Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/IPC12KXIviIWmhE04r4B3QkAuXY.roa
File: IPC12KXIviIWmhE04r4B3QkAuXY.roa (raw, json)
Hash identifier: DrvGmWqAcQDBFWWIqxSJiqHteaIcn3pW2TiVFyiUnGM=
Subject key identifier: 20:F0:B5:D8:A5:C8:BE:22:16:9A:11:34:E2:BE:01:DD:09:00:B9:76
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0182DC21AA80E79E555466F1A44852502EC6
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/IPC12KXIviIWmhE04r4B3QkAuXY.roa
Signing time: Fri 26 Aug 2022 21:49:30 +0000
ROA not before: Fri 26 Aug 2022 21:49:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 94.131.101.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:dc:21:aa:80:e7:9e:55:54:66:f1:a4:48:52:50:2e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Aug 26 21:49:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20f0b5d8a5c8be22169a1134e2be01dd0900b976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:9c:dc:e5:80:db:cd:e3:18:66:2f:26:81:
37:6f:60:82:ff:21:4b:15:9f:47:25:c8:d6:76:16:
27:0c:25:6b:09:39:9c:66:8a:13:aa:13:a5:60:07:
90:ba:b4:ac:e4:00:06:b8:ae:46:76:d9:b9:7a:ef:
4a:34:d4:c5:1e:98:85:59:3f:0c:6c:a9:74:1b:58:
88:ae:be:8a:b7:45:7a:5c:ad:12:7a:c0:44:af:9f:
b1:ef:8d:77:2d:07:ba:b0:4d:f4:93:7f:f4:92:de:
d8:98:83:b7:79:b2:fb:22:28:17:52:34:c5:d5:e9:
5a:f5:a9:89:c5:7c:e9:cd:29:f3:d6:f6:92:30:46:
6f:10:fd:bc:2d:97:3e:7a:5f:be:8e:3c:95:d8:9d:
6b:c4:a4:ba:da:fd:ac:f8:16:2d:f9:19:f0:47:ba:
65:30:e5:c8:cb:e4:59:bb:8f:fd:7f:8d:42:81:7d:
ec:7d:b8:3c:61:b1:dd:6f:44:95:e7:ba:9f:2e:7c:
d7:3e:74:cb:af:81:fc:7c:31:3b:4d:c4:18:16:71:
ee:b6:eb:47:4c:a1:bc:f5:4c:7f:1f:bb:f3:53:53:
12:7d:62:ba:69:fb:55:82:56:3a:50:de:63:d7:53:
25:20:c2:22:be:37:cd:23:03:32:f0:b3:f2:bb:3c:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:B5:D8:A5:C8:BE:22:16:9A:11:34:E2:BE:01:DD:09:00:B9:76
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/IPC12KXIviIWmhE04r4B3QkAuXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.101.0/24
94.131.109.0-94.131.111.255
Signature Algorithm: sha256WithRSAEncryption
9b:99:3d:be:f2:57:b5:fb:45:40:f0:03:d1:fd:8e:86:e1:b4:
51:94:b7:9c:77:d7:d4:07:02:20:26:82:0e:8a:60:eb:b3:66:
06:71:cb:a2:77:e4:46:85:3a:ae:e1:38:ed:0d:21:36:ba:c8:
62:35:0a:96:c2:e8:c4:e5:91:9e:d7:dd:d6:2a:c0:2b:ad:53:
cb:4c:18:0a:38:ef:cd:dc:49:67:52:40:00:7a:f2:a2:e9:a1:
43:1b:c2:f7:0e:4f:e7:67:2e:97:fc:7c:62:6a:34:1a:4a:b8:
51:c3:48:58:6d:fd:ce:e3:ae:63:e8:93:bd:4a:55:c3:c0:70:
56:6a:ed:59:fb:97:a4:45:c6:1a:8d:aa:7d:3a:2a:34:12:fc:
35:7c:28:c3:f0:b5:46:f1:78:c2:e5:43:69:0c:61:6a:e2:5b:
67:59:86:6f:5f:4e:30:65:84:2f:43:32:2a:92:33:36:67:d3:
c6:90:68:fb:76:0d:3b:ba:01:d6:1f:8e:f6:76:17:06:3c:05:
e6:a0:0e:86:ce:63:0e:79:07:5e:be:58:ff:d4:00:f7:1b:63:
73:9b:b6:37:e2:85:80:d9:f9:7a:eb:b0:51:76:47:bc:1c:4b:
5c:05:df:e9:00:b5:e9:08:f9:5b:58:7c:20:88:f9:70:20:f6:
aa:cc:7b:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:02 2025 by rpki-client