Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0HL5rIben9-28YcQRQ6_t1qkISA.roa
File: 0HL5rIben9-28YcQRQ6_t1qkISA.roa (raw, json)
Hash identifier: AZqY2FgfOzKczi/jwNQU4gIByQrdOgr3Zxzoe8eaEMw=
Subject key identifier: D0:72:F9:AC:86:DE:9F:DF:B6:F1:87:10:45:0E:BF:B7:5A:A4:21:20
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 018369D5E4AB5E64482ACF878E0608EB0DB2
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0HL5rIben9-28YcQRQ6_t1qkISA.roa
Signing time: Fri 23 Sep 2022 10:12:48 +0000
ROA not before: Fri 23 Sep 2022 10:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62178
IP address blocks: 94.229.85.0/24 maxlen: 24
94.229.81.0/24 maxlen: 24
94.229.82.0/24 maxlen: 24
94.229.83.0/24 maxlen: 24
94.229.84.0/24 maxlen: 24
94.229.80.0/24 maxlen: 24
94.229.88.0/24 maxlen: 24
94.229.89.0/24 maxlen: 24
94.229.90.0/24 maxlen: 24
94.229.86.0/24 maxlen: 24
94.229.87.0/24 maxlen: 24
94.229.91.0/24 maxlen: 24
94.229.95.0/24 maxlen: 24
94.229.92.0/24 maxlen: 24
94.229.93.0/24 maxlen: 24
94.229.94.0/24 maxlen: 24
2a05:2c0::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:d5:e4:ab:5e:64:48:2a:cf:87:8e:06:08:eb:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Sep 23 10:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d072f9ac86de9fdfb6f18710450ebfb75aa42120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:dc:06:7a:86:72:5e:d1:8a:ed:71:75:cf:
79:49:8f:88:ef:c1:de:ef:73:14:42:d9:14:6b:0f:
e1:f1:58:66:33:2e:92:3d:ba:f1:96:91:b2:b5:93:
e9:ae:8d:ad:71:68:3b:99:40:17:01:d8:40:9e:84:
c7:4d:c9:d6:e8:87:c2:6a:d2:38:28:dc:7b:0e:a3:
95:25:b7:b7:ad:dc:a8:11:4f:6d:d9:31:b2:e6:3b:
31:d4:1f:e6:55:22:dd:b5:4c:87:74:11:87:13:e9:
4e:94:70:4a:af:d8:b6:bb:73:2d:de:4c:c2:92:54:
54:69:e8:ca:f6:4a:cf:17:2c:55:6f:5a:66:8c:35:
33:89:9a:08:d3:82:28:82:05:11:11:17:73:74:de:
9c:d0:7f:39:3b:ef:3c:f2:9f:44:a0:22:fd:7b:6a:
cc:3d:35:11:16:bc:a6:40:67:75:10:11:f3:a6:71:
0f:4e:16:4d:eb:fd:e9:03:7a:fc:17:c3:37:d5:94:
f1:9c:c6:59:ae:5b:be:12:30:fc:27:fe:58:2f:a7:
f2:e7:07:87:d3:eb:da:94:b2:fa:66:66:e7:42:99:
7a:27:8d:c4:d2:7b:63:2c:df:22:d8:cc:ed:d6:1b:
b0:98:03:cb:3d:65:ac:00:dd:a0:e5:b6:49:83:c0:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:72:F9:AC:86:DE:9F:DF:B6:F1:87:10:45:0E:BF:B7:5A:A4:21:20
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0HL5rIben9-28YcQRQ6_t1qkISA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.80.0/20
IPv6:
2a05:2c0::/34
Signature Algorithm: sha256WithRSAEncryption
4e:21:00:72:01:68:fd:43:6c:c9:c6:d7:89:5a:1d:95:94:9c:
d6:bc:e4:5b:da:68:ef:a6:d7:dd:1c:a5:91:9b:22:5d:96:4b:
ca:19:54:94:70:74:11:5c:93:2d:c5:6b:24:ef:ba:5a:3f:bd:
80:65:90:7e:17:a6:15:a9:d6:88:89:47:6c:6d:f3:78:23:30:
55:f2:49:f2:9a:1b:dd:13:2a:31:b5:f4:15:08:0c:ed:8f:5a:
58:5e:0e:24:6e:cd:96:34:31:7d:07:12:34:dd:5c:8c:ea:24:
a7:72:ac:41:df:e8:b7:fb:11:a0:d7:d7:1b:b0:25:33:1c:6b:
d0:72:c8:e4:5a:73:fa:c7:23:83:b2:f9:8f:84:52:66:cf:d8:
5a:47:3a:19:ee:7e:00:d3:6e:46:de:af:ba:4b:52:15:0c:8f:
6a:bf:5d:0f:f8:2d:9d:19:0c:6b:c0:da:2a:74:83:f6:c8:64:
19:05:44:cd:b4:5c:90:3d:3c:00:d6:51:e1:b6:66:ab:30:13:
07:de:d6:24:28:c2:4f:00:fd:ee:5d:a5:78:9c:aa:09:cf:2c:
76:29:4f:37:fa:44:6b:76:66:2d:8d:47:8a:9f:88:65:0b:21:
e7:0f:04:11:27:e0:4d:65:76:be:25:d3:de:dc:bd:62:35:ec:
b0:fc:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-fra.rpki-client.org