Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/8AVvUcUR30A3gSLSsh0BtgxJJMU.roa
File: 8AVvUcUR30A3gSLSsh0BtgxJJMU.roa (raw, json)
Hash identifier: zbssurYRAJsVPtnBwv9zJd6ZVwBwYRi8rxC6LBOrvm0=
Subject key identifier: F0:05:6F:51:C5:11:DF:40:37:81:22:D2:B2:1D:01:B6:0C:49:24:C5
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 01847FC4002CC2F1ED77118A028D14B2403A
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/8AVvUcUR30A3gSLSsh0BtgxJJMU.roa
Signing time: Wed 16 Nov 2022 09:27:42 +0000
ROA not before: Wed 16 Nov 2022 09:27:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48646
IP address blocks: 94.247.45.0/24 maxlen: 24
178.251.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:c4:00:2c:c2:f1:ed:77:11:8a:02:8d:14:b2:40:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Nov 16 09:27:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0056f51c511df40378122d2b21d01b60c4924c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:a2:84:bb:76:0d:ef:10:3a:9e:7f:93:ea:
da:1b:cc:f4:bd:d7:07:b3:80:33:55:ab:9c:60:c9:
ed:91:c8:a7:7e:0e:65:e9:bb:3e:45:e4:59:f6:36:
5e:76:78:5e:65:53:8b:fd:0d:80:90:5f:0b:d2:75:
ea:cb:97:93:ca:c0:3b:a2:d8:39:b8:fb:04:12:3a:
c2:ef:9f:fb:2f:bd:af:3c:ef:74:19:93:54:58:f1:
83:cf:ad:4d:6a:f6:f7:20:5f:3e:72:78:3e:21:94:
3a:13:2d:15:dc:eb:75:50:5e:4a:36:f6:04:f9:ac:
48:3c:90:84:f6:31:bc:e3:6d:b0:24:6f:76:bc:cb:
fd:6b:ea:a7:30:5d:a5:09:c0:ee:18:6c:63:94:50:
ac:ba:6a:16:df:6a:d2:44:f6:24:6e:d2:f9:09:23:
99:6f:8b:5d:8c:03:17:50:df:86:29:ee:02:36:88:
6b:4f:d9:39:2e:53:05:74:6f:f7:1c:ce:03:5f:25:
f1:51:40:05:d1:bb:8e:a4:2f:0b:73:69:3b:89:95:
3e:ea:91:77:a1:f9:0a:ce:e2:ef:39:6a:03:7a:7a:
b2:71:84:f4:36:b6:31:07:15:86:f2:f7:f9:f1:38:
45:09:07:b4:12:0c:ba:07:aa:49:22:bf:71:09:69:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:05:6F:51:C5:11:DF:40:37:81:22:D2:B2:1D:01:B6:0C:49:24:C5
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/8AVvUcUR30A3gSLSsh0BtgxJJMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.45.0/24
178.251.226.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7c:7d:c2:01:34:e2:42:50:5b:89:27:8f:a5:c6:52:b0:f2:
69:42:8a:8b:fe:3f:ee:2f:f0:7f:5e:38:e6:ec:82:b7:35:40:
ee:b2:76:b1:ce:35:24:42:da:c1:c4:f5:ba:d9:60:85:93:74:
15:d1:e2:75:ea:14:58:1a:90:da:79:89:3d:b6:84:8c:03:32:
b1:e2:de:4c:31:83:c9:27:65:92:4f:dc:34:44:b6:1f:fa:d5:
2b:ee:b9:82:17:f5:51:91:72:45:50:49:0e:79:5b:e6:5c:05:
df:4a:82:15:70:66:39:f4:fa:74:95:97:59:17:a7:b4:21:b2:
c0:47:f7:54:cb:f2:69:47:5f:f7:54:7e:26:53:68:e7:c7:16:
0c:63:c9:a9:de:a9:cc:19:cd:ed:80:8d:50:64:44:cb:97:2b:
f8:88:b6:c0:6f:42:19:a8:5a:86:59:fa:1c:9e:68:ab:42:9b:
84:6b:2c:dc:61:be:30:f9:f4:19:ad:f2:ec:bd:79:bc:ad:ad:
93:f3:16:ae:ca:35:dc:ef:bf:c0:c6:41:b5:d1:ec:ee:60:c4:
5a:eb:e7:05:1d:14:12:c1:b6:7a:aa:c5:68:39:11:e9:da:a8:
c9:94:e7:24:cb:f9:4e:46:63:45:03:a3:76:b3:8d:9c:55:a3:
f2:f0:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org