Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/2NXRyPsSPyU5z4oVASujoiwp_u8.roa
File: 2NXRyPsSPyU5z4oVASujoiwp_u8.roa (raw, json)
Hash identifier: fa6AaWkCmFjW6EA9gMHFAfJ/kdnRAPYREZ2sQZ3rsKY=
Subject key identifier: D8:D5:D1:C8:FB:12:3F:25:39:CF:8A:15:01:2B:A3:A2:2C:29:FE:EF
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 08265517
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/2NXRyPsSPyU5z4oVASujoiwp_u8.roa
Signing time: Sat 01 Jan 2022 07:02:30 +0000
ROA not before: Sat 01 Jan 2022 07:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21101
IP address blocks: 94.143.96.0/21 maxlen: 24
193.109.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136729879 (0x8265517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jan 1 07:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8d5d1c8fb123f2539cf8a15012ba3a22c29feef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:eb:dc:93:63:52:d7:c3:d9:c0:ff:02:e3:
69:9f:2c:7b:83:ec:18:aa:de:c9:d3:e2:69:a6:e3:
c7:43:c3:56:e2:b3:45:44:17:a5:e8:4f:5b:30:70:
0e:07:69:d2:82:0a:b8:b8:2f:cd:a7:a8:48:09:6a:
ab:71:24:68:77:d5:ac:b6:2b:56:7c:11:b8:91:f4:
66:1f:6a:10:ef:b9:1a:86:76:46:41:bd:e3:3b:19:
06:d4:2a:2a:8b:82:1b:e6:9a:d0:ff:e7:df:0f:97:
0b:f0:6e:f2:2d:32:22:95:d7:c2:a7:13:1d:f2:96:
13:ad:a8:14:1e:84:df:bc:28:6d:ce:e8:9c:ed:24:
44:51:7f:38:1a:1a:07:7d:72:85:b6:16:a7:cd:05:
bd:ca:db:5a:a6:2a:54:08:f2:78:6b:b9:e8:09:80:
1a:08:33:3e:be:46:a4:26:5b:c5:f9:94:4a:b9:3c:
83:e4:0f:c8:68:ba:fc:f8:49:72:a3:fa:0c:d1:1a:
ff:94:ce:c7:4d:5e:be:cd:ed:40:83:25:64:6c:be:
a1:dd:6a:af:20:12:54:81:02:83:e2:d6:36:a9:df:
f6:0f:fa:43:38:2a:5f:21:77:9d:c4:6b:73:5a:48:
14:82:18:40:c7:af:3f:4b:de:e7:9f:1d:5c:f6:eb:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:D1:C8:FB:12:3F:25:39:CF:8A:15:01:2B:A3:A2:2C:29:FE:EF
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/2NXRyPsSPyU5z4oVASujoiwp_u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.96.0/21
193.109.32.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:a3:c2:44:c0:55:e1:59:7a:d0:5b:6f:96:8a:df:44:77:f2:
8a:ba:f1:26:f0:a6:c6:e5:6a:12:59:75:82:00:b4:ce:c8:02:
7f:8f:86:25:c0:69:e3:4a:1b:3a:f9:42:1c:4e:4e:9a:51:d9:
ab:d5:88:fb:ae:ec:b2:18:d8:ea:48:b4:2d:bb:9e:28:70:e8:
d9:54:5a:fe:70:89:bd:58:57:95:22:08:ed:33:fb:db:d0:1b:
40:21:4d:95:85:15:71:78:cc:9c:fa:19:82:8f:9f:04:1f:90:
f8:9c:1e:81:95:41:06:81:5b:db:35:76:dd:a5:8d:63:f8:03:
a0:73:4a:91:62:1e:09:4b:f2:40:f1:6a:52:aa:5a:e3:88:bd:
01:37:b2:c2:4f:3f:1b:7f:0d:94:42:eb:ef:64:48:05:e7:43:
2d:b2:28:34:5a:64:ef:cc:a0:a2:f1:34:65:b4:cc:34:cc:0c:
d3:1d:15:00:42:9e:f4:e6:49:53:d6:de:7f:5a:b9:91:bc:8d:
b7:0b:5a:70:01:66:a0:07:89:81:d4:fc:4b:01:d2:b6:a5:87:
94:29:d5:13:3c:dc:7d:d9:bf:a7:98:fe:b9:9d:1e:e4:e8:c9:
57:dd:98:cb:99:65:a6:f2:aa:46:7f:27:00:db:72:44:72:bb:
f1:a5:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org