Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/uKd9oeyGMFWgjffMlt8JEcuQ7mA.roa
File: uKd9oeyGMFWgjffMlt8JEcuQ7mA.roa (raw, json)
Hash identifier: yFtFv6xmhy6nnDTeyFKuY38BjQHm7qV4ksB29o/hXhk=
Subject key identifier: B8:A7:7D:A1:EC:86:30:55:A0:8D:F7:CC:96:DF:09:11:CB:90:EE:60
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 0C2A8676
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/uKd9oeyGMFWgjffMlt8JEcuQ7mA.roa
Signing time: Sat 01 Jan 2022 14:02:10 +0000
ROA not before: Sat 01 Jan 2022 14:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204455
IP address blocks: 94.154.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204113526 (0xc2a8676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Jan 1 14:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8a77da1ec863055a08df7cc96df0911cb90ee60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:a7:1c:ab:ec:cd:e4:0e:3e:93:64:8d:3e:
5d:22:42:73:29:fb:00:31:c8:99:df:52:e8:d3:6e:
17:1b:de:d5:98:3c:f2:e8:a9:42:6e:9c:f0:1f:ac:
82:c3:6a:51:32:ad:38:94:c8:42:23:5e:17:cb:24:
25:fc:e5:f0:af:ca:4c:a2:1b:5f:58:2c:94:9c:f4:
d4:4a:6e:72:d9:21:94:e1:20:08:9e:38:50:95:a3:
3c:d4:85:ab:3d:a2:b7:bd:e0:ee:63:f6:14:c9:41:
b8:ce:33:86:c9:02:a4:69:2e:ed:9b:33:93:6b:28:
eb:5f:36:db:97:3a:1f:d3:2a:9e:9d:e1:5f:ac:fe:
aa:01:92:79:25:fb:32:28:0b:48:a1:ad:37:9b:de:
48:d2:5b:69:62:a6:f2:10:4c:dc:2b:39:59:8d:46:
f2:5f:cd:0c:f9:ee:c1:61:3a:94:ca:d2:57:35:95:
f8:00:18:2c:cc:92:f2:9e:fb:38:9c:76:11:bb:e9:
72:fd:9b:01:33:7c:c3:72:c0:f2:58:51:61:3b:ae:
fe:44:ff:8d:cc:92:21:27:3d:7d:fc:94:ed:4f:23:
2f:50:aa:67:86:08:80:87:6c:75:2e:cc:6f:c1:97:
69:1b:c7:dd:2a:35:fb:f4:6d:d3:7b:18:0c:98:2a:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:7D:A1:EC:86:30:55:A0:8D:F7:CC:96:DF:09:11:CB:90:EE:60
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/uKd9oeyGMFWgjffMlt8JEcuQ7mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a8:1a:ff:f0:8b:81:b2:a2:86:62:a0:36:2f:47:0b:c9:79:
ce:e1:cc:98:15:ba:19:b9:7e:b3:01:f2:96:83:ce:92:91:b3:
d0:d4:f4:b0:fd:71:c5:45:37:88:2c:f9:77:f4:03:e6:ab:45:
78:07:2c:c0:46:54:bf:22:e8:de:f4:01:23:d9:02:66:51:da:
c2:7c:cd:6d:4b:d5:7c:80:a2:8a:ff:3f:5f:47:60:dc:46:02:
4d:d4:5a:24:f1:f0:e6:dd:f7:3e:0a:53:12:89:ff:8a:78:36:
30:42:51:dc:65:2c:c5:39:6e:e3:d7:c6:7b:c8:7c:58:9d:80:
1c:60:fa:b0:f4:79:0a:5b:36:b3:86:4a:c7:ea:06:66:81:ec:
dd:cd:ec:7b:a5:ff:f7:c6:d3:e9:c8:85:b6:29:38:11:f6:b8:
b9:2d:4f:bd:1c:9c:bb:8f:db:2d:ad:36:7e:28:ed:ae:36:68:
a9:1c:ab:43:f9:96:5e:9e:68:52:c5:58:7c:c2:ad:45:53:e7:
17:3b:0a:30:24:e5:d8:48:d9:8c:b8:51:5d:11:86:6b:2c:17:
26:5b:92:f8:ca:3f:9a:20:a2:27:62:7e:ba:50:46:b9:61:b0:
e4:df:95:25:2e:a6:00:72:b7:f5:d3:fd:c3:25:34:ad:f5:18:
7f:4c:ec:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net