Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/x_sIer2h_qeorBOdv44RAo-DjuY.roa
File: x_sIer2h_qeorBOdv44RAo-DjuY.roa (raw, json)
Hash identifier: iP0EzyaYUe5S27n5aLvY/4Z4GhOWQp4kAZZO/qNoFRg=
Subject key identifier: C7:FB:08:7A:BD:A1:FE:A7:A8:AC:13:9D:BF:8E:11:02:8F:83:8E:E6
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09B2B0BA
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/x_sIer2h_qeorBOdv44RAo-DjuY.roa
Signing time: Sat 18 Jun 2022 07:47:45 +0000
ROA not before: Sat 18 Jun 2022 07:47:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 94.241.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162705594 (0x9b2b0ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 18 07:47:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7fb087abda1fea7a8ac139dbf8e11028f838ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:a2:aa:dc:b4:51:4f:1e:4a:1e:c3:b3:dd:
20:c1:27:58:b2:01:ee:82:ba:e3:ff:4d:5e:42:fe:
9c:b8:57:13:e9:8f:58:da:ac:0e:42:cf:26:25:1b:
77:1c:56:ab:c8:6d:fa:f9:40:c0:61:71:0c:d1:4c:
ab:d6:d9:2d:06:33:44:33:21:80:d5:db:08:25:2a:
d8:c1:36:d8:63:d1:78:54:ee:76:3e:f1:0a:b5:cf:
48:e2:70:fb:8f:99:db:8b:c1:af:40:0c:ca:a0:d8:
75:cc:de:01:3e:5b:09:60:b0:53:2d:77:d6:8d:ab:
7b:4c:52:18:f0:68:04:49:c2:da:bf:d9:53:f6:6d:
88:1e:50:52:f4:8b:f9:39:38:45:40:93:ef:bb:78:
37:06:25:20:87:b4:56:64:4e:22:8c:86:1d:38:25:
df:80:b2:45:40:20:f8:80:25:4a:74:10:f5:a5:08:
1a:31:74:de:47:4c:6c:ae:8e:bf:13:ca:88:ce:69:
93:3c:be:45:ba:7a:2d:53:67:2f:91:fe:e3:a2:0d:
0d:43:c0:2c:bb:85:6b:51:b7:87:ab:de:2a:0c:b8:
c0:21:35:7c:e3:f5:68:6d:19:29:8a:a0:42:91:4e:
42:d3:5d:1c:2e:50:84:3a:7b:8c:0d:2a:ec:76:ad:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:08:7A:BD:A1:FE:A7:A8:AC:13:9D:BF:8E:11:02:8F:83:8E:E6
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/x_sIer2h_qeorBOdv44RAo-DjuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
07:05:63:39:35:5e:62:c9:7b:5d:11:85:ca:f2:84:91:a8:cd:
84:2d:8c:5c:fc:8a:51:05:10:fd:d0:4e:0f:a6:0a:39:5f:e7:
1c:9e:c7:21:71:75:f1:c8:2d:36:71:05:28:f0:8b:a6:ef:5f:
f2:4b:d9:3e:f7:57:a2:a2:25:17:f0:36:9d:2e:08:4b:f9:c6:
9f:f7:72:9b:22:c7:d7:1c:ad:02:af:4f:48:f3:0c:ba:ba:c7:
19:a2:d1:8a:27:c7:93:6f:28:d2:7d:44:63:10:4a:71:b2:4e:
67:ea:f2:56:32:8b:2e:ee:90:47:ad:ee:b9:0e:d8:ad:bb:f4:
5d:7f:c7:4f:52:70:f4:e3:02:a1:08:14:a4:e5:f5:e1:26:e6:
8f:8c:68:fb:d9:4c:24:0c:c4:90:a6:ea:9c:5f:8b:78:57:ef:
54:de:44:76:75:78:52:9d:27:22:2f:b4:ad:41:72:d4:8f:5c:
cd:7c:6f:b0:8c:be:49:57:f4:af:f1:b7:8a:97:24:1f:d6:34:
18:67:f9:69:a2:76:ac:6c:f6:c8:82:a5:a3:88:ab:7d:dc:bc:
70:4e:b8:eb:42:fe:ef:ff:1f:a3:72:84:5f:a8:bb:84:e1:39:
88:e9:39:15:4c:85:b5:f1:50:32:68:2a:35:80:b6:b0:8e:d7:
b2:e8:98:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org