Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/wJJnCMFFwN0iivJl44y21y3B4c0.roa
File: wJJnCMFFwN0iivJl44y21y3B4c0.roa (raw, json)
Hash identifier: zXFKtJDkwip9h1RY60olht+PWvPhBJwL8LoZCkBC+uA=
Subject key identifier: C0:92:67:08:C1:45:C0:DD:22:8A:F2:65:E3:8C:B6:D7:2D:C1:E1:CD
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 0474C192
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/wJJnCMFFwN0iivJl44y21y3B4c0.roa
Signing time: Sat 01 Jan 2022 04:03:54 +0000
ROA not before: Sat 01 Jan 2022 04:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47875
IP address blocks: 94.124.35.0/24 maxlen: 24
94.124.38.0/24 maxlen: 24
94.124.36.0/22 maxlen: 24
94.124.36.0/24 maxlen: 24
94.124.32.0/22 maxlen: 22
94.124.32.0/24 maxlen: 24
94.124.37.0/24 maxlen: 24
94.124.32.0/21 maxlen: 21
94.124.33.0/24 maxlen: 24
94.124.34.0/24 maxlen: 24
94.124.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74760594 (0x474c192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Jan 1 04:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0926708c145c0dd228af265e38cb6d72dc1e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:8d:bf:36:67:80:e5:41:68:19:77:34:e3:
30:c8:4e:cd:f4:de:5e:fd:ca:d8:19:aa:46:4b:65:
8f:c9:fd:99:a5:15:e1:98:fe:19:48:50:e4:53:39:
01:08:e9:55:92:8d:23:c8:d9:48:a0:af:06:c6:4c:
d4:7e:01:a5:c2:77:0a:fe:06:b5:28:7e:06:85:d6:
78:8f:0b:8a:15:c7:a6:13:7e:5f:5a:84:32:bc:2e:
a4:6e:6b:ee:54:93:0e:7b:f7:c5:8f:20:2a:26:6d:
9a:5a:2b:09:3b:a9:6e:e1:2b:e7:0e:19:24:45:77:
24:6b:42:86:d5:85:6f:49:e8:8f:34:35:36:6e:82:
f4:76:e8:45:56:d3:6a:2d:db:07:0a:8e:c6:3d:b9:
d4:f9:07:7b:85:5e:f0:d5:27:48:84:2a:76:dc:88:
82:a9:26:1d:be:10:f0:27:69:14:f3:a8:d8:60:57:
9e:ae:29:16:70:8b:89:df:d8:43:d9:4c:99:79:e2:
a0:71:b4:90:8e:13:d8:74:fb:46:1a:cf:a0:02:69:
95:3f:83:ef:3e:8e:98:01:53:ef:17:e1:0c:4f:45:
29:1e:9c:a9:7b:a2:eb:79:b5:75:97:1a:78:ae:f0:
a1:59:66:c2:c8:04:bf:62:84:c2:3f:41:eb:57:53:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:92:67:08:C1:45:C0:DD:22:8A:F2:65:E3:8C:B6:D7:2D:C1:E1:CD
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/wJJnCMFFwN0iivJl44y21y3B4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.32.0/21
Signature Algorithm: sha256WithRSAEncryption
10:37:ae:45:a5:5f:95:93:2d:28:5d:39:f0:04:6e:c4:ce:c0:
5a:a6:d5:ea:bb:c2:99:e3:36:17:cb:5d:1b:23:e6:d1:4d:9c:
7f:9c:69:53:d8:b5:04:c0:47:16:df:ac:33:38:01:66:f3:6f:
47:df:cc:ff:8a:cb:1a:95:0a:01:fc:f4:7c:96:79:af:81:a6:
f0:28:99:d8:85:c7:d6:dc:3e:33:60:20:16:3f:c5:7c:f9:9d:
13:20:31:5c:60:3a:c7:4f:66:ed:6e:6d:bb:ce:7c:94:95:66:
37:fb:1b:4a:81:eb:e6:77:7b:c4:f4:1d:7f:53:5e:8e:bf:b8:
b3:36:56:dc:f7:6d:00:5d:a6:5b:46:c2:26:4b:bb:61:c0:d4:
ae:72:92:d6:9b:48:e6:f7:a6:2b:85:3e:ee:9f:6e:f4:e3:b9:
f8:2b:da:2f:68:d5:a4:7d:ac:69:72:ca:38:88:53:39:36:37:
86:38:1c:f2:01:63:80:f4:f5:06:96:01:83:75:32:1c:55:21:
8b:26:c9:10:b0:cd:52:84:05:d8:29:03:11:26:a9:11:88:f3:
2b:b6:05:e3:29:95:3b:84:92:43:d9:c6:f9:89:e1:f2:fa:d8:
41:ff:3f:aa:3a:ea:2c:56:c4:c5:6c:92:76:95:11:ef:a7:96:
eb:db:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-fra.rpki-client.org