Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/d4nW-abF7OONFskdXuJf_XEeZ-8.roa
File: d4nW-abF7OONFskdXuJf_XEeZ-8.roa (raw, json)
Hash identifier: ApvH5b/PAAs+NCMpOifdtkvBYf7CyjepRjIa9u1jJgs=
Subject key identifier: 77:89:D6:F9:A6:C5:EC:E3:8D:16:C9:1D:5E:E2:5F:FD:71:1E:67:EF
Certificate issuer: /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial: 01841975E057AEC2B12D62CF7B11B2676B85
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/d4nW-abF7OONFskdXuJf_XEeZ-8.roa
Signing time: Thu 27 Oct 2022 12:41:06 +0000
ROA not before: Thu 27 Oct 2022 12:41:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 185.94.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:75:e0:57:ae:c2:b1:2d:62:cf:7b:11:b2:67:6b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Validity
Not Before: Oct 27 12:41:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7789d6f9a6c5ece38d16c91d5ee25ffd711e67ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:c5:e7:7d:c4:f8:58:fd:df:41:f4:3b:0a:
de:2b:de:61:d6:2c:80:59:cf:da:bc:46:51:59:72:
78:67:86:0f:10:ee:45:2d:87:8c:ba:b7:38:f3:a4:
fd:ca:a7:8b:90:5e:80:7a:c8:02:ce:c0:06:4c:37:
c9:35:2b:07:ff:c8:24:2d:c2:35:71:32:b9:72:b4:
47:d4:65:46:ef:64:b5:fc:fd:81:2f:c3:b5:28:24:
73:7d:0d:55:02:db:ff:dc:49:36:fe:d4:0e:ab:ef:
08:7a:db:29:31:3f:2d:0e:fe:16:3a:19:d9:99:80:
80:a3:c0:c1:c6:a5:dc:6f:f4:a6:7c:54:3e:5d:ba:
97:d9:66:76:a5:b2:c5:5e:56:4b:64:6b:44:e0:8b:
57:db:cf:bf:2d:18:29:69:e2:75:68:fb:9f:79:8f:
12:5b:3b:b2:f3:27:b7:d9:20:98:de:6c:03:71:37:
56:3d:fe:18:86:86:7b:af:da:01:d5:78:cf:23:86:
54:ba:d0:43:01:95:b1:10:97:66:80:26:30:5a:5a:
ae:92:e8:11:3a:96:2a:d9:74:4b:d2:f9:01:21:d2:
96:88:32:5c:a3:44:c4:e2:4b:d0:9e:af:4c:9a:4e:
8b:33:6d:cc:50:44:c8:1f:23:f6:10:73:13:3c:69:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:89:D6:F9:A6:C5:EC:E3:8D:16:C9:1D:5E:E2:5F:FD:71:1E:67:EF
X509v3 Authority Key Identifier:
keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/d4nW-abF7OONFskdXuJf_XEeZ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:82:70:a2:cf:ce:66:e2:f7:ab:ad:c7:fd:83:16:80:62:f8:
01:e5:df:ac:43:c6:08:b9:59:33:b3:03:10:ae:91:98:94:5d:
e0:d7:23:2a:1b:37:2e:a9:be:15:fe:a0:74:0f:f1:ed:c8:9f:
8f:24:a4:bb:c3:39:22:89:8a:9f:c5:28:de:5c:5b:9a:1f:0a:
98:65:ed:4a:d0:a9:2c:a5:95:16:f6:84:c4:e7:06:14:86:7e:
dd:5b:07:7f:6c:70:3b:81:59:a8:6a:69:96:8e:1e:de:cc:48:
46:55:55:42:03:c2:f4:71:7c:5b:bc:1c:cb:3f:be:7a:94:c5:
17:4a:8e:70:a1:46:86:0e:2d:11:4b:7b:3d:23:57:46:49:8b:
a2:8c:8e:4a:2f:fd:2b:28:5d:a3:cf:99:68:13:d7:c3:ac:43:
f0:a5:17:f9:1a:ef:c3:41:02:fa:1d:b2:56:50:82:92:4f:b7:
40:ff:52:46:c4:92:74:0a:bd:21:58:59:92:b3:61:b9:00:45:
09:43:4f:9a:9b:85:bc:29:76:75:95:89:38:c3:50:cf:47:31:
a0:16:14:31:d9:e8:cf:33:f3:62:3c:4a:73:9b:b7:07:35:8f:
3e:d6:f3:e3:e0:b5:79:54:75:2a:21:df:70:5a:03:d7:d2:48:
70:74:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:49 2023 by rpki-client on console-ams.rpki-client.org