Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/QYB8Yp6QUMNEvQTqHdCWnjNwOfs.roa
File: QYB8Yp6QUMNEvQTqHdCWnjNwOfs.roa (raw, json)
Hash identifier: A/MuyvL2D+Kyxi8JCKA6Lrf263Z+YE+fRKiUnlgjN2o=
Subject key identifier: 41:80:7C:62:9E:90:50:C3:44:BD:04:EA:1D:D0:96:9E:33:70:39:FB
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 046B429C
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/QYB8Yp6QUMNEvQTqHdCWnjNwOfs.roa
Signing time: Mon 28 Mar 2022 21:21:53 +0000
ROA not before: Mon 28 Mar 2022 21:21:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42532
IP address blocks: 94.158.218.0/24 maxlen: 24
94.158.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74138268 (0x46b429c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Mar 28 21:21:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41807c629e9050c344bd04ea1dd0969e337039fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:0a:7f:79:ad:30:e7:50:85:53:f3:58:d9:
2f:26:f4:a9:0b:61:6f:9e:e2:73:88:1c:73:bb:5d:
76:05:4b:18:e6:b3:27:ee:c6:c7:07:4a:5f:08:67:
6c:a1:f5:74:aa:09:e4:a3:39:14:1d:cb:7a:58:c5:
72:01:ac:45:96:df:27:e2:86:d0:2f:e4:52:7b:03:
15:5e:e4:10:17:eb:08:e4:77:1d:e3:0e:80:3b:c8:
4d:cf:6c:2b:9f:ab:51:5b:80:07:c4:d1:ad:8f:87:
49:d1:b8:70:f9:ae:e1:61:24:26:56:03:60:54:db:
68:91:b7:b9:4d:eb:e6:87:ef:dc:ac:4f:e1:34:da:
57:97:ea:6d:8c:bd:4b:47:5e:69:27:7e:f5:ec:17:
fc:5a:e3:ef:16:07:4b:50:79:ab:17:de:92:66:2b:
24:7f:44:8b:33:1c:c9:c1:ea:05:4d:da:50:90:97:
94:2a:fb:ff:90:b9:ed:1c:6a:d9:a1:9d:70:22:53:
eb:0f:93:63:ac:8c:b3:50:9a:47:69:82:e3:cb:0d:
81:47:d5:07:c8:0c:aa:33:a8:c7:8c:3a:6e:8c:5c:
84:69:c5:dc:3c:7d:12:35:87:fb:a4:01:b2:fa:6c:
37:6b:66:dd:8d:b3:14:31:0b:e7:fa:d4:91:69:1c:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:7C:62:9E:90:50:C3:44:BD:04:EA:1D:D0:96:9E:33:70:39:FB
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/QYB8Yp6QUMNEvQTqHdCWnjNwOfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.218.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:a6:6b:a4:53:b2:86:d0:e0:aa:e9:42:8f:d4:66:fb:01:05:
92:63:23:bf:72:38:50:3c:45:74:97:b7:6d:18:09:31:2a:ac:
8c:03:8e:3b:f2:86:71:77:a0:c7:39:39:5d:27:0d:dc:7c:b4:
25:c8:b2:5e:4b:cb:a3:f6:6e:26:9b:23:8e:f8:ab:a0:95:2c:
90:ca:9e:ab:f8:84:d3:20:4d:d8:52:ba:5d:fa:13:3b:b5:bf:
f8:f4:bb:c6:72:10:02:e8:21:3c:1a:e8:d9:f1:b3:ca:05:c4:
9f:a7:24:bb:f3:20:58:1b:d9:7e:ed:69:5b:87:cb:bb:4a:3c:
d2:e6:ac:5d:a6:6c:2e:84:5c:0f:6f:0f:19:4f:79:ba:78:b8:
18:94:0c:84:66:c1:52:17:a6:fb:8c:dd:3e:2f:74:b6:ba:5b:
3c:c8:07:bc:6f:9b:f7:1c:52:ad:e1:d5:eb:6a:cc:ba:b2:79:
a6:9c:82:3a:72:88:0a:24:78:fb:9e:52:2b:08:27:d1:2e:f6:
8a:7e:03:53:45:65:dc:7a:d0:05:fb:56:4a:60:32:bc:11:f5:
19:03:4f:7d:cf:28:f3:78:62:bd:79:af:9e:2e:42:cf:74:b3:
c8:bd:bc:cd:20:8f:fc:d5:0e:4b:f2:14:44:9d:f1:d5:5d:fe:
61:5f:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:25 2024 by rpki-client on console-ams.rpki-client.org