Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8XV-o9WUc5mZsemqJruJCkNGdtI.roa
File: 8XV-o9WUc5mZsemqJruJCkNGdtI.roa (raw, json)
Hash identifier: 3fyoDXfyDijtYT9jl7BVAA0NKa3LLX4xkbLfLvHRtr8=
Subject key identifier: F1:75:7E:A3:D5:94:73:99:99:B1:E9:AA:26:BB:89:0A:43:46:76:D2
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 11CAC745
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8XV-o9WUc5mZsemqJruJCkNGdtI.roa
Signing time: Sat 01 Jan 2022 15:05:43 +0000
ROA not before: Sat 01 Jan 2022 15:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199048
IP address blocks: 94.72.146.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298501957 (0x11cac745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 15:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1757ea3d594739999b1e9aa26bb890a434676d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:64:34:63:93:e6:b4:f5:6f:34:ea:2a:70:
cb:78:b0:a8:f7:e7:39:2e:80:75:fe:f8:23:b1:8f:
e4:bb:46:97:0f:c0:d4:99:d6:9c:cd:72:0e:82:d2:
ae:6a:f6:35:6e:2c:57:71:0a:9c:63:c7:f4:44:7b:
a9:a1:72:3b:1b:f9:d9:1d:59:fb:6c:5f:d8:3b:a9:
31:68:0b:57:b8:e9:46:09:99:89:0f:d7:a2:27:f3:
57:21:54:a5:74:94:3a:f5:24:3e:85:e6:2c:a5:c6:
09:a6:7e:e9:c2:ea:08:d0:fa:01:14:ca:8a:be:0e:
82:b2:74:0f:bc:05:bc:2d:05:7c:31:cc:20:70:91:
f8:91:0f:e6:fd:b4:27:7e:dc:ae:cd:40:0f:15:ec:
d3:ee:0c:75:4f:0d:bb:7a:2b:0c:8f:89:63:8c:07:
a6:22:0f:5c:6e:fb:7d:23:b3:6b:77:80:28:cd:88:
1f:de:3d:7c:96:c0:1e:27:e7:a0:18:a1:40:60:4d:
ca:fd:16:d2:11:26:87:0a:fd:65:3a:38:07:be:1b:
8b:ab:9a:be:51:43:28:6e:59:c9:e4:b8:61:2e:9f:
b5:dd:87:e1:c7:6f:be:2a:8d:a2:d9:f2:24:11:cb:
52:93:b1:db:79:bb:49:74:0c:e7:a9:7e:e2:c3:db:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:7E:A3:D5:94:73:99:99:B1:E9:AA:26:BB:89:0A:43:46:76:D2
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8XV-o9WUc5mZsemqJruJCkNGdtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.146.0/23
Signature Algorithm: sha256WithRSAEncryption
85:8f:06:d5:b4:2a:fa:9a:9c:95:37:ee:de:60:a2:0d:30:7f:
a6:2a:d7:8b:2a:9f:9a:d6:cc:19:a3:f7:10:c0:c8:6b:7d:58:
86:b2:f0:53:99:a1:19:6c:c9:49:58:e8:a1:1a:0d:4d:8d:a7:
43:e6:07:23:21:1c:37:61:90:b3:58:ac:3d:d9:f5:43:4b:27:
41:d3:45:85:a6:24:58:1e:2f:d6:e7:40:5e:c5:4f:1e:94:a5:
20:e2:0c:74:0f:24:34:45:60:51:05:b9:2f:36:b3:0e:9c:42:
88:6e:e0:8c:c9:63:51:26:43:64:e1:16:25:6b:5a:96:ad:da:
1a:9e:28:3e:7d:3c:ab:f0:7d:af:02:79:3a:92:17:1f:ee:7e:
0d:7b:33:58:ee:8f:34:a9:0e:27:b3:30:3d:6a:83:e0:18:03:
04:1c:7f:70:22:9f:ef:f8:24:d3:44:22:e8:00:61:bb:fa:75:
40:dc:3c:e6:f8:24:0f:81:ca:af:23:ac:2f:ad:8b:ee:d9:bd:
af:9a:97:be:86:0a:6b:5a:da:34:5d:c5:7e:e9:9f:2e:51:a8:
c4:72:7a:7d:33:d2:5e:7c:a7:87:dd:f1:3e:86:7e:d1:ff:6c:
b7:d0:67:2e:19:07:67:ab:01:e9:5e:d6:0a:d2:ee:89:0f:97:
e2:21:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org