Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/kqAWnTpk6Iwo_j6sqqTjwzydTm0.roa
File: kqAWnTpk6Iwo_j6sqqTjwzydTm0.roa (raw, json)
Hash identifier: 2GUvjYbVipbqHVPjY3K6+MA8JwCoy9xo1F0XgM1b8cY=
Subject key identifier: 92:A0:16:9D:3A:64:E8:8C:28:FE:3E:AC:AA:A4:E3:C3:3C:9D:4E:6D
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01849F7C57BDF74A07B4E915FDC5C9466927
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/kqAWnTpk6Iwo_j6sqqTjwzydTm0.roa
Signing time: Tue 22 Nov 2022 13:17:16 +0000
ROA not before: Tue 22 Nov 2022 13:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199234
IP address blocks: 78.159.94.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:7c:57:bd:f7:4a:07:b4:e9:15:fd:c5:c9:46:69:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Nov 22 13:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92a0169d3a64e88c28fe3eacaaa4e3c33c9d4e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:53:af:eb:6f:b1:92:e9:b4:8c:34:c1:15:af:
01:94:6d:cf:46:19:74:37:22:3f:c7:c9:aa:23:d1:
12:8a:02:6b:fd:4b:ac:5b:22:cb:1c:28:20:07:12:
80:9c:50:39:82:4d:bb:f1:c8:30:41:c7:75:6b:68:
f8:98:ca:f2:78:c4:5a:a0:72:ab:07:c7:90:9a:3c:
3d:b1:9b:72:61:11:fa:f1:11:9a:5d:e1:2d:49:91:
77:1d:a1:bd:cc:3a:90:42:56:46:3c:02:f3:c1:c1:
38:be:d0:0f:5a:ad:54:a5:3c:2e:0b:d8:92:55:dc:
0d:c0:29:fd:15:6a:09:0b:1d:de:e2:88:31:d8:a4:
51:d2:5d:97:c3:cd:60:d3:67:e5:db:c1:75:28:48:
4f:54:ed:45:fe:a7:47:00:a7:dd:c0:60:35:bc:6b:
40:e4:a8:61:07:75:65:03:4d:9e:86:72:ff:e1:a0:
0e:93:05:cd:88:b4:45:f2:79:56:14:47:2b:29:5c:
82:46:64:9a:ec:1c:f7:6a:16:08:6e:e0:96:66:8a:
fb:5d:bd:a5:48:32:c8:62:88:98:33:18:53:29:6f:
b0:bb:08:75:fc:1d:21:b3:9c:41:df:7f:4c:15:36:
fc:7d:53:d9:db:9d:97:92:91:54:92:01:08:5e:ac:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A0:16:9D:3A:64:E8:8C:28:FE:3E:AC:AA:A4:E3:C3:3C:9D:4E:6D
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/kqAWnTpk6Iwo_j6sqqTjwzydTm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.94.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:e8:10:c7:54:65:52:d5:93:0b:2a:d7:ac:5b:1b:63:7b:a2:
21:cd:ea:9f:de:03:5a:88:57:26:50:0d:26:c2:cd:b2:a6:8c:
8a:86:a9:13:5d:f0:c0:df:88:e0:cf:d5:3e:da:a1:7f:15:dc:
79:64:a4:ac:c2:1a:4d:da:07:da:1d:36:71:41:c1:c0:83:62:
c4:d6:4a:85:71:8e:20:66:4d:2a:e3:6e:4a:03:de:fd:48:34:
7d:93:f8:37:b6:b2:60:90:0d:a8:2b:60:a4:80:b1:70:5e:14:
09:6e:6b:06:ae:c8:6f:dc:ba:74:d8:1b:27:e8:9b:17:45:52:
2a:91:f3:92:63:95:01:b6:65:88:75:f0:51:da:d2:8e:6a:55:
75:f6:ce:ad:81:58:6e:ca:16:be:94:85:d5:79:3c:ab:dd:2e:
64:eb:d9:32:28:1b:be:62:2d:ec:ab:ca:95:aa:41:1a:c6:b0:
bd:36:22:62:de:84:e5:1a:d1:8d:eb:6a:68:57:0e:b1:26:10:
72:2d:d2:d1:f7:73:a3:f8:d1:52:3f:fd:a5:ab:c1:c0:aa:a9:
70:91:80:90:d1:a0:51:9c:10:7f:66:05:95:ac:69:ec:a3:0b:
73:c2:8a:f9:8b:47:36:27:c8:26:84:17:3c:af:5f:19:22:fd:
66:63:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:44 2024 by rpki-client on console-ams.rpki-client.org