Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/qMePbMcmRpff681RjwuIo8a9Isw.roa
File: qMePbMcmRpff681RjwuIo8a9Isw.roa (raw, json)
Hash identifier: V0bpe3LIn5SmYHgMDp88S80yN9I6WOEKfNk/qvmJF80=
Subject key identifier: A8:C7:8F:6C:C7:26:46:97:DF:EB:CD:51:8F:0B:88:A3:C6:BD:22:CC
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 018365268AB6B6CD3C6FC11DD8D8D11AB241
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/qMePbMcmRpff681RjwuIo8a9Isw.roa
Signing time: Thu 22 Sep 2022 12:22:48 +0000
ROA not before: Thu 22 Sep 2022 12:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211820
IP address blocks: 94.154.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:26:8a:b6:b6:cd:3c:6f:c1:1d:d8:d8:d1:1a:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Sep 22 12:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8c78f6cc7264697dfebcd518f0b88a3c6bd22cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:79:bf:90:14:dc:5e:a1:3f:b3:28:77:4f:
ca:51:32:8b:74:35:cf:0d:7a:ea:ec:1e:7d:6c:06:
8e:47:f1:00:0c:49:82:ca:ea:d6:25:e4:1c:36:2e:
f2:1c:b5:05:39:00:e4:3e:40:3b:a1:34:a0:2f:ed:
b5:56:62:d8:35:63:f8:9b:0d:3c:f3:51:eb:fb:ec:
fe:9d:65:ef:ac:2a:e9:8b:5b:83:cd:8a:26:9d:5f:
6f:6d:9c:a5:2f:d2:5c:64:b6:eb:ab:96:da:6d:39:
b9:a4:9f:61:4a:39:31:e1:0e:2d:8a:32:23:1a:00:
fb:ce:7b:2e:5d:0f:d8:48:e6:8e:84:bb:dc:a6:b7:
04:04:7d:06:c0:c2:a7:24:e0:e1:50:4c:37:ef:b4:
76:2b:3b:05:1d:2b:f4:0a:40:7f:50:5a:83:ea:02:
b4:e2:cb:3d:f0:3d:bd:0d:b7:d4:65:26:2a:64:0a:
a7:c3:98:41:31:1b:bf:a1:86:3a:21:ae:40:53:1a:
44:a7:52:93:c5:10:b3:c6:40:d3:0a:98:8c:8d:d9:
9a:71:6f:0a:86:d9:33:8f:3a:59:84:55:f0:cc:5b:
f1:ec:ba:b9:bb:23:31:e1:b8:ed:3b:82:8b:46:4e:
0e:c1:ab:40:f6:96:50:5a:ac:dc:32:6d:e5:a2:68:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C7:8F:6C:C7:26:46:97:DF:EB:CD:51:8F:0B:88:A3:C6:BD:22:CC
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/qMePbMcmRpff681RjwuIo8a9Isw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.5.0/24
Signature Algorithm: sha256WithRSAEncryption
00:48:10:ca:5e:72:4e:6b:31:5e:c1:18:2b:f9:1f:10:b3:3d:
d7:d2:10:91:b7:6c:d4:07:89:16:f3:16:a9:04:7f:8d:fe:8d:
a9:10:88:4d:27:7e:de:2a:10:01:0c:df:67:d9:c1:28:27:4a:
6a:7c:b6:01:0e:0a:1d:c4:bf:7c:ed:ba:3a:31:ce:51:5b:2d:
7e:3d:6d:97:c7:f5:ae:e9:02:7d:e3:0f:59:f7:ea:c3:33:54:
ca:fe:43:b0:cc:dd:55:bf:2b:83:b4:9c:a4:30:af:6c:9d:66:
4a:ad:46:cd:f2:36:29:96:b8:bb:18:ff:be:54:1d:60:4e:4a:
5a:89:3d:59:52:ee:b3:00:9c:7c:ff:dc:3a:8b:5d:46:4b:e7:
b4:bb:36:c4:35:93:dc:de:82:0d:fb:67:b0:ae:d4:61:d3:b1:
bf:ca:0c:20:4a:e5:a0:92:d2:41:b1:3b:5e:b9:77:6f:9f:da:
dc:a6:04:4d:f8:a6:62:c9:c5:3d:32:2c:b3:01:17:94:53:c0:
4e:17:72:01:5f:e0:81:1f:1e:be:32:db:6f:74:93:ef:ef:95:
30:de:2b:83:05:e6:a9:28:16:f1:9a:18:e0:09:cf:cb:13:cd:
b6:ab:31:dd:4b:eb:01:16:d9:57:a3:2d:98:f9:24:ca:48:e9:
5f:aa:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:07 2023 by rpki-client on console-ams.rpki-client.org