Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rEnLJLiSiT1HdFF4upohYmOq5K8.roa
File: rEnLJLiSiT1HdFF4upohYmOq5K8.roa (raw, json)
Hash identifier: qTgmwvnzyutn6Kk+2heNQxclD/KM/iMLrDrhBZ5mzkI=
Subject key identifier: AC:49:CB:24:B8:92:89:3D:47:74:51:78:BA:9A:21:62:63:AA:E4:AF
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0183C3854D17C473C72E47C8AA818C4B4BA6
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rEnLJLiSiT1HdFF4upohYmOq5K8.roa
Signing time: Mon 10 Oct 2022 20:10:36 +0000
ROA not before: Mon 10 Oct 2022 20:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 94.241.168.0/21 maxlen: 24
94.241.176.0/21 maxlen: 24
83.147.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c3:85:4d:17:c4:73:c7:2e:47:c8:aa:81:8c:4b:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 10 20:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac49cb24b892893d47745178ba9a216263aae4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:0c:42:da:42:e6:4b:11:60:73:33:12:3b:
10:92:ac:3e:0c:eb:b1:cb:bf:1e:c0:c0:98:29:a6:
54:ab:31:07:f7:46:67:9a:fa:2d:c0:f6:85:38:70:
54:e3:f8:41:6d:96:2a:48:80:93:a8:8d:70:96:b0:
91:8d:bd:12:98:39:6c:f9:85:d4:a4:6c:f2:cf:2d:
0d:3b:c5:59:d2:ac:8c:9f:32:52:a4:a7:de:d7:de:
fb:4e:78:84:08:81:0a:d9:16:13:54:4e:ff:55:82:
0a:0f:b1:57:27:5d:d1:77:eb:cd:52:89:ff:f2:12:
0f:69:9f:7c:8f:f7:46:3c:0a:df:54:ca:08:d8:06:
a3:a6:3e:3a:81:76:19:24:38:c1:e0:e1:ed:86:fc:
69:bf:c7:66:11:02:13:44:46:e5:5e:12:ec:fe:fd:
82:6b:c6:d5:e5:78:ba:bf:d6:6a:c9:e0:66:52:1d:
77:36:1f:98:c2:ef:1a:ca:ba:6a:74:ac:c1:39:24:
f5:4d:06:c8:fd:35:82:f9:32:32:88:9c:60:da:61:
92:9a:94:29:7f:d8:f2:2f:9e:d1:52:22:1f:2c:d5:
fc:0e:cf:4e:3c:b9:11:6b:eb:e7:ed:de:d5:36:6d:
b0:94:d7:02:af:d2:ad:e6:63:76:bd:9c:7b:72:1c:
12:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:49:CB:24:B8:92:89:3D:47:74:51:78:BA:9A:21:62:63:AA:E4:AF
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rEnLJLiSiT1HdFF4upohYmOq5K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
94.241.168.0-94.241.183.255
Signature Algorithm: sha256WithRSAEncryption
68:90:7c:4b:33:3d:a4:1a:f5:84:6e:62:64:da:e5:08:c7:88:
9e:19:a4:6f:fd:83:31:2c:09:ff:66:ff:21:d6:5f:6b:cd:a4:
0a:83:61:3a:96:e7:ad:49:15:20:7f:b8:7c:c9:82:aa:4b:58:
41:7c:e1:f6:e8:a9:09:74:9a:d6:01:80:87:08:81:ef:b3:b5:
70:8b:e1:46:10:50:60:e3:4d:c7:35:89:4b:1d:d6:7e:6c:8d:
85:da:f8:ba:cd:19:a3:97:c3:bf:c8:fc:29:0b:f0:4f:fd:dd:
8e:02:37:75:fd:00:94:54:c4:86:83:63:19:0f:7a:b8:74:81:
2a:22:7a:0c:98:cf:28:db:02:b9:50:66:72:6b:64:11:2a:ce:
c2:6c:e5:51:90:f6:f1:50:08:51:98:56:9a:6c:d0:78:30:30:
a8:ce:a4:25:c4:9c:9d:27:80:9c:d6:1e:98:24:62:87:0b:4f:
ec:6a:fe:80:e6:b8:61:24:3a:7f:4c:2c:97:17:c3:01:85:a0:
6b:80:80:8a:4d:00:b1:ea:93:d0:a5:87:a4:a7:81:2b:c4:e7:
4f:0a:9a:a3:e1:42:a9:ed:c2:b8:39:97:17:e5:f9:61:d7:a0:
c5:3d:7f:39:b8:d4:d8:1e:53:a5:bc:fe:1f:8e:cb:ec:af:f4:
11:64:ea:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org