Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1ncfqw4D7bZYXjrl-ld9lJUlops.roa
File: 1ncfqw4D7bZYXjrl-ld9lJUlops.roa (raw, json)
Hash identifier: DrqFrfoqr3ThX2nnOMhHVdgNQUHb4X60YeXiQDKewqE=
Subject key identifier: D6:77:1F:AB:0E:03:ED:B6:58:5E:3A:E5:FA:57:7D:94:95:25:A2:9B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018481C331CC5B0DF4A38FE80EE8E8BE7424
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1ncfqw4D7bZYXjrl-ld9lJUlops.roa
Signing time: Wed 16 Nov 2022 18:46:03 +0000
ROA not before: Wed 16 Nov 2022 18:46:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 94.241.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:c3:31:cc:5b:0d:f4:a3:8f:e8:0e:e8:e8:be:74:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 16 18:46:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6771fab0e03edb6585e3ae5fa577d949525a29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:46:4f:18:ee:96:68:0a:f8:26:56:6f:68:
3d:10:89:3e:e3:cd:05:f8:34:e9:66:51:a3:8c:be:
9c:0b:2d:b2:81:84:95:d4:e4:ae:ef:2a:88:87:35:
51:77:4a:26:88:a3:ee:09:31:cf:fd:74:32:67:0a:
c1:1f:49:2e:72:0b:23:83:91:6e:c1:8d:be:06:3f:
89:30:e4:dd:56:7d:c4:37:36:0e:77:2f:0b:ec:40:
80:63:33:6f:42:3f:1d:50:53:af:76:95:7b:c4:bd:
ac:95:57:3a:0b:d9:e5:cc:89:3b:e7:df:52:f5:40:
1c:34:65:df:c7:54:06:17:4d:59:ff:19:05:b8:eb:
97:36:c3:fd:8a:0d:e0:4d:da:2b:ea:e5:03:34:c7:
54:ae:77:7c:38:60:d9:cd:4d:60:8d:68:22:e5:a4:
83:8f:b6:42:d8:06:2f:8f:6b:cb:59:ab:7e:12:43:
ae:2c:d9:c8:e7:a0:5d:dd:98:5f:85:36:2a:e5:4e:
3b:88:9a:78:2e:cb:20:94:8e:a1:5d:5e:29:3b:6d:
09:1b:4f:52:55:5b:1d:30:58:42:68:9e:89:6a:3c:
7e:97:d6:0c:50:46:2d:f2:02:a2:4b:7a:36:05:66:
2c:9e:69:d5:51:75:62:33:b8:54:9a:29:82:82:67:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:1F:AB:0E:03:ED:B6:58:5E:3A:E5:FA:57:7D:94:95:25:A2:9B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1ncfqw4D7bZYXjrl-ld9lJUlops.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.164.0/23
Signature Algorithm: sha256WithRSAEncryption
79:66:b6:81:e7:6c:04:46:e0:6f:6c:26:2b:72:f7:8a:6e:d4:
a3:b8:c4:1d:27:03:90:e2:06:68:59:44:38:67:f4:3f:7e:a6:
04:b5:00:75:15:36:1b:14:ea:de:5b:fa:99:03:c1:36:ed:13:
c3:43:16:e9:52:36:78:cf:62:a2:1c:87:42:9e:fe:b6:2a:4d:
5d:51:5a:be:ad:9d:b6:ea:d0:4b:3c:e6:96:03:9a:d8:4f:7d:
75:7b:e9:2d:19:e4:54:af:35:fc:7b:45:d9:56:37:6c:c6:50:
97:ca:0e:bf:ca:08:c4:36:62:af:c3:c8:1b:75:35:fc:2c:d6:
d3:cd:ad:ff:04:b2:fc:b7:59:f4:dc:a6:b0:1b:d8:26:ce:de:
79:f8:1a:5d:62:eb:8e:af:d4:24:84:a7:74:e6:ef:b0:6d:f5:
2e:59:28:32:6b:cf:f6:bf:d2:3e:08:04:9d:8f:7f:5e:28:f8:
ca:2d:d7:77:f2:08:c0:e9:48:c1:a0:56:9c:6c:da:a9:d9:12:
5c:d6:a6:54:e4:ed:3c:38:d1:91:b8:13:bc:25:dd:63:84:97:
82:22:89:88:fa:23:f3:0b:bd:43:a4:0d:0c:1e:48:4b:1e:05:
30:93:01:14:61:0c:28:9a:48:2a:54:98:87:df:2e:c3:07:3b:
ef:95:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org