Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/yJCJvf3cBv1OGUfA6h96inCahTk.roa
File: yJCJvf3cBv1OGUfA6h96inCahTk.roa (raw, json)
Hash identifier: egv3VwHKXbfYUZaj/CFkw5eD51PHvxwNr3actg18Lhs=
Subject key identifier: C8:90:89:BD:FD:DC:06:FD:4E:19:47:C0:EA:1F:7A:8A:70:9A:85:39
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 0183A82C83C9A66045E7B51F08EF08354A78
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/yJCJvf3cBv1OGUfA6h96inCahTk.roa
Signing time: Wed 05 Oct 2022 12:43:53 +0000
ROA not before: Wed 05 Oct 2022 12:43:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42351
IP address blocks: 94.101.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:2c:83:c9:a6:60:45:e7:b5:1f:08:ef:08:35:4a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Oct 5 12:43:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c89089bdfddc06fd4e1947c0ea1f7a8a709a8539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:bf:32:f2:48:90:f4:a4:fe:dc:41:49:f4:
e6:eb:6f:06:7a:89:a7:f7:44:6c:71:2f:fe:7f:a9:
c1:1e:6e:96:fa:78:52:25:bd:84:3d:c0:b7:b5:68:
e3:5d:25:f8:ca:38:65:07:aa:7f:b0:90:b4:7a:f1:
6f:3a:9c:d9:6b:8b:3f:78:83:02:e6:77:0e:9b:1a:
62:67:4b:8f:4b:11:b7:68:7c:eb:8c:62:19:9a:7a:
93:f7:02:bd:6e:51:f0:58:58:fa:5f:be:3c:2b:39:
e1:c5:5b:e6:42:db:d4:7e:93:fa:d7:e6:23:42:fd:
a1:2e:ff:48:bd:5e:21:9d:c9:c6:5e:06:50:7d:15:
98:8f:4f:2c:60:ad:6d:a7:dc:ff:a0:21:4d:c6:d3:
27:a0:3b:47:ea:66:e4:15:db:66:7a:db:a9:b9:49:
f5:86:ed:9a:f1:eb:94:9d:60:54:e6:fd:46:7a:ce:
5c:80:a1:1f:be:88:12:b0:64:07:4f:9b:61:07:37:
54:6a:65:26:5b:88:13:ea:a4:56:d9:fd:aa:53:a4:
95:2b:59:9e:44:74:62:dd:99:44:7a:f3:91:13:1e:
43:a8:53:7c:2a:e8:78:74:36:e9:94:36:d5:8e:db:
b7:5a:9f:a2:c2:0b:94:31:eb:02:a3:75:8d:32:91:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:89:BD:FD:DC:06:FD:4E:19:47:C0:EA:1F:7A:8A:70:9A:85:39
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/yJCJvf3cBv1OGUfA6h96inCahTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.200.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:b6:c8:14:42:f7:ce:c0:bf:6f:22:70:af:0f:e5:82:3a:3c:
69:02:26:a1:e6:60:e4:62:ac:2b:72:3a:b4:61:d7:ea:7f:39:
85:5e:bf:4a:61:66:d1:7d:7d:2c:1d:14:93:0d:36:b6:38:3e:
91:c1:d6:41:3f:31:af:37:4a:10:0e:bd:30:40:80:2a:7b:12:
42:c5:4e:7f:6e:2f:5e:ca:9e:b1:9f:3d:6b:4f:3a:2e:1f:9d:
9b:76:88:cf:58:72:4d:98:a2:63:65:bd:2e:7c:57:49:dd:cd:
49:42:36:ff:ff:d5:ff:ea:0d:90:26:0f:a8:68:49:82:91:10:
65:a9:29:9b:06:34:fb:f8:96:58:24:c8:dd:7c:45:33:1a:3a:
99:c3:97:fc:fc:2e:a6:1b:34:ca:c7:05:80:99:e4:34:14:bb:
3c:0b:a6:f1:49:43:7c:4c:13:ce:95:d6:6d:11:8b:81:35:ff:
75:56:32:70:00:f8:4a:4a:c8:3f:dc:06:47:2c:92:cd:ae:68:
fa:69:31:15:32:a4:c4:eb:29:b9:c4:f9:1f:25:cb:4d:3f:04:
14:9e:ba:27:a5:1c:07:e3:67:59:9a:e5:8a:c2:5e:2c:45:05:
c2:8c:98:10:54:e5:a4:2b:da:39:4c:d5:45:1c:e1:99:83:22:
ac:01:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:08 2024 by rpki-client on console-fra.rpki-client.org