Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/fV2udSh-lMRZUWcksksWUlujIp4.roa
File: fV2udSh-lMRZUWcksksWUlujIp4.roa (raw, json)
Hash identifier: 6ioVu9geIxhOHBXyBOPbaZ3g/jwXgB/UEPdAEYAGq+8=
Subject key identifier: 7D:5D:AE:75:28:7E:94:C4:59:51:67:24:B2:4B:16:52:5B:A3:22:9E
Certificate issuer: /CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Certificate serial: 0184E2D3E6A2A2D33489DD7E3DB43BB8478C
Authority key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/fV2udSh-lMRZUWcksksWUlujIp4.roa
Signing time: Mon 05 Dec 2022 15:07:28 +0000
ROA not before: Mon 05 Dec 2022 15:07:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205090
IP address blocks: 94.142.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:d3:e6:a2:a2:d3:34:89:dd:7e:3d:b4:3b:b8:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Validity
Not Before: Dec 5 15:07:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d5dae75287e94c459516724b24b16525ba3229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:8c:5e:5d:c6:f3:9a:11:56:63:87:f9:87:
cd:a7:a4:fb:af:e0:22:36:1e:4a:81:ae:24:cf:72:
6f:73:a7:53:96:2c:29:c7:c9:ec:f4:11:7f:a1:e4:
46:48:f0:ca:ec:85:da:03:80:81:d9:fa:f6:86:a1:
11:62:13:d5:64:dc:ec:72:12:25:74:8e:e0:da:81:
cc:4c:10:20:a3:53:42:08:04:ce:ed:d2:85:63:44:
74:c3:74:b4:b3:27:de:c6:c3:a9:c3:0b:3a:2b:f9:
64:e0:bd:bc:72:53:a8:4e:c6:a2:f6:e6:ea:52:45:
df:58:33:5a:d7:74:04:01:33:97:67:ff:3c:be:12:
2a:a2:1a:49:be:7a:da:24:07:33:65:d1:a2:08:7b:
00:a4:e5:a6:e9:35:82:33:e0:64:e4:ed:b0:d2:f2:
b2:59:4a:a0:45:69:3d:92:f7:8c:90:1d:fc:44:f6:
59:b9:cb:57:44:b0:ca:cd:b7:43:0c:72:3c:27:ff:
74:52:d5:97:37:9c:84:e9:e8:24:f8:67:8e:15:18:
c4:bb:f3:87:16:b2:e8:75:a8:33:96:cd:60:4a:05:
67:af:9f:95:91:d1:6e:04:0f:7d:e9:a9:b8:8f:b4:
b1:db:53:d8:ba:4c:3b:8b:97:1e:e6:ee:19:b0:4f:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:AE:75:28:7E:94:C4:59:51:67:24:B2:4B:16:52:5B:A3:22:9E
X509v3 Authority Key Identifier:
keyid:E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/fV2udSh-lMRZUWcksksWUlujIp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.250.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d3:bb:8b:e7:15:c1:84:2c:20:68:79:4d:23:22:52:2f:fd:
e5:bb:66:17:a0:93:82:9a:1f:ea:39:43:11:53:ea:01:2e:0a:
fa:3a:f7:79:be:61:fd:9e:7e:d4:58:6b:bd:93:99:2c:6f:17:
5d:2f:1b:eb:e9:30:bf:77:27:a6:b1:db:32:41:0e:d4:42:6c:
30:0f:16:2e:8b:9d:88:ac:bf:30:9a:5c:9e:82:dc:52:eb:38:
c9:fa:34:88:10:a0:7b:5e:6d:92:3f:35:55:c8:61:b9:01:81:
3e:ec:b5:04:23:0f:c9:64:91:39:7b:3c:cb:14:9c:a3:1d:3b:
1b:e2:19:87:e2:9c:c5:af:f2:a5:7b:af:cf:5d:c8:4e:a1:7f:
85:e3:ab:a5:64:d5:ea:ec:0e:2d:b0:87:24:f0:c8:f3:ef:48:
61:40:6a:a3:8a:9c:de:8e:78:b3:c0:6d:bf:27:1b:5d:ce:65:
7f:26:eb:cf:24:ad:55:ca:92:e5:8f:5e:1d:18:41:da:be:04:
09:a3:46:f6:56:49:6d:91:5b:6b:28:e6:63:ea:00:a2:0f:7b:
b7:fd:03:b5:2a:0c:9a:ff:a5:e3:3c:40:3c:ca:56:ee:21:bc:
5e:af:a7:82:bc:8f:bd:3b:7c:69:92:39:27:58:51:b3:fb:f8:
fb:fc:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:59 2023 by rpki-client on console-ams.rpki-client.org