Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/8iQdFgzUvPl3hhnDlB1DADp4YPc.roa
File: 8iQdFgzUvPl3hhnDlB1DADp4YPc.roa (raw, json)
Hash identifier: 5pkzl8pVM+6RthZ3jWTMWZfedThGZz5BEjkfwIyuGaE=
Subject key identifier: F2:24:1D:16:0C:D4:BC:F9:77:86:19:C3:94:1D:43:00:3A:78:60:F7
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0188F3D2C80688619E7940BBA353173F107C
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/8iQdFgzUvPl3hhnDlB1DADp4YPc.roa
Signing time: Sun 25 Jun 2023 18:30:57 +0000
ROA not before: Sun 25 Jun 2023 18:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212193
IP address blocks: 45.94.6.0/24 maxlen: 24
194.29.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f3:d2:c8:06:88:61:9e:79:40:bb:a3:53:17:3f:10:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jun 25 18:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2241d160cd4bcf9778619c3941d43003a7860f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:71:17:e2:be:3f:13:d7:2a:e9:07:d2:2b:
45:ec:1a:5d:1e:38:c7:14:d4:3d:81:a0:7f:ab:e8:
3b:69:2f:87:ab:26:03:1e:74:18:c1:a4:6e:e9:c8:
e8:1b:aa:95:bd:17:6d:9e:4f:be:1a:8d:85:61:f1:
ae:2b:7d:7a:f3:b6:96:5e:29:4c:5c:3e:d4:33:eb:
a0:7d:87:8d:86:f9:63:73:d5:ea:16:18:01:91:95:
31:5e:cb:bc:74:2d:c3:34:cc:32:98:a5:21:18:3e:
2e:cc:90:3f:51:a8:65:9a:ec:75:7b:0d:80:fc:60:
2e:40:f8:85:fb:df:a4:05:60:c0:a0:d7:6a:72:8d:
aa:f5:5e:95:82:2c:2e:72:7a:8f:58:2f:56:5a:89:
7d:62:d1:24:f9:91:5d:0b:75:2b:da:24:47:ec:4a:
a0:b7:56:e0:3e:75:c0:bb:e6:bb:9f:b1:61:22:64:
5e:bd:3c:8a:e6:ef:d0:dc:33:24:b4:0d:0c:1d:59:
de:16:c3:ce:f3:1a:b5:82:1e:60:5f:04:40:ac:5f:
7e:aa:27:99:f8:c1:33:7a:26:d8:eb:6e:22:5a:51:
3a:17:76:3f:ce:f7:d3:56:24:08:83:20:c0:79:ed:
42:67:62:f9:fe:3d:07:d9:a7:6e:dd:7b:42:39:77:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:1D:16:0C:D4:BC:F9:77:86:19:C3:94:1D:43:00:3A:78:60:F7
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/8iQdFgzUvPl3hhnDlB1DADp4YPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.6.0/24
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a4:3b:86:a8:60:1a:15:b0:8e:bf:a0:9d:df:7c:87:f2:bf:
ae:54:8a:9a:ce:a6:67:e1:f7:82:57:70:72:ad:02:c7:48:3f:
a3:e8:e2:30:98:65:e8:54:d6:31:7b:e1:e3:de:31:79:43:de:
50:dc:c6:65:15:37:d3:31:bc:9d:ea:11:ee:7e:af:9b:24:38:
19:61:e4:62:65:7b:27:60:88:7f:68:f4:69:4f:30:2c:3a:6a:
16:a8:d7:6c:91:93:bd:ec:28:f7:40:4f:46:94:4f:67:5d:a1:
a4:b8:3e:e8:1c:0c:23:f7:fe:11:e2:b5:03:0e:45:37:03:c1:
bd:e5:af:df:8f:be:f5:fd:a3:05:62:7d:9f:32:fc:fa:5c:72:
db:69:fb:67:32:85:97:8f:7c:52:40:99:7d:90:37:c8:e9:29:
13:7f:12:ae:8f:11:1c:74:4d:91:39:93:7a:de:12:5b:8c:6d:
10:67:c4:9c:dd:33:9b:96:57:ae:af:50:38:61:48:78:68:78:
ec:ef:0a:6f:63:f9:8c:ab:f8:7b:46:ac:45:33:31:ba:5d:c8:
37:43:3e:d7:53:13:45:8a:14:04:7a:69:3a:b3:3a:c3:fc:89:
19:fc:5b:da:04:18:7e:fb:a3:25:f6:1f:d0:4e:f8:3d:cc:be:
6d:bc:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:22:22 2025 by rpki-client