Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/V1ZoISY5ykymJw0Lve8HVtxE1iY.roa
File: V1ZoISY5ykymJw0Lve8HVtxE1iY.roa (raw, json)
Hash identifier: 0jPSoAADk+/98ErQc41IdWW1Bi+da5B5xjReZ3FFCeg=
Subject key identifier: 57:56:68:21:26:39:CA:4C:A6:27:0D:0B:BD:EF:07:56:DC:44:D6:26
Certificate issuer: /CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Certificate serial: 018BB43164F7046FB46261D9EF0409CB2FBE
Authority key identifier: 18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/V1ZoISY5ykymJw0Lve8HVtxE1iY.roa
Signing time: Thu 09 Nov 2023 13:06:57 +0000
ROA not before: Thu 09 Nov 2023 13:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202207
IP address blocks: 94.250.246.0/24 maxlen: 24
94.250.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:31:64:f7:04:6f:b4:62:61:d9:ef:04:09:cb:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Validity
Not Before: Nov 9 13:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=575668212639ca4ca6270d0bbdef0756dc44d626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:86:10:83:7d:3b:7e:2a:e0:7b:fe:e8:be:
74:f3:38:8b:f7:89:15:b1:e1:cc:6d:34:db:ec:59:
02:38:56:17:49:c1:d6:41:ec:db:80:66:bc:6c:74:
70:bf:77:98:2a:ad:ee:91:b1:4f:e9:ce:c0:80:8e:
90:ae:c7:62:6e:62:8b:fd:5e:f1:0d:30:30:5d:79:
3f:e9:08:0e:07:c7:15:dd:91:4e:4f:fe:3f:1c:9e:
d3:fa:3a:c3:c7:9c:cc:ce:7f:d1:6b:00:91:22:8d:
21:c9:f5:c7:42:97:98:40:f7:8d:78:c6:09:13:ae:
75:b3:71:a5:37:b8:52:ba:cd:80:66:62:b7:38:5b:
a7:30:72:cd:57:66:4b:58:42:70:e3:fd:de:d9:89:
67:ff:ac:aa:1f:85:59:37:5b:2a:b7:af:0e:38:89:
87:c9:72:03:ab:0d:f4:ac:a3:05:e9:02:53:6d:ea:
b9:34:11:d6:d2:6f:2a:c5:3b:a0:2f:0d:b7:d6:65:
83:96:02:64:39:05:37:2b:fe:e8:a0:a6:03:9f:ff:
46:54:16:b1:75:a2:c0:09:fd:85:49:83:d2:77:90:
9b:fe:06:58:31:33:85:fd:16:08:36:ab:e1:37:4e:
56:90:87:7a:0d:01:7f:4f:13:33:a4:ea:be:5f:27:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:56:68:21:26:39:CA:4C:A6:27:0D:0B:BD:EF:07:56:DC:44:D6:26
X509v3 Authority Key Identifier:
keyid:18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/V1ZoISY5ykymJw0Lve8HVtxE1iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.246.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:26:76:6a:a0:4a:0b:d2:f8:95:4f:6a:4a:44:bd:e4:67:1f:
09:53:15:8c:fb:1f:58:c6:6e:c6:50:4b:ca:85:7d:df:0c:71:
19:87:7a:ee:48:04:2c:7c:ba:b8:c7:d2:15:d1:0b:f6:7c:02:
86:b6:0d:77:0a:7b:81:d7:c9:af:cb:36:a0:fc:b7:38:25:d8:
c4:89:a5:83:90:33:d1:e2:45:11:71:63:be:c5:8e:2d:e9:d6:
57:a6:f5:4a:80:33:61:80:6e:d8:53:92:a3:e3:ab:0b:bc:ee:
4d:69:4c:07:45:e9:59:b0:d5:7c:4d:0a:9b:7a:62:25:84:d7:
83:3c:93:46:69:6e:fc:27:39:ee:1b:22:f2:d0:47:3b:19:f8:
04:cb:3c:8f:ef:b9:da:4f:e4:80:91:e1:e9:12:62:50:44:ed:
82:c9:e2:49:d4:e8:1f:f4:3d:29:73:38:61:7b:89:9e:3d:78:
05:a7:fd:f0:74:e2:e0:e6:18:5a:5f:e9:60:7d:88:8b:3c:5a:
89:76:b3:96:39:d6:b1:2a:83:d0:a8:52:2b:c0:bd:16:ea:bc:
0a:25:58:57:44:4e:97:c4:78:13:08:65:9b:7d:a7:e1:b9:4a:
fa:e1:27:d1:9f:29:30:95:d9:92:f9:db:68:7c:a9:43:55:0c:
2d:f7:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 13:03:29 2025 by rpki-client