Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/L6OmoRqyd3cqX_iJnWhs6iv9xTg.roa
File: L6OmoRqyd3cqX_iJnWhs6iv9xTg.roa (raw, json)
Hash identifier: rU41ucqiRIVfU6PC7u14kua///Oe2qWmLVquXf0mTQ8=
Subject key identifier: 2F:A3:A6:A1:1A:B2:77:77:2A:5F:F8:89:9D:68:6C:EA:2B:FD:C5:38
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 0185728C8F9BDE9CB05786249D6C1E741E21
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/L6OmoRqyd3cqX_iJnWhs6iv9xTg.roa
Signing time: Mon 02 Jan 2023 12:54:52 +0000
ROA not before: Mon 02 Jan 2023 12:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207822
IP address blocks: 94.142.128.0/24 maxlen: 24
2001:678:b98::/48 maxlen: 48
2a0a:f00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:8f:9b:de:9c:b0:57:86:24:9d:6c:1e:74:1e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Jan 2 12:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fa3a6a11ab277772a5ff8899d686cea2bfdc538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:9c:55:27:7e:db:f6:3f:99:83:85:72:11:
20:75:85:35:1b:b7:0a:02:7d:41:ba:08:7e:ce:9c:
ff:50:d3:97:22:07:f2:39:29:0f:90:ed:7a:4a:90:
5b:d5:7b:7f:3c:63:37:1c:59:28:da:34:9e:d0:b4:
e6:e9:1e:89:07:7f:72:d1:95:0d:59:b3:83:22:d2:
30:09:93:25:ca:31:64:40:d5:34:54:e8:84:55:a8:
09:ab:48:06:f8:2e:fb:f3:a8:81:88:ec:f1:f1:30:
ed:6c:6a:ce:81:7b:02:d8:38:56:7e:0b:90:2e:6f:
10:2d:2a:e9:98:53:1b:fb:97:78:ff:7e:db:e9:4c:
0e:8e:bb:92:ce:45:94:ee:3c:64:5e:25:b6:f7:09:
c4:19:6e:8f:5c:af:8f:2b:db:f5:49:4e:71:1a:0d:
2c:c4:33:3a:78:0d:d9:f8:a2:89:c6:e7:98:c3:10:
4e:84:35:06:49:b4:8d:2d:c1:0b:c0:ed:84:a8:35:
40:23:74:48:e7:f1:86:74:a8:57:b6:a7:be:28:33:
f6:a3:3c:85:00:dd:d3:4c:0a:9f:b5:73:85:4d:a8:
7d:2c:4f:ea:9b:69:d2:28:56:fa:1e:8b:e4:04:1e:
b1:83:ef:a9:6c:9f:43:6d:ab:19:91:df:53:ec:ed:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A3:A6:A1:1A:B2:77:77:2A:5F:F8:89:9D:68:6C:EA:2B:FD:C5:38
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/L6OmoRqyd3cqX_iJnWhs6iv9xTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.128.0/24
IPv6:
2001:678:b98::/48
2a0a:f00::/29
Signature Algorithm: sha256WithRSAEncryption
3c:c6:97:cb:1f:0f:c5:8c:6c:7c:2a:64:9d:b2:2f:88:73:65:
08:28:82:54:eb:2a:2c:b3:04:bb:c1:a5:7c:cd:67:81:f2:f7:
8a:15:2f:61:b1:bf:ae:18:ab:cc:0c:3e:02:61:bd:b2:f2:cf:
2c:97:aa:1c:e0:68:84:42:9c:02:bf:e4:8d:17:b7:15:84:c1:
0d:08:e6:f1:f4:80:68:41:aa:ea:db:d3:a8:25:cb:e2:45:e0:
f6:21:32:00:43:95:32:42:d4:2b:e2:3c:a8:2a:d9:81:6b:09:
f3:81:b1:43:14:ba:a3:17:61:11:cc:0a:ed:33:e8:0f:f8:b6:
d3:71:71:1c:a5:fe:97:af:6c:e0:c6:b7:13:ed:e1:bf:b0:0a:
af:16:b5:30:fb:db:60:00:d8:e8:e9:8d:c2:d6:b0:eb:b9:04:
8f:19:0c:d6:9c:88:ec:58:3e:bd:d7:f3:24:41:c6:6a:f1:5c:
f3:b4:c2:2b:66:8a:22:15:82:ea:5c:f2:dc:4a:46:3f:f0:34:
aa:37:4d:9b:43:03:90:ae:9c:62:34:2c:74:b2:16:31:ea:5e:
c5:13:4f:86:c2:63:47:a5:4b:60:bf:61:3a:bf:0f:f3:5f:d3:
79:90:e3:2c:61:42:fc:7c:59:d1:33:13:a9:c0:26:45:84:3d:
05:c9:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:12 2025 by rpki-client