Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sAgA9V34KWpRZZnZ9Ec_oHeXlsA.roa
File: sAgA9V34KWpRZZnZ9Ec_oHeXlsA.roa (raw, json)
Hash identifier: 3HcXFI8aTTyVP//ET9lqQ3MMQRfxBO6giP4cOzCLtzs=
Subject key identifier: B0:08:00:F5:5D:F8:29:6A:51:65:99:D9:F4:47:3F:A0:77:97:96:C0
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0184E1B64151DA04A6A14A22980DB735355E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sAgA9V34KWpRZZnZ9Ec_oHeXlsA.roa
Signing time: Mon 05 Dec 2022 09:55:28 +0000
ROA not before: Mon 05 Dec 2022 09:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39135
IP address blocks: 94.72.156.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:b6:41:51:da:04:a6:a1:4a:22:98:0d:b7:35:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Dec 5 09:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b00800f55df8296a516599d9f4473fa0779796c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:60:a2:12:f0:db:d0:c0:24:62:37:f4:20:
9e:96:ca:77:19:4e:65:4c:e5:55:7e:5f:5c:3b:42:
a0:b4:4d:8b:d4:9f:16:7b:41:0c:93:0e:88:1b:4a:
3c:34:6c:08:20:12:ff:8b:52:4a:76:fa:b4:bd:02:
0a:d9:e7:a6:03:bf:2c:64:90:72:d6:80:0a:35:02:
f0:f9:b3:46:ce:74:4e:95:33:a2:e7:bc:c1:c9:44:
ac:c6:b9:41:98:7f:ef:af:e2:50:9b:6b:00:5f:58:
c0:3a:a0:9a:9c:37:e9:19:b9:16:60:97:28:0a:81:
a2:28:b8:5a:65:7e:a5:e2:dc:93:85:a6:0c:11:b0:
0e:83:15:6b:02:6f:b5:65:3e:40:10:b8:9a:e8:d0:
40:ae:87:b8:80:58:27:b9:00:3d:9b:d3:c0:33:96:
6c:9c:45:a3:95:08:ad:d6:99:38:c9:c7:e8:93:86:
03:44:b0:ff:51:67:ba:ab:cd:a0:e1:ee:d1:4a:8d:
d5:5d:76:ab:f0:9c:7e:a9:f2:43:9e:0a:95:7e:48:
19:22:eb:41:03:8f:63:bc:f6:a0:66:0d:a8:ee:d3:
54:72:91:35:1d:7f:79:17:c7:5b:8d:fc:76:79:3a:
fe:18:4d:1d:1d:5d:ac:12:0d:13:04:ac:37:5d:aa:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:08:00:F5:5D:F8:29:6A:51:65:99:D9:F4:47:3F:A0:77:97:96:C0
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sAgA9V34KWpRZZnZ9Ec_oHeXlsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.156.0/23
Signature Algorithm: sha256WithRSAEncryption
69:a0:3d:29:10:68:ab:ec:50:38:2c:de:6c:ab:8b:f8:6a:54:
48:ae:4a:5a:96:cd:ec:2b:22:bf:ec:d3:7e:05:fe:45:42:a0:
4b:37:53:9c:27:df:89:4f:89:81:ef:91:4a:2b:23:24:20:0f:
79:2a:7d:d1:80:15:3d:8f:51:73:59:49:e8:d9:ec:f6:54:46:
fe:db:91:f3:b3:f6:24:ca:83:0d:e9:26:66:05:c6:82:29:17:
d0:43:22:24:3f:96:c7:e1:22:62:43:7e:8e:be:d5:0f:25:37:
7d:8b:37:7d:b2:75:69:62:19:5c:45:7f:f4:d5:07:fb:b4:b9:
8d:8e:2c:82:d8:91:66:ba:06:eb:f8:49:03:fb:0e:fe:7f:e9:
4e:e1:01:cb:ad:9b:52:55:bb:93:41:d8:dd:fa:83:fa:1e:c9:
13:f1:ab:e9:28:ab:c5:ee:b7:1e:99:db:56:9e:51:b7:ba:89:
ff:03:3b:63:c8:ef:ea:9a:53:59:7a:84:46:4c:6c:c4:d7:b0:
81:c0:a4:06:eb:d3:02:11:db:1d:76:2d:bd:2e:27:c0:e9:e8:
90:5c:e5:d8:ca:f7:81:83:9f:b9:3b:8e:09:cf:66:61:dd:bb:
37:78:8a:96:5c:75:09:6d:b7:30:31:c8:61:0a:af:bc:96:08:
e9:66:48:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYThtkFR2gSmoUoimA23NTVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjIxMjA1MDk1NTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDA4MDBmNTVkZjgyOTZhNTE2NTk5ZDlmNDQ3M2ZhMDc3OTc5NmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglZgohLw29DAJGI39CCelsp3GU5l
TOVVfl9cO0KgtE2L1J8We0EMkw6IG0o8NGwIIBL/i1JKdvq0vQIK2eemA78sZJBy
1oAKNQLw+bNGznROlTOi57zByUSsxrlBmH/vr+JQm2sAX1jAOqCanDfpGbkWYJco
CoGiKLhaZX6l4tyThaYMEbAOgxVrAm+1ZT5AELia6NBAroe4gFgnuQA9m9PAM5Zs
nEWjlQit1pk4ycfok4YDRLD/UWe6q82g4e7RSo3VXXar8Jx+qfJDngqVfkgZIutB
A49jvPagZg2o7tNUcpE1HX95F8dbjfx2eTr+GE0dHV2sEg0TBKw3Xar9OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAIAPVd+ClqUWWZ2fRHP6B3l5bAMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvc0FnQTlWMzRLV3BSWlpuWjlFY19vSGVYbHNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXkicMA0G
CSqGSIb3DQEBCwUAA4IBAQBpoD0pEGir7FA4LN5sq4v4alRIrkpals3sKyK/7NN+
Bf5FQqBLN1OcJ9+JT4mB75FKKyMkIA95Kn3RgBU9j1FzWUno2ez2VEb+25Hzs/Yk
yoMN6SZmBcaCKRfQQyIkP5bH4SJiQ36OvtUPJTd9izd9snVpYhlcRX/01Qf7tLmN
jiyC2JFmugbr+EkD+w7+f+lO4QHLrZtSVbuTQdjd+oP6HskT8avpKKvF7rcemdtW
nlG3uon/AztjyO/qmlNZeoRGTGzE17CBwKQG69MCEdsddi29LifA6eiQXOXYyveB
g5+5O44Jz2Zh3bs3eIqWXHUJbbcwMchhCq+8lgjpZkgs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org