Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/fOdcEhwQWewEYJ2vzeMihjAKQIg.roa
File: fOdcEhwQWewEYJ2vzeMihjAKQIg.roa (raw, json)
Hash identifier: v7omImElerzUrPoCDVmT0aoaLCUTMRwdc1immUjx8zA=
Subject key identifier: 7C:E7:5C:12:1C:10:59:EC:04:60:9D:AF:CD:E3:22:86:30:0A:40:88
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 1AA9FAC6
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/fOdcEhwQWewEYJ2vzeMihjAKQIg.roa
Signing time: Sat 01 Jan 2022 06:52:04 +0000
ROA not before: Sat 01 Jan 2022 06:52:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202863
IP address blocks: 81.94.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447347398 (0x1aa9fac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jan 1 06:52:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ce75c121c1059ec04609dafcde32286300a4088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:3e:af:39:b2:da:ca:6b:df:20:f3:5e:dd:
10:bd:3b:d4:8c:bb:80:2d:e9:5d:6c:f6:ee:21:75:
60:66:16:f6:4b:81:74:76:e9:cd:ff:fc:4d:9c:83:
07:b8:d4:30:5a:6e:19:7e:a3:1f:93:ab:ac:a1:ef:
b7:7f:7f:b0:47:bb:a4:f7:af:e2:d3:93:8a:99:b0:
9c:42:86:fa:79:bb:1c:3d:ac:d0:43:82:b5:e7:1f:
d7:2b:14:c6:50:ea:88:0f:24:25:c3:7d:b2:c7:8a:
98:5b:ff:89:cb:e9:4c:dc:ed:81:91:d8:9e:9a:b1:
49:9a:3c:41:24:ea:e5:aa:da:f2:19:ab:ff:bc:a3:
b7:5c:8e:74:9a:84:5f:48:47:f8:87:65:d9:cc:e9:
68:df:e2:7d:62:b4:16:3e:46:b5:7c:1f:f8:07:67:
51:ba:a4:23:6d:dc:1f:02:4d:b9:49:2a:68:79:64:
29:92:c5:9b:75:52:b6:5e:cc:d7:3d:d9:e6:0d:fd:
5b:5d:d8:8f:3c:48:46:19:bc:ec:f3:97:18:40:5e:
f7:54:24:31:80:48:d2:3a:b1:3a:e1:db:06:8c:6c:
28:65:c1:37:48:e1:23:8c:06:ff:a6:0c:e1:16:c7:
32:dc:02:8e:47:d4:29:f5:cd:c4:f2:85:5b:04:84:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E7:5C:12:1C:10:59:EC:04:60:9D:AF:CD:E3:22:86:30:0A:40:88
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/fOdcEhwQWewEYJ2vzeMihjAKQIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.234.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3a:49:3c:96:d0:90:0b:70:63:e2:3a:7a:37:73:49:8a:e8:
e6:ce:57:0c:a5:c0:e4:2e:cb:f7:93:20:30:47:a1:3c:b5:55:
c4:60:cc:d6:bc:a9:e7:95:56:5c:66:59:8d:5d:08:8b:6c:1b:
40:2f:ff:05:23:ca:62:5d:c9:29:2e:91:e7:01:7a:58:73:69:
34:ff:74:f1:9a:9f:34:a9:19:7d:dc:b1:ed:81:fa:7f:83:3c:
90:41:e6:f5:8c:03:77:2d:bc:a5:c6:58:bc:88:eb:85:40:3d:
2a:66:fc:c3:8b:5c:55:a4:09:cc:e3:01:30:be:73:e7:8a:9c:
b1:3f:36:7d:1c:94:a5:ee:8c:6a:58:ad:14:04:27:ea:ca:c9:
b0:a5:43:2f:10:d7:65:a6:50:6a:f0:44:5d:f4:9e:63:7b:05:
5a:85:7a:4c:c4:fc:ac:08:7d:c0:92:a9:0d:c3:b1:b6:02:bf:
0d:21:e1:ea:5f:ce:cf:85:fd:5c:cd:b9:de:a7:0d:bc:46:34:
9c:01:fe:9f:11:1d:49:53:3a:d0:2c:2a:83:9f:98:6d:33:18:
9c:8c:ba:96:d8:83:18:44:4e:a8:f6:9f:07:eb:35:55:73:cf:
d8:01:05:a9:6d:a4:85:d0:49:a7:f0:5e:ba:3f:9d:4f:7f:47:
f2:e7:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:47 2023 by rpki-client on console-ams.rpki-client.org