Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/OSdW9PUtHIuG0ei-DHFfkRkpet8.roa
File: OSdW9PUtHIuG0ei-DHFfkRkpet8.roa (raw, json)
Hash identifier: qtwbVPG5dX3l2wf9WG5O40AemzbLu6mxzqazsUogovQ=
Subject key identifier: 39:27:56:F4:F5:2D:1C:8B:86:D1:E8:BE:0C:71:5F:91:19:29:7A:DF
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 395A75BD
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/OSdW9PUtHIuG0ei-DHFfkRkpet8.roa
Signing time: Wed 25 May 2022 18:30:13 +0000
ROA not before: Wed 25 May 2022 18:30:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48417
IP address blocks: 94.247.32.0/21 maxlen: 24
185.21.160.0/23 maxlen: 32
185.21.160.0/22 maxlen: 32
2a02:db8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962229693 (0x395a75bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: May 25 18:30:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=392756f4f52d1c8b86d1e8be0c715f9119297adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:4d:17:cc:b2:73:de:82:e1:5a:8a:94:e7:
87:a1:74:c4:3e:83:6e:65:dd:0f:a7:66:7a:2d:c8:
cc:2a:42:93:1e:40:bb:61:cb:84:28:4e:3c:2b:50:
10:b7:67:db:63:7a:6f:1b:fc:e8:c0:fd:35:f5:c7:
9d:f0:28:c2:15:5c:7e:de:f8:fa:79:3f:39:0c:77:
fe:84:b5:09:c1:79:ff:49:aa:c9:5a:5c:57:fe:57:
73:85:7c:0e:74:27:41:74:10:d0:b3:1c:55:cb:dc:
c8:c1:b4:42:f0:85:e4:78:10:70:2a:84:e9:93:9f:
22:86:7c:36:88:15:91:96:42:88:29:0d:53:b3:aa:
b7:33:d6:99:39:58:ce:3d:4f:38:a9:48:c6:aa:bf:
86:c1:43:fb:9f:98:d5:c5:8e:69:50:9b:85:92:f3:
2b:cc:25:5b:8c:3c:31:7b:87:b4:60:4d:3b:49:8e:
7f:4f:6b:82:61:20:a4:73:ee:c1:4a:0f:4a:94:aa:
67:73:d8:41:b0:5f:f0:df:33:69:07:9e:58:6a:69:
85:1f:a5:66:b7:99:a7:e3:64:35:3f:c9:b4:cd:ae:
f6:7c:41:1c:71:1c:33:7b:0c:18:ec:e8:e4:72:e6:
f6:44:5c:c8:10:a5:26:a3:7d:f6:8a:06:47:0b:d7:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:27:56:F4:F5:2D:1C:8B:86:D1:E8:BE:0C:71:5F:91:19:29:7A:DF
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/OSdW9PUtHIuG0ei-DHFfkRkpet8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.32.0/21
185.21.160.0/22
IPv6:
2a02:db8::/32
Signature Algorithm: sha256WithRSAEncryption
38:93:b5:ae:03:f6:4e:2c:51:25:d6:5b:90:e4:33:33:06:42:
da:6e:ce:cc:7f:47:62:95:73:7b:24:82:50:f1:4a:a8:c7:6c:
8c:c3:13:60:02:fe:a0:d3:93:4d:3a:61:9c:d6:05:b7:88:db:
b4:00:52:40:75:16:b7:7d:e8:df:90:20:0b:ef:9a:a5:de:19:
24:9f:9d:3b:91:de:bd:1d:58:2f:9c:e3:79:57:22:61:d9:16:
19:c0:32:c6:51:86:c8:cc:8a:ec:82:17:92:ee:a9:92:fb:9c:
1f:f0:71:d1:ee:a6:1e:bb:a1:a6:88:5b:a9:9a:5e:cf:6a:42:
ae:55:75:48:13:a3:d5:56:1c:cb:d3:7d:77:a9:09:bd:c8:70:
82:93:ad:70:ff:62:67:ce:d1:95:a9:1f:7b:68:7c:2b:9c:c3:
e7:da:45:a3:de:93:02:87:50:7c:f1:e4:a5:04:a0:0b:4e:fc:
c1:5a:00:73:11:01:12:b7:38:68:06:fc:e2:c8:c3:b0:df:eb:
79:b7:58:db:79:a9:70:20:1c:10:a9:c1:f6:4e:71:89:ad:b2:
6e:15:0a:c6:9d:98:09:fe:64:e0:60:77:3b:8d:2f:10:96:0c:
5e:62:92:e6:82:28:12:dd:92:d0:a1:9e:69:84:97:72:63:2d:
38:04:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:17 2024 by rpki-client on console-ams.rpki-client.org