Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/1mnQQN25Gp7c8UzPCldvtu44Phk.roa
File: 1mnQQN25Gp7c8UzPCldvtu44Phk.roa (raw, json)
Hash identifier: qp3g+6B6exZqxD7rr7kvvlFjhVD1v/RxrdcFBOouIoI=
Subject key identifier: D6:69:D0:40:DD:B9:1A:9E:DC:F1:4C:CF:0A:57:6F:B6:EE:38:3E:19
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 0185810A1D4346F15061DB2A06A8BFFED022
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/1mnQQN25Gp7c8UzPCldvtu44Phk.roa
Signing time: Thu 05 Jan 2023 08:26:41 +0000
ROA not before: Thu 05 Jan 2023 08:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196921
IP address blocks: 94.187.165.0/24 maxlen: 24
94.187.166.0/24 maxlen: 24
94.187.168.0/22 maxlen: 22
94.187.168.0/21 maxlen: 21
94.187.167.0/24 maxlen: 24
94.187.172.0/24 maxlen: 24
94.187.171.0/24 maxlen: 24
94.187.179.0/24 maxlen: 24
94.187.178.0/24 maxlen: 24
94.187.173.0/24 maxlen: 24
94.187.176.0/24 maxlen: 24
94.187.177.0/24 maxlen: 24
94.187.174.0/24 maxlen: 24
94.187.176.0/21 maxlen: 21
94.187.175.0/24 maxlen: 24
94.187.180.0/24 maxlen: 24
94.187.183.0/24 maxlen: 24
94.187.184.0/23 maxlen: 23
94.187.181.0/24 maxlen: 24
94.187.182.0/24 maxlen: 24
94.187.184.0/21 maxlen: 21
94.187.191.0/24 maxlen: 24
94.187.187.0/24 maxlen: 24
94.187.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:0a:1d:43:46:f1:50:61:db:2a:06:a8:bf:fe:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Jan 5 08:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d669d040ddb91a9edcf14ccf0a576fb6ee383e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:6c:b8:e5:e1:fb:be:4a:6c:05:35:57:a9:
27:7b:2b:a0:22:f6:b2:41:85:6a:c0:a4:b6:8e:eb:
39:da:e2:80:47:f4:4f:c2:57:9c:35:12:f0:69:a2:
1d:4b:da:e7:ab:91:12:d9:e7:54:61:3f:3a:e5:bd:
61:21:d9:e0:43:be:b6:d1:ea:39:03:3a:4c:8e:9d:
e1:31:a2:3c:71:ba:01:64:5b:35:0f:3c:87:f9:29:
45:df:21:bb:38:7f:e9:fb:b1:4b:e9:c5:08:a9:62:
62:10:f4:92:ae:f1:e9:58:18:af:1b:96:71:61:83:
37:85:30:a9:50:82:59:a6:3e:92:a7:04:55:b9:fe:
7e:d9:35:9e:da:9e:f1:ec:45:42:92:c5:89:b0:4c:
cb:f8:81:57:2b:25:ef:48:4a:bb:ea:45:59:7b:db:
12:21:75:c7:59:af:44:b0:c5:d6:99:e6:2b:44:ff:
ce:20:ee:2e:ca:c6:b7:ce:e9:33:98:21:07:06:ea:
e7:a1:e3:37:ee:2b:b5:56:a2:f6:f7:53:4a:ea:49:
a4:1a:d9:e3:fe:bd:cc:85:24:8e:8c:08:2d:cf:37:
ab:f5:cb:60:c7:bc:cf:5d:7c:b1:41:b7:4b:84:4e:
8a:ce:9b:16:29:fe:a1:ad:bd:59:6f:b3:9a:33:4a:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:D0:40:DD:B9:1A:9E:DC:F1:4C:CF:0A:57:6F:B6:EE:38:3E:19
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/1mnQQN25Gp7c8UzPCldvtu44Phk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.187.165.0-94.187.191.255
Signature Algorithm: sha256WithRSAEncryption
5e:39:91:74:65:ff:d0:a1:fa:d5:f3:0b:f7:3c:33:13:da:77:
bd:7a:0c:44:81:61:a1:81:be:88:ae:f0:6c:7a:b5:8a:14:51:
15:48:07:fd:b1:b8:9c:cb:ec:53:91:19:5d:e9:c2:1d:9e:e1:
3a:65:a6:9e:13:e5:37:b9:43:39:b8:1b:bf:90:1f:92:6b:a9:
28:5d:1f:0f:cf:a3:36:14:b5:7c:93:41:9e:a5:5b:99:1e:15:
60:25:c4:15:93:84:7d:3a:48:4f:d8:bb:4e:5f:6b:40:29:99:
4c:9f:df:49:66:e2:9e:89:f4:b6:e8:82:e3:03:ca:6b:41:f1:
fe:36:b1:73:80:79:78:9b:27:4c:7d:2a:8b:ee:76:1d:88:00:
a8:c9:ea:64:ba:12:45:5b:88:f7:ed:ee:94:d5:4e:e3:f3:54:
c7:1f:e0:e2:d6:25:fa:cf:b1:12:0b:62:d6:02:c0:ab:3b:28:
cc:1e:14:16:04:f2:a4:e1:ae:e6:2c:6b:c5:86:8e:b1:6c:4a:
3a:ce:0a:7d:cc:ac:87:c4:2e:b6:51:e8:04:33:99:be:d9:1b:
4b:5e:6c:6c:5e:35:09:ac:6b:83:a0:cd:6c:ab:ef:b8:8f:74:
3d:0e:3c:ee:97:c1:18:e1:10:ed:e1:d9:af:59:d4:c2:71:1c:
51:81:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:22 2025 by rpki-client