Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/RLQyiChc7tNwz4818CBCP8mDO7E.roa
File: RLQyiChc7tNwz4818CBCP8mDO7E.roa (raw, json)
Hash identifier: UHHi8e8Gdg+x6bAnSFq6TIJjB1qkv7WFSMOH68DgUHo=
Subject key identifier: 44:B4:32:88:28:5C:EE:D3:70:CF:8F:35:F0:20:42:3F:C9:83:3B:B1
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 018558C9D9AA4EBAD4B8B873A3C7C48F1F12
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/RLQyiChc7tNwz4818CBCP8mDO7E.roa
Signing time: Wed 28 Dec 2022 12:51:41 +0000
ROA not before: Wed 28 Dec 2022 12:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203985
IP address blocks: 94.240.29.0/24 maxlen: 24
94.240.30.0/24 maxlen: 24
94.240.31.0/24 maxlen: 24
94.240.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:c9:d9:aa:4e:ba:d4:b8:b8:73:a3:c7:c4:8f:1f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Dec 28 12:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44b43288285ceed370cf8f35f020423fc9833bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:9c:96:b1:be:32:35:8c:ff:9b:86:f1:46:
14:11:3e:57:5b:42:1e:12:5e:30:00:79:b8:f3:3c:
dc:51:25:81:b7:d1:b5:9c:ce:c7:fc:3b:68:f8:d5:
91:8d:4f:48:af:7e:19:05:2d:8f:38:e1:92:19:a7:
6d:48:b7:a7:5e:c8:81:34:06:56:f4:d8:61:4b:e3:
33:50:a7:43:79:af:ee:4d:ff:e8:e8:9f:37:c4:01:
46:57:f0:e6:a7:20:2f:dd:bf:62:2e:66:39:43:5d:
92:e0:d3:c5:a0:02:06:85:36:76:25:e6:af:0e:eb:
aa:2f:34:da:26:da:14:70:06:10:a6:eb:0c:4c:58:
66:05:46:00:81:e6:b2:e9:96:04:7b:89:d2:cb:44:
38:dc:a3:db:85:06:14:b6:38:17:a2:b5:d7:74:be:
6d:78:f3:e5:74:35:10:25:e0:f3:d7:c3:04:db:0a:
fc:03:00:ac:aa:ef:a8:05:1a:a5:dd:7a:3a:36:a2:
07:58:63:89:67:b6:78:bb:2f:1a:4e:2d:c3:18:a6:
7f:44:d3:17:b7:af:02:52:41:66:77:36:d4:1b:e0:
2d:3c:bf:75:72:b5:05:04:b1:4c:46:51:75:55:ca:
d8:78:08:03:ba:d3:70:ea:f8:63:61:6d:84:29:45:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:32:88:28:5C:EE:D3:70:CF:8F:35:F0:20:42:3F:C9:83:3B:B1
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/RLQyiChc7tNwz4818CBCP8mDO7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.28.0/22
Signature Algorithm: sha256WithRSAEncryption
26:5a:22:67:25:49:d6:3e:b8:45:85:9b:1b:50:9c:84:c1:93:
09:b5:42:f0:86:82:f9:8e:f1:a2:52:1b:0e:76:5b:49:df:ac:
16:f2:41:65:6c:28:85:d4:28:ca:cc:9b:ae:38:c5:58:5a:c4:
4a:e2:89:e8:21:a5:27:8c:13:1d:65:2a:15:ba:b8:4c:aa:05:
b6:e6:b1:9f:fb:29:5a:40:af:11:29:54:d5:4a:9c:97:25:86:
d4:d3:3c:64:4e:f3:d7:07:ba:cc:eb:33:5a:c1:88:08:a0:1b:
89:e8:95:f6:45:2f:4b:ab:f6:32:31:65:74:20:d1:e8:0e:07:
90:b6:eb:d4:21:cf:a6:88:1f:6f:6e:59:3b:d9:b8:3d:23:e6:
d3:16:97:6d:3b:85:56:2f:34:04:fc:6f:9f:4c:8e:46:a6:13:
ed:ff:39:0b:1c:4d:d6:7f:32:fc:51:3b:bb:f9:d0:4a:27:f1:
da:73:db:e4:88:ce:95:2c:92:a9:ef:de:43:c5:cb:c4:06:20:
ac:d5:60:a4:2d:a2:25:8f:1e:68:7c:73:70:9a:90:f7:f0:81:
d8:03:1e:7f:55:c1:46:f3:7e:23:cd:80:dc:3f:3d:42:36:e3:
8c:8a:d6:ca:88:c4:d2:f3:ad:ae:85:41:d1:1a:88:4f:3d:b7:
40:4d:3a:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVYydmqTrrUuLhzo8fEjx8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjIxMjI4MTI1MTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGI0MzI4ODI4NWNlZWQzNzBjZjhmMzVmMDIwNDIzZmM5ODMzYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHuclrG+MjWM/5uG8UYUET5XW0Ie
El4wAHm48zzcUSWBt9G1nM7H/Dto+NWRjU9Ir34ZBS2POOGSGadtSLenXsiBNAZW
9NhhS+MzUKdDea/uTf/o6J83xAFGV/DmpyAv3b9iLmY5Q12S4NPFoAIGhTZ2Jeav
DuuqLzTaJtoUcAYQpusMTFhmBUYAgeay6ZYEe4nSy0Q43KPbhQYUtjgXorXXdL5t
ePPldDUQJeDz18ME2wr8AwCsqu+oBRql3Xo6NqIHWGOJZ7Z4uy8aTi3DGKZ/RNMX
t68CUkFmdzbUG+AtPL91crUFBLFMRlF1VcrYeAgDutNw6vhjYW2EKUXXxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFES0MogoXO7TcM+PNfAgQj/JgzuxMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvUkxReWlDaGM3dE53ejQ4MThDQkNQOG1ETzdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXvAcMA0G
CSqGSIb3DQEBCwUAA4IBAQAmWiJnJUnWPrhFhZsbUJyEwZMJtULwhoL5jvGiUhsO
dltJ36wW8kFlbCiF1CjKzJuuOMVYWsRK4onoIaUnjBMdZSoVurhMqgW25rGf+yla
QK8RKVTVSpyXJYbU0zxkTvPXB7rM6zNawYgIoBuJ6JX2RS9Lq/YyMWV0INHoDgeQ
tuvUIc+miB9vblk72bg9I+bTFpdtO4VWLzQE/G+fTI5GphPt/zkLHE3WfzL8UTu7
+dBKJ/Hac9vkiM6VLJKp795DxcvEBiCs1WCkLaIljx5ofHNwmpD38IHYAx5/VcFG
834jzYDcPz1CNuOMitbKiMTS862uhUHRGohPPbdATTo8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:12 2024 by rpki-client on console-ams.rpki-client.org