Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/yTCiijdxBxxYgPch4R5Ga-jZtLQ.roa
File: yTCiijdxBxxYgPch4R5Ga-jZtLQ.roa (raw, json)
Hash identifier: /e+PXoCqY+D8cyDJy2DE1K8mcvxoXG+M+4mblh94oXQ=
Subject key identifier: C9:30:A2:8A:37:71:07:1C:58:80:F7:21:E1:1E:46:6B:E8:D9:B4:B4
Certificate issuer: /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial: 0184CA80AB8E866B5B80D537898515F9F223
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/yTCiijdxBxxYgPch4R5Ga-jZtLQ.roa
Signing time: Wed 30 Nov 2022 21:45:40 +0000
ROA not before: Wed 30 Nov 2022 21:45:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 185.94.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ca:80:ab:8e:86:6b:5b:80:d5:37:89:85:15:f9:f2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Validity
Not Before: Nov 30 21:45:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c930a28a3771071c5880f721e11e466be8d9b4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:bc:fe:92:76:12:d2:86:20:c4:00:d7:36:
a3:ec:f6:f6:9d:d7:2f:a3:ea:03:9a:24:52:e6:7a:
a4:88:d4:02:72:a2:fa:76:12:f5:69:24:ba:0c:83:
4b:8a:09:47:b8:14:e8:7a:97:e5:76:c8:a5:b8:00:
93:da:41:32:4f:5a:3c:58:4b:79:db:37:ae:5c:fe:
d3:0b:fa:90:27:fd:69:21:b9:af:0d:81:7d:2a:c8:
6f:e2:e0:81:50:b2:eb:fc:0d:ab:7e:ed:aa:1d:fb:
df:b3:26:25:bc:2d:b2:94:82:fa:b3:2e:64:a4:b7:
46:31:6a:02:0f:76:61:c3:b4:9f:fd:d8:85:92:c8:
04:68:2e:12:4f:14:8d:86:22:03:3f:ae:6f:11:47:
3f:2d:68:9c:20:f5:97:88:af:ba:17:86:b3:9b:1d:
30:cc:d3:84:29:99:ae:ec:33:78:23:1c:a3:3b:1b:
16:84:ee:ad:89:2f:07:1f:9b:5c:22:e9:03:98:4b:
ee:d0:b9:56:6d:4f:97:6b:7f:d4:00:57:01:c8:9f:
db:b5:39:39:1d:ad:81:c3:70:b4:7b:9d:04:81:48:
25:ed:e0:47:79:57:2d:f7:5d:2b:07:2d:d4:53:e9:
0a:fb:62:46:f9:61:6f:5e:99:eb:d5:60:f9:d8:00:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:30:A2:8A:37:71:07:1C:58:80:F7:21:E1:1E:46:6B:E8:D9:B4:B4
X509v3 Authority Key Identifier:
keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/yTCiijdxBxxYgPch4R5Ga-jZtLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6a:58:2c:76:69:27:20:fc:5d:fe:16:c4:67:ca:f2:c2:ee:
a6:82:4a:36:9a:0d:3a:57:a5:2f:bc:af:f0:83:65:8a:b8:06:
13:5a:5f:df:6d:2a:b2:77:5d:5b:cb:aa:2b:06:5a:8d:9d:93:
a0:05:c2:93:9a:0e:34:99:63:03:fb:d9:6f:dd:64:80:bc:fe:
34:62:25:04:f1:1c:fc:c1:37:b4:a8:f5:be:27:e1:ef:1c:f1:
1c:cb:76:30:0c:fb:59:63:90:e8:0e:f1:d9:e7:92:8a:f5:94:
06:7a:ed:ad:61:de:97:6b:2d:55:b3:e8:7a:ce:3a:d2:03:d3:
08:d3:79:67:29:13:1a:bc:c9:1a:b8:7a:c6:d2:30:b6:77:c5:
7b:bd:b1:51:7f:0b:86:4f:50:20:01:0f:84:41:f5:8a:b9:5b:
a6:d9:9e:f1:a0:3b:d9:c0:7f:b1:c1:75:27:bf:1f:18:87:e4:
7b:9d:6b:b2:e9:82:f9:37:0c:ad:64:95:c0:b0:ca:25:c0:0a:
c5:98:2e:51:d6:85:c8:51:62:f8:27:f8:b6:ba:73:2f:14:7c:
65:17:25:c4:35:54:83:95:fa:bf:6a:d1:52:77:51:2c:97:ce:
cb:f5:36:62:02:35:f8:75:b0:2c:7c:a9:09:55:73:e6:e3:c6:
fd:ea:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:02 2023 by rpki-client on console-fra.rpki-client.org