Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/o2JhvqvWo31bGgqj4HRG5uFFucA.roa
File: o2JhvqvWo31bGgqj4HRG5uFFucA.roa (raw, json)
Hash identifier: B+DXRtOtOeSdxoRsYwkQR95+wIwTpqCjsob6S6ROgwY=
Subject key identifier: A3:62:61:BE:AB:D6:A3:7D:5B:1A:0A:A3:E0:74:46:E6:E1:45:B9:C0
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01855892EB975B387B1F28B5ABB39DBC109F
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/o2JhvqvWo31bGgqj4HRG5uFFucA.roa
Signing time: Wed 28 Dec 2022 11:51:41 +0000
ROA not before: Wed 28 Dec 2022 11:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 94.139.176.0/21 maxlen: 21
94.139.184.0/22 maxlen: 22
94.139.190.0/23 maxlen: 23
94.139.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:92:eb:97:5b:38:7b:1f:28:b5:ab:b3:9d:bc:10:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Dec 28 11:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a36261beabd6a37d5b1a0aa3e07446e6e145b9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:ac:de:bc:7a:81:ba:fc:af:4c:6a:c0:1d:
0e:0d:c9:d7:fe:25:14:35:a4:09:f2:e1:65:be:af:
50:43:e8:05:ae:f5:f6:d5:46:e7:11:c0:7c:09:b6:
13:fa:12:e0:63:0f:96:d2:f2:5c:ec:b4:6b:b0:fe:
aa:c3:9a:a5:9a:03:76:12:00:ee:34:b3:bd:34:25:
7e:04:68:3b:04:dd:d3:ea:0b:0e:90:40:26:af:ea:
0b:23:4f:a1:20:e7:b6:e6:3b:31:76:4c:f6:d9:a3:
9c:8f:b3:4f:6a:b8:27:9b:56:5e:51:f8:48:6c:cb:
20:1e:35:9b:27:1d:ae:b8:36:06:d2:16:b9:03:f1:
e8:e6:20:89:b1:d6:04:c1:31:fc:67:70:36:79:24:
fe:e7:1b:16:35:ec:63:be:6f:f0:19:21:50:3f:0b:
b0:6b:9f:db:1e:4b:0b:d4:1d:20:96:62:8d:95:d2:
aa:a3:fc:e0:aa:14:13:f2:c9:cf:af:49:10:26:20:
06:df:9d:0f:d2:2b:b1:8c:6e:78:f5:ef:a0:21:f3:
47:73:66:04:99:85:4f:53:4c:a8:7b:db:14:1e:ff:
0b:a7:fc:b9:b8:47:25:e4:8c:d4:0e:2f:d7:a9:f7:
7b:c2:1c:11:28:e3:fd:ea:1c:37:23:e7:13:f2:a4:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:62:61:BE:AB:D6:A3:7D:5B:1A:0A:A3:E0:74:46:E6:E1:45:B9:C0
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/o2JhvqvWo31bGgqj4HRG5uFFucA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0-94.139.188.255
94.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
39:d0:cd:80:cf:75:d7:65:bb:dc:da:bf:d7:28:25:12:52:90:
de:88:4b:32:e6:5d:a5:7e:7f:d3:73:9b:e4:2f:9c:a7:65:80:
86:c0:8c:f7:99:7b:f3:15:8e:d1:31:d0:bc:7d:cb:56:de:3d:
15:0c:80:23:46:c7:ab:54:95:d5:3c:33:be:21:3c:86:e2:14:
15:d9:71:1d:9e:76:85:2c:97:05:42:98:29:7f:dc:31:0c:90:
17:d7:a1:97:46:26:1f:c8:3f:9e:ce:bf:ba:fb:3e:ae:53:94:
d6:ad:aa:da:a6:b4:3d:20:9f:df:f3:55:33:68:31:58:89:d8:
e0:73:37:3d:7e:35:e0:17:3a:14:15:cb:40:81:4d:34:91:ea:
bb:27:55:d3:87:a8:13:e9:96:96:b1:b6:79:cd:58:a3:84:6c:
a6:59:59:f2:80:f5:b3:9a:d9:9c:ef:60:dd:2e:77:b7:f6:75:
21:d3:f8:05:06:02:fb:cb:0c:1a:04:d3:c0:bb:f2:5b:39:d6:
89:ce:2a:5b:c3:1d:7e:75:c5:4e:42:06:cb:dc:7c:43:80:f0:
9d:bd:87:34:50:32:0e:29:11:51:87:c0:e5:dd:88:4e:b3:2c:
1b:72:10:58:26:a6:0e:d8:35:79:c4:ed:32:07:f7:ba:0f:f7:
bf:3f:d1:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:52 2024 by rpki-client on console-ams.rpki-client.org