Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/T8oRE_zrfR7q_CMGX_6PariAnAM.roa
File: T8oRE_zrfR7q_CMGX_6PariAnAM.roa (raw, json)
Hash identifier: Z0ma+ExR5Ez4kO7eAUzijoglg4cipFhJaN8CQDfDlG4=
Subject key identifier: 4F:CA:11:13:FC:EB:7D:1E:EA:FC:23:06:5F:FE:8F:6A:B8:80:9C:03
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 19F7FA8C
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/T8oRE_zrfR7q_CMGX_6PariAnAM.roa
Signing time: Tue 10 May 2022 14:35:02 +0000
ROA not before: Tue 10 May 2022 14:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8068
IP address blocks: 94.245.84.0/24 maxlen: 24
2a01:111:202d::/48 maxlen: 48
2a01:111:202e::/48 maxlen: 48
2a01:111:2003::/48 maxlen: 48
2a01:111:202c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435681932 (0x19f7fa8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: May 10 14:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fca1113fceb7d1eeafc23065ffe8f6ab8809c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:7d:4c:53:6d:90:5d:72:c2:5b:fd:6f:04:
5d:25:00:ff:f9:ed:b6:2f:15:98:73:fb:71:ed:96:
9b:f5:bb:41:b6:d3:08:4d:1c:55:da:3a:35:82:11:
bd:22:78:88:7e:34:30:13:6f:e7:df:5c:30:9f:31:
b9:ed:bf:b2:1d:ea:e5:bb:c2:7f:a8:c4:f4:d1:33:
99:40:fd:98:59:12:d7:88:8d:35:2c:ba:66:67:8a:
11:c0:41:a7:d9:5a:23:2a:05:4d:84:83:1d:d3:c7:
03:ad:c7:4d:e4:34:d2:d0:b9:76:9f:8f:69:d7:10:
a2:46:09:3f:60:a9:70:56:0a:f2:8b:21:66:1d:49:
cb:8a:b0:32:29:4c:89:7c:cb:41:5a:08:dd:d0:a9:
44:16:2b:f0:56:7f:62:51:41:cd:f5:de:6c:d7:85:
fb:93:d0:f2:fb:91:53:22:55:12:28:81:9b:91:57:
35:8b:83:78:4a:b3:07:b7:47:a3:01:22:2f:6a:2e:
b4:65:b2:a8:4a:5b:31:49:4e:aa:ec:2d:3b:be:c1:
8f:f3:8f:42:eb:08:ff:98:07:de:2c:52:24:c1:7a:
5d:48:f8:c7:44:3f:99:77:3d:a9:a4:40:c6:d3:94:
3d:57:52:e4:8f:fb:e5:c0:c5:a9:8e:66:10:8f:81:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CA:11:13:FC:EB:7D:1E:EA:FC:23:06:5F:FE:8F:6A:B8:80:9C:03
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/T8oRE_zrfR7q_CMGX_6PariAnAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.245.84.0/24
IPv6:
2a01:111:2003::/48
2a01:111:202c::-2a01:111:202e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:52:96:34:6a:ec:b2:c3:97:7a:76:34:a2:5e:68:6d:88:0e:
fa:b8:a4:7f:0c:0d:b5:e2:10:d5:d1:7c:67:e4:54:9c:2c:e6:
2f:2e:f2:6b:e5:cb:64:91:43:b2:14:4f:9f:d5:17:c9:d1:4b:
66:53:80:c9:c4:84:5c:ff:b3:19:36:d0:e4:0a:0f:1d:96:15:
65:49:73:ac:0d:b4:9d:5d:90:e2:48:b2:91:1c:f9:1e:85:24:
f2:c7:64:80:23:71:a1:d4:14:e2:06:8b:e5:08:f5:db:af:41:
47:0b:5e:31:55:29:80:6c:97:41:34:9f:87:2a:32:9c:08:f8:
2a:df:1f:fe:d3:f8:fe:84:cf:ad:6c:1a:cf:0b:68:92:01:c0:
d5:64:e9:2b:94:22:01:1b:1d:4c:b6:54:d1:e4:66:09:23:c9:
5b:6c:1e:a7:e8:35:25:78:e5:da:0b:a4:19:c1:1b:5f:91:6c:
8f:e8:6a:f3:71:18:71:cd:58:db:89:5c:b2:2d:0d:b8:9e:a2:
d3:5d:cd:b9:b4:96:14:92:18:ae:06:03:6a:cc:b9:50:6a:e2:
ba:92:34:e2:85:7d:88:a5:15:b3:38:ed:be:6c:84:d3:07:3c:
b4:7f:64:9b:7b:17:90:83:ca:62:6d:41:ad:e0:b1:e4:2a:b4:
e7:f2:e7:82
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIEGff6jDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Y2U2OGRhZjVmMDg5NDU2YzBlMWQwMjI0NTM5MzUzMWFjNWI4ZmNiMB4XDTIyMDUx
MDE0MzUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGZjYTExMTNmY2Vi
N2QxZWVhZmMyMzA2NWZmZThmNmFiODgwOWMwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKfpfUxTbZBdcsJb/W8EXSUA//ntti8VmHP7ce2Wm/W7QbbT
CE0cVdo6NYIRvSJ4iH40MBNv599cMJ8xue2/sh3q5bvCf6jE9NEzmUD9mFkS14iN
NSy6ZmeKEcBBp9laIyoFTYSDHdPHA63HTeQ00tC5dp+PadcQokYJP2CpcFYK8osh
Zh1Jy4qwMilMiXzLQVoI3dCpRBYr8FZ/YlFBzfXebNeF+5PQ8vuRUyJVEiiBm5FX
NYuDeEqzB7dHowEiL2outGWyqEpbMUlOquwtO77Bj/OPQusI/5gH3ixSJMF6XUj4
x0Q/mXc9qaRAxtOUPVdS5I/75cDFqY5mEI+Bi7UCAwEAAaOCAi4wggIqMB0GA1Ud
DgQWBBRPyhET/Ot9Hur8IwZf/o9quICcAzAfBgNVHSMEGDAWgBR85o2vXwiUVsDh
0CJFOTUxrFuPyzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZPYU5yMThJbEZiQTRkQWlSVGsxTWF4Ymo4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvZWMwYjg5LTFlNjgtNDVhMC04YjkzLTEzYTA2YTI2OWFhOC8x
L1Q4b1JFX3pyZlI3cV9DTUdYXzZQYXJpQW5BTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
ZWMwYjg5LTFlNjgtNDVhMC04YjkzLTEzYTA2YTI2OWFhOC8xL2ZPYU5yMThJbEZi
QTRkQWlSVGsxTWF4Ymo4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBE
BggrBgEFBQcBBwEB/wQ1MDMwDAQCAAEwBgMEAF71VDAjBAIAAjAdAwcAKgEBESAD
MBIDBwIqAQERICwDBwAqAQERIC4wDQYJKoZIhvcNAQELBQADggEBAFhSljRq7LLD
l3p2NKJeaG2IDvq4pH8MDbXiENXRfGfkVJws5i8u8mvly2SRQ7IUT5/VF8nRS2ZT
gMnEhFz/sxk20OQKDx2WFWVJc6wNtJ1dkOJIspEc+R6FJPLHZIAjcaHUFOIGi+UI
9duvQUcLXjFVKYBsl0E0n4cqMpwI+CrfH/7T+P6Ez61sGs8LaJIBwNVk6SuUIgEb
HUy2VNHkZgkjyVtsHqfoNSV45doLpBnBG1+RbI/oavNxGHHNWNuJXLItDbieotNd
zbm0lhSSGK4GA2rMuVBq4rqSNOKFfYilFbM47b5shNMHPLR/ZJt7F5CDymJtQa3g
seQqtOfy54I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org