Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/TJuhu2xu8aLyK3VeaqxxR13lq-w.roa
File: TJuhu2xu8aLyK3VeaqxxR13lq-w.roa (raw, json)
Hash identifier: lWqDEY57yPqrox1Y350+n5/28c+2sK6Tnxj/Jv5T7vw=
Subject key identifier: 4C:9B:A1:BB:6C:6E:F1:A2:F2:2B:75:5E:6A:AC:71:47:5D:E5:AB:EC
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 37F421E6
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/TJuhu2xu8aLyK3VeaqxxR13lq-w.roa
Signing time: Sat 01 Jan 2022 06:52:52 +0000
ROA not before: Sat 01 Jan 2022 06:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57187
IP address blocks: 94.207.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938746342 (0x37f421e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Jan 1 06:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c9ba1bb6c6ef1a2f22b755e6aac71475de5abec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ae:fb:f1:5f:10:fb:7d:41:29:db:71:72:af:
7c:6d:6b:5a:00:c6:0b:8e:95:08:8e:d2:2e:9f:f7:
ff:28:3f:32:f3:b6:d8:0f:2e:16:ba:8f:09:d2:f6:
7e:6c:e7:72:9f:27:e3:fd:23:bc:fd:35:af:3d:91:
b5:57:61:78:15:28:13:05:8c:0e:13:b3:06:3b:67:
96:ec:16:9e:47:c6:ff:34:28:30:0c:0c:2f:d3:35:
f4:dc:01:4f:56:3d:b0:ab:6c:8d:6e:e2:2c:66:55:
c2:70:a2:dc:d5:2a:1f:63:d0:55:53:2f:27:6f:90:
25:a1:30:7e:ca:7b:df:dc:28:6e:e8:0f:7b:2b:ec:
70:0b:80:4e:3a:0e:c8:bb:03:91:81:4b:e4:b8:67:
f3:87:ea:d7:ba:e0:73:3b:3b:cb:03:ca:f3:72:bf:
e5:33:cf:fb:78:4f:68:12:8c:58:0d:cb:8b:4a:e0:
64:8c:54:8d:8a:af:6e:a7:6c:8b:c1:2b:13:12:db:
93:65:ce:df:d2:4e:9c:82:71:85:41:00:8e:96:81:
2b:1f:73:c5:37:39:dc:4b:29:e9:6a:40:ad:ef:2c:
19:af:ae:a1:fc:9e:a2:e1:5d:9b:ad:9a:72:46:d4:
63:0d:37:9f:b4:fe:b7:92:f3:8c:01:df:a6:2f:41:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:A1:BB:6C:6E:F1:A2:F2:2B:75:5E:6A:AC:71:47:5D:E5:AB:EC
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/TJuhu2xu8aLyK3VeaqxxR13lq-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.207.32.0/20
Signature Algorithm: sha256WithRSAEncryption
81:77:8d:1b:64:03:b6:f5:82:bf:04:5a:b0:94:0c:47:af:73:
ab:a4:c1:d7:18:26:a7:a2:f9:47:12:bc:98:0c:24:e7:71:7e:
8c:25:0f:d5:29:d9:88:d9:2c:e9:91:5c:95:d4:5e:a2:17:6e:
46:d9:1d:8d:84:80:bd:32:99:1c:b0:35:b6:df:52:84:57:5c:
49:59:05:07:f0:10:0d:99:30:14:fe:cf:a4:6c:7b:ee:c8:f8:
00:a2:9c:6e:c8:62:f8:ab:0d:6e:d1:d1:87:88:64:d4:5b:81:
dc:4a:3f:5d:33:17:71:73:2b:51:fa:1e:88:31:6c:39:b8:22:
59:98:03:dc:ee:5b:da:c3:25:98:fe:81:c0:cc:ba:8c:5c:a2:
13:1f:7b:95:d4:99:d7:50:24:e5:87:37:5e:6c:31:64:e2:f6:
20:e5:50:36:3e:43:b2:47:89:4a:81:0b:7c:eb:02:f9:0d:b2:
a6:35:1f:1a:98:9e:e5:c1:f1:4e:63:5b:de:e6:eb:c3:25:39:
fa:84:83:a9:70:63:91:e2:db:66:ce:bc:17:e8:03:11:af:50:
c3:33:b5:c4:9f:76:57:5e:0a:9b:19:9c:8b:b7:2a:3f:59:4f:
e0:a6:44:4a:80:46:26:7a:78:61:e1:5d:a2:6c:d1:60:68:a3:
a2:5e:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org