Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/1-3vAESaZEhOpkFpK_-l4HjZGD64.roa
File: 1-3vAESaZEhOpkFpK_-l4HjZGD64.roa (raw, json)
Hash identifier: KtxOWcNftgxl69y0L+QJGFu5qIxYroDQfUTRqav0iQE=
Subject key identifier: FB:7B:C0:11:26:99:12:13:A9:90:5A:4A:FF:E9:78:1E:36:46:0F:AE
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 04E6BD87
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/1-3vAESaZEhOpkFpK_-l4HjZGD64.roa
Signing time: Sat 01 Jan 2022 05:02:16 +0000
ROA not before: Sat 01 Jan 2022 05:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 94.124.112.0/24 maxlen: 24
2a0c:b280::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82230663 (0x4e6bd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Jan 1 05:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb7bc01126991213a9905a4affe9781e36460fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:12:06:01:6f:20:20:96:2d:c5:22:ff:5a:
39:ab:08:cf:94:56:df:cf:0b:95:37:70:26:43:94:
63:81:be:e6:f2:d5:b3:44:d9:54:f1:b6:54:aa:d7:
d0:f3:eb:17:8e:f1:c0:fe:34:c9:eb:e8:23:92:28:
03:95:d2:f8:7b:1b:ca:32:da:75:ba:23:c0:c2:d4:
ed:bd:29:59:21:99:9e:b4:63:59:c1:84:a3:0e:f6:
bf:aa:47:70:9d:33:ad:b4:98:a9:e5:be:1a:3a:97:
38:c1:e7:9d:04:38:73:89:a7:5d:b1:c2:c6:de:6b:
3f:1c:de:af:b4:ad:c7:f1:33:a9:77:5f:dd:24:4b:
62:39:81:a6:95:a6:84:3e:4b:fa:38:00:9e:dc:8f:
21:89:8b:89:33:a1:91:5e:12:b3:bf:bb:f9:4a:9c:
b4:f0:9c:65:a6:fc:66:55:cb:d1:a7:0d:e0:98:04:
8c:8c:37:b6:2c:f2:ef:d5:3c:34:68:34:b1:c5:a3:
82:02:65:14:a4:1b:1a:78:39:e8:4b:54:84:29:a0:
6d:74:61:c2:0e:75:5a:23:7e:6c:c6:9c:5d:6b:b4:
45:68:6a:63:5a:b7:31:57:4f:34:74:2c:b7:bd:7f:
79:36:c2:3f:89:5b:3d:d8:e6:b5:86:7b:68:18:53:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:C0:11:26:99:12:13:A9:90:5A:4A:FF:E9:78:1E:36:46:0F:AE
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/1-3vAESaZEhOpkFpK_-l4HjZGD64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.112.0/24
IPv6:
2a0c:b280::/48
Signature Algorithm: sha256WithRSAEncryption
73:47:fc:76:a8:f1:1d:0b:c0:92:09:3d:3b:ff:7b:33:1c:e9:
9b:f8:71:fa:a4:8f:e8:2d:87:cd:14:7b:7d:29:4b:68:0e:70:
68:da:bd:c4:6b:ac:6f:f4:08:93:f4:7f:45:1d:d7:95:80:2b:
15:df:11:ad:d7:71:92:54:8c:7e:b9:b8:a1:b2:2f:0e:2e:1e:
2c:17:39:bb:19:3a:85:8d:35:bd:85:d7:6a:49:0f:f3:bc:d0:
a4:77:49:2f:af:a7:af:98:56:35:c7:0c:cf:b3:0f:84:dd:03:
68:3f:a9:89:a0:bb:fd:9e:9c:46:ad:0f:2d:bd:f7:b4:0d:40:
da:45:da:a7:02:f3:18:39:db:a4:64:a9:40:96:d7:07:26:ab:
0c:bb:7e:d0:9a:b3:99:97:21:50:4d:72:ac:8c:cb:71:f2:ab:
92:94:e5:31:03:42:59:46:26:a0:1c:d1:3e:0f:25:3f:fe:c6:
b7:e6:8d:05:a3:0e:dc:5c:39:82:31:d6:1a:5e:dc:5d:f5:47:
7b:55:b6:43:e7:e4:ae:bf:b4:bf:56:a7:fa:26:ea:77:0e:d4:
34:15:af:fd:6f:72:0b:0c:b2:3b:b1:0c:4d:9a:d4:bc:43:42:
70:9d:21:3a:68:00:b0:70:f9:a8:b1:ab:78:a4:9f:73:4b:00:
66:49:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:47 2024 by rpki-client on console-fra.rpki-client.org