Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/qFPg3cSV36k2T7Xy0TUAQwt4nUY.roa
File: qFPg3cSV36k2T7Xy0TUAQwt4nUY.roa (raw, json)
Hash identifier: 7Gw8k4sqvOS8Dj7r3p0I1T6Aak9N9XkyNiRRcO9FbpQ=
Subject key identifier: A8:53:E0:DD:C4:95:DF:A9:36:4F:B5:F2:D1:35:00:43:0B:78:9D:46
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 055CC0E3
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/qFPg3cSV36k2T7Xy0TUAQwt4nUY.roa
Signing time: Sat 01 Jan 2022 13:58:39 +0000
ROA not before: Sat 01 Jan 2022 13:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50518
IP address blocks: 45.94.248.0/22 maxlen: 24
2a11:7400::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89964771 (0x55cc0e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Jan 1 13:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a853e0ddc495dfa9364fb5f2d13500430b789d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:75:07:39:de:97:15:89:0d:25:4c:f7:c0:
1c:72:cc:96:cb:8b:9c:08:21:fb:60:ac:81:26:de:
3a:c8:b0:b4:e5:62:03:5e:e5:4f:c9:83:c5:51:ee:
22:c0:75:f8:b9:2e:e5:6e:eb:87:f2:9b:c4:08:27:
70:76:5e:f9:40:3a:da:65:e1:73:ef:c5:bf:97:8b:
ee:08:20:94:f0:ad:c5:a8:7f:d7:39:4f:33:d0:9f:
d2:52:c4:ea:08:00:13:f4:6c:24:37:6f:96:ff:e8:
23:fa:b3:57:a0:c4:87:1b:cc:04:c1:a1:8d:de:21:
3b:9f:72:09:c8:d3:89:f4:21:ae:45:86:c6:f0:0e:
ed:c2:3b:a8:38:64:a4:42:2c:f8:0a:14:dd:cb:bd:
c2:49:b6:18:40:6b:4e:4a:03:34:26:a7:97:84:2b:
21:d9:3a:49:00:0c:85:74:6d:90:a4:f3:ce:60:85:
34:c5:23:94:c1:fe:4a:2c:76:48:0b:20:5c:96:11:
a9:87:bc:ce:bc:a4:93:66:ec:90:e6:27:74:8f:c5:
c8:0b:e8:db:0d:3b:fd:c5:ec:32:af:29:cf:3e:0d:
4c:af:4e:fd:78:9c:2c:d6:bb:95:c3:ba:92:84:93:
6f:74:48:b2:4a:82:78:bd:b9:0b:04:cf:da:d3:a4:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:E0:DD:C4:95:DF:A9:36:4F:B5:F2:D1:35:00:43:0B:78:9D:46
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/qFPg3cSV36k2T7Xy0TUAQwt4nUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.248.0/22
IPv6:
2a11:7400::/29
Signature Algorithm: sha256WithRSAEncryption
8f:1a:b7:29:5e:95:cb:92:bb:ff:9a:ae:92:c5:5a:af:61:7a:
fc:10:70:64:dd:b4:0f:60:b3:c1:7e:0b:26:7b:26:ca:91:89:
5f:1a:dc:44:ea:3b:80:6d:b7:07:1a:d7:6d:9a:14:50:14:1b:
9f:06:52:34:76:9a:bb:d0:7e:84:5a:19:4b:b9:ad:08:80:91:
58:d2:09:2a:4e:15:c1:a2:55:61:2b:86:c8:de:c7:94:5f:ed:
b8:53:30:00:ce:79:cf:9d:4e:1b:81:a1:20:6f:1c:07:ea:65:
ae:38:82:43:dd:0e:84:35:7a:2a:8b:cf:f9:ad:2e:32:60:58:
47:7c:96:d7:eb:a9:10:55:56:0e:4f:51:80:dc:37:a4:2f:10:
28:c4:59:ff:e6:f3:72:da:86:2e:f7:c8:44:0f:6b:04:68:06:
7f:0a:84:42:ad:43:17:49:a1:78:f8:1c:3d:1a:f6:70:70:ed:
7f:e9:66:1d:3a:74:ca:d1:0d:25:b5:81:39:51:3b:b2:c4:62:
5d:1f:34:2c:c9:6a:60:df:e7:f1:d7:ec:55:4a:6d:e9:52:09:
82:86:6f:5c:c1:cd:8e:07:44:9f:97:a1:61:bb:65:1c:ba:90:
7f:8d:0b:88:0a:e3:d3:9a:dc:4e:0d:d5:70:9e:14:a2:ac:1b:
35:b3:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:27 2024 by rpki-client on console-ams.rpki-client.org