43:AA:8A:E8:BE:1E:13:2F:41:45:91:65:A8:C1:C5:DE:64:C1
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/O41Dqorovh4TL0FFkWWowcXeZME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.96.0/20
194.177.128.0/19
IPv6:
2a00:12e0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:84:a0:f1:05:e9:72:73:d4:73:cb:bd:83:af:32:97:3c:98:
cb:5b:93:e1:e7:8b:b6:e4:e9:c1:e0:11:ae:df:47:cd:88:cd:
e6:8d:9c:89:85:1e:b8:1f:df:ce:e7:d1:0e:24:14:c3:00:6b:
c6:af:e2:b9:48:64:c3:3a:52:30:fc:19:99:b9:2a:3a:99:74:
e6:54:6e:fe:48:ed:e0:38:c7:c4:56:7c:bc:e1:9a:0a:39:9b:
bb:93:54:05:ee:1b:4e:9c:4c:42:ff:98:9e:2b:4e:b7:99:19:
5a:b9:9b:34:43:78:93:9d:d6:e7:e8:2b:e3:d9:24:db:df:4c:
7c:8b:24:15:4e:20:16:80:89:b6:79:8e:3e:12:2a:22:c6:2d:
2a:25:b0:d2:f4:c5:d7:95:af:13:a9:14:3f:5e:13:f2:e9:2c:
41:2e:52:df:93:7e:07:5b:9a:4a:9c:07:d6:8f:f7:49:5e:f0:
50:c0:00:f7:c0:05:4d:86:75:dc:37:9e:1c:35:ba:aa:45:f6:
aa:a8:1f:32:b7:ed:ab:5f:60:f1:79:bc:71:dd:29:84:c7:b4:
70:f1:0b:3e:c7:0c:2d:ef:ea:eb:35:35:ce:ed:0b:b2:90:b9:
f7:68:81:29:d9:4d:83:7f:f6:57:54:87:3d:df:03:ba:2c:26:
be:b4:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:16 2024 by rpki-client on console-ams.rpki-client.org