Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0dHByaGxqppbGicYIrlxkR5kJm0.roa
File: 0dHByaGxqppbGicYIrlxkR5kJm0.roa (raw, json)
Hash identifier: R68PWaDxTJ7fwvGnMcbfLzeSrSgbIwAZFKsT4IuQTk0=
Subject key identifier: D1:D1:C1:C9:A1:B1:AA:9A:5B:1A:27:18:22:B9:71:91:1E:64:26:6D
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 305BE1C2
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0dHByaGxqppbGicYIrlxkR5kJm0.roa
Signing time: Sat 01 Jan 2022 04:59:07 +0000
ROA not before: Sat 01 Jan 2022 04:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62178
IP address blocks: 94.229.81.0/24 maxlen: 24
94.229.82.0/24 maxlen: 24
94.229.83.0/24 maxlen: 24
94.229.84.0/24 maxlen: 24
94.229.85.0/24 maxlen: 24
94.229.80.0/24 maxlen: 24
94.229.88.0/24 maxlen: 24
94.229.89.0/24 maxlen: 24
94.229.90.0/24 maxlen: 24
94.229.91.0/24 maxlen: 24
94.229.86.0/24 maxlen: 24
94.229.87.0/24 maxlen: 24
94.229.95.0/24 maxlen: 24
94.229.92.0/24 maxlen: 24
94.229.93.0/24 maxlen: 24
94.229.94.0/24 maxlen: 24
2a05:2c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811327938 (0x305be1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Jan 1 04:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1d1c1c9a1b1aa9a5b1a271822b971911e64266d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:47:c8:58:b8:4f:f2:10:f9:0e:5a:7e:df:
10:6e:f0:8a:20:50:b6:60:d7:c2:e2:37:b0:7e:a3:
b6:21:be:6a:22:f9:d9:43:fa:e2:ea:0b:ef:f5:91:
14:49:aa:2f:1b:98:0a:c7:8e:1f:62:9e:76:3c:4a:
5d:a8:59:91:21:99:a0:32:34:8a:7a:0b:4d:54:ce:
4a:1a:d1:84:ce:2e:b1:68:4d:c5:56:e3:1f:9a:33:
bd:6a:68:e2:ad:00:f6:24:b4:c6:b1:ac:74:6a:aa:
c7:fe:2f:96:0b:9f:65:3b:05:75:d3:cc:34:3b:33:
d7:9d:60:50:49:b3:26:22:5a:d5:16:e4:15:81:e7:
82:06:e3:34:a0:e1:27:c3:60:8b:60:66:aa:da:3e:
fa:52:09:d7:9e:c3:6a:5d:84:54:63:f7:13:0c:58:
03:35:07:eb:c7:33:38:14:1c:22:8e:f7:a3:01:c3:
67:d2:89:22:d2:98:5c:7f:39:98:a5:fd:c5:e6:4d:
bb:95:6e:2e:ff:8a:d0:a9:df:96:9e:48:45:65:4c:
60:44:04:43:c8:7c:92:b0:1a:00:a4:be:32:5a:a3:
c9:f7:ad:fd:44:03:f7:0e:2c:d0:7d:64:af:77:41:
fd:ad:39:85:c2:9b:a0:a6:fa:f2:b2:be:73:89:97:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:C1:C9:A1:B1:AA:9A:5B:1A:27:18:22:B9:71:91:1E:64:26:6D
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0dHByaGxqppbGicYIrlxkR5kJm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.80.0/20
IPv6:
2a05:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:ed:be:1d:2c:0a:85:24:fa:a0:de:7e:ce:9f:a2:6a:b9:a5:
7f:4a:62:08:1f:c2:a2:11:1b:80:e5:02:96:6a:a9:ef:bb:be:
1b:d4:55:2d:b2:4e:55:c8:3c:f1:b0:7a:e6:34:3a:9c:96:e8:
7b:1d:de:bc:fb:d5:a2:eb:e4:13:b9:03:44:e6:3b:cf:1e:16:
ce:3c:08:3e:61:91:fc:d9:0b:36:c3:8a:da:f9:d6:2d:81:e6:
79:bf:2d:78:a0:fd:8b:81:6b:67:40:91:f2:c0:c4:4f:6f:66:
f2:69:c0:e0:0f:4a:c3:d0:a4:7b:90:a3:b6:0a:60:33:48:59:
cf:68:f3:08:e4:4f:15:27:79:d8:ea:66:6a:ea:f1:55:0f:84:
1d:07:87:d9:ba:c0:5d:8f:75:a8:78:6b:4a:6f:75:ca:e1:32:
8c:dd:2c:68:c3:de:04:6e:08:fb:89:f3:23:1d:d4:f3:8b:94:
28:43:21:f2:6b:03:39:bc:33:1c:4e:d9:40:24:02:4b:c6:26:
b7:7d:5f:78:1f:7a:02:2a:60:a7:6e:b0:04:98:fe:f6:17:df:
b8:f4:76:0a:b6:bb:e1:72:3d:86:92:ae:13:2f:7b:73:bb:63:
2f:95:cb:c1:70:91:81:5d:fb:18:d5:e2:3b:55:0e:2c:2b:39:
cc:7a:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:04 2024 by rpki-client on console-ams.rpki-client.org