Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/eoFNRdr9LqC6t0Rz1J1VmrUA2K0.roa
File: eoFNRdr9LqC6t0Rz1J1VmrUA2K0.roa (raw, json)
Hash identifier: jZ6n12Zn9BHhZRFnDrr4ANDT8gXeN+vuS3NJ+/lBBco=
Subject key identifier: 7A:81:4D:45:DA:FD:2E:A0:BA:B7:44:73:D4:9D:55:9A:B5:00:D8:AD
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 67AD7F
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/eoFNRdr9LqC6t0Rz1J1VmrUA2K0.roa
Signing time: Tue 05 Apr 2022 13:34:44 +0000
ROA not before: Tue 05 Apr 2022 13:34:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24940
IP address blocks: 94.154.121.0/24 maxlen: 24
2a11:48c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6794623 (0x67ad7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: Apr 5 13:34:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a814d45dafd2ea0bab74473d49d559ab500d8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:74:c9:a6:6d:d0:ce:97:c0:03:13:d4:6d:
38:2c:60:ef:16:b4:2b:cf:33:75:d3:90:a3:4c:7e:
9a:01:6d:9c:45:ff:09:0e:fa:13:1a:56:5f:95:e1:
49:72:13:75:77:2e:83:13:f0:76:98:6c:6b:52:84:
ef:b0:e0:7d:19:85:98:43:17:58:b3:84:58:07:3c:
f1:f3:c2:6b:ff:db:eb:34:eb:1e:3e:df:d7:e8:6e:
f6:f8:6f:a3:30:41:ae:d4:31:88:c9:2a:dc:81:f0:
5e:c1:37:44:25:98:67:c4:81:48:32:c3:1c:15:58:
96:44:95:93:6b:16:50:34:e5:3f:0a:1b:19:b1:8f:
3d:4c:3f:b7:6c:f4:dd:11:fb:fe:c0:11:d1:f9:10:
b1:b2:5e:54:a9:73:75:2c:1a:0f:4a:81:62:77:b1:
42:ff:41:dc:af:0b:f8:ab:7c:75:6e:87:a8:3b:cb:
52:3e:30:30:ee:10:87:50:8d:55:a7:63:bb:71:5a:
d1:5a:84:f7:d1:43:65:25:c7:20:ed:ab:96:39:77:
5b:03:1d:32:5d:e8:4a:04:9b:c1:76:28:37:be:0a:
40:d3:86:9d:c7:e9:af:34:c3:c1:a4:b0:55:53:4c:
29:65:84:68:65:2b:33:48:0b:54:e2:b2:6d:fa:5e:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:4D:45:DA:FD:2E:A0:BA:B7:44:73:D4:9D:55:9A:B5:00:D8:AD
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/eoFNRdr9LqC6t0Rz1J1VmrUA2K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.121.0/24
IPv6:
2a11:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
35:75:7f:e1:ef:aa:b3:4c:fc:a8:f8:27:fb:78:31:2b:9d:c3:
4a:7d:cc:25:72:48:4e:46:f5:84:ed:e3:03:e8:91:cb:6b:25:
1b:e2:13:aa:15:fc:d6:9d:c9:ae:0e:ce:88:4b:6f:a5:44:a2:
5b:e9:dd:31:21:27:6e:60:fa:a1:97:ca:b7:78:bb:bf:2c:a5:
c2:05:b2:83:19:54:ef:3a:83:d8:f0:38:37:64:bc:7d:a8:26:
1f:8f:d2:57:a2:bd:90:2b:9e:dc:31:0d:fb:ac:70:80:fb:51:
0e:ea:e8:3f:14:d0:4a:0d:12:e1:a3:b5:51:36:fb:cf:3a:e9:
37:76:1e:61:db:b4:85:99:a0:cc:5d:83:4d:88:65:32:ff:2e:
5f:d9:ab:a6:6c:64:d9:7a:f3:72:8c:79:04:27:07:54:a0:d5:
3b:6a:50:56:49:99:d0:29:ae:2d:0e:9a:97:2e:bc:5f:6f:49:
a0:e8:17:6f:f7:53:4c:86:6a:5b:a4:21:f2:37:28:87:9e:dd:
df:59:8a:5c:eb:d9:97:6b:e0:ed:89:be:e3:18:62:69:58:73:
be:d9:38:1f:15:d2:ee:ad:49:9e:20:aa:4c:68:fa:93:03:bf:
b9:1f:74:04:51:0e:6a:50:3b:5a:bb:cf:3a:c4:01:1b:d0:e0:
aa:ac:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:44 2024 by rpki-client on console-ams.rpki-client.org