Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/Jcydm58OfC4M3ToeNnqeciQ0vMQ.roa
File: Jcydm58OfC4M3ToeNnqeciQ0vMQ.roa (raw, json)
Hash identifier: I93G+tPDYyYPj1/POW8TRe8gazIbJq0yC1aeXOM0eIU=
Subject key identifier: 25:CC:9D:9B:9F:0E:7C:2E:0C:DD:3A:1E:36:7A:9E:72:24:34:BC:C4
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 019A535A
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/Jcydm58OfC4M3ToeNnqeciQ0vMQ.roa
Signing time: Sat 01 Jan 2022 12:57:30 +0000
ROA not before: Sat 01 Jan 2022 12:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197116
IP address blocks: 94.126.224.0/21 maxlen: 24
2a11:f400::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26891098 (0x19a535a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Jan 1 12:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25cc9d9b9f0e7c2e0cdd3a1e367a9e722434bcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:92:88:c2:d2:e5:bb:9a:00:c7:c0:e2:08:
83:ac:1f:84:f8:63:cd:47:9b:36:32:8f:17:51:91:
05:e5:b4:b9:72:4c:b9:b6:e1:f6:8d:ae:f3:a4:87:
34:b8:98:5a:df:7d:11:c3:a0:16:b5:aa:dc:bc:20:
ca:cb:e2:98:fb:45:d0:8e:a2:08:d9:40:66:d0:10:
2f:15:ad:24:5c:6e:d3:dd:d8:56:de:33:24:a3:88:
dc:25:81:21:5e:87:eb:d9:37:e1:9e:dd:d0:e0:ca:
e1:a7:e3:d6:16:fb:47:bb:7f:c3:ce:fb:b4:8d:fe:
4d:00:3d:b5:d9:f7:43:72:da:e6:01:2a:04:a3:1f:
86:13:c5:ee:45:8d:b5:d4:05:ee:1a:2b:8f:8a:73:
d9:56:19:ef:14:94:07:63:bf:31:5d:cf:d5:5c:4d:
33:03:6d:37:90:ca:63:22:22:ee:2b:43:8f:d1:f0:
e8:47:b2:ca:a0:b9:e2:2d:3d:34:5c:bf:7d:ed:a7:
f2:23:c0:1b:97:97:3c:a2:15:3d:2a:41:3c:da:5e:
51:0e:10:d6:1e:26:62:92:70:76:71:29:85:2c:83:
07:c7:c4:71:e1:b9:1a:46:9c:b9:d0:64:ff:9b:7e:
f9:91:96:76:f1:8d:d9:f0:46:75:d3:78:3a:20:f0:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CC:9D:9B:9F:0E:7C:2E:0C:DD:3A:1E:36:7A:9E:72:24:34:BC:C4
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/Jcydm58OfC4M3ToeNnqeciQ0vMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.224.0/21
IPv6:
2a11:f400::/32
Signature Algorithm: sha256WithRSAEncryption
17:3a:51:74:51:04:55:30:af:96:4d:ef:56:f7:0d:37:84:46:
83:ca:b4:24:2d:72:a7:59:d4:1d:a8:0b:3d:8b:e6:46:3d:4b:
2d:50:cb:da:81:b3:86:b3:12:1c:ae:ea:ab:80:ff:5b:a4:08:
6d:f6:c6:55:92:e5:08:3c:82:7d:ef:71:ba:71:2b:66:90:90:
fe:ea:a2:31:88:c2:be:44:51:ec:17:16:8f:9f:df:c9:95:44:
cf:f3:11:fd:ef:f6:5d:d0:b1:69:9c:0f:45:8b:0d:89:91:70:
fe:d1:75:b9:2c:89:04:bd:a5:f2:08:f1:32:d8:76:2d:f0:ce:
40:3b:b6:fc:f9:df:c0:19:d2:6e:0e:ec:41:50:4f:41:5f:6d:
33:ec:0b:5a:ef:00:1e:e9:f3:ea:1c:1e:f7:e6:96:01:9b:c9:
3d:7d:46:18:fc:ab:cd:8b:6c:9a:b6:e1:a5:36:2c:54:98:a7:
8a:fe:61:bf:59:3a:3f:fa:6e:75:9d:85:02:e5:09:39:8f:fb:
ff:0a:01:02:4b:de:2b:61:c7:5e:aa:f2:b8:4c:58:11:b3:9a:
44:1a:c3:fa:d9:80:48:68:61:34:2f:c0:39:64:9c:e9:b6:17:
d0:60:cc:40:d6:7c:0d:fb:2b:ff:b8:11:42:aa:2d:45:23:ea:
34:d3:cc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:30 2025 by rpki-client