Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/RBmXKV1od1AmV7Lou-Rvltzcnvc.roa
File: RBmXKV1od1AmV7Lou-Rvltzcnvc.roa (raw, json)
Hash identifier: fkiFPw91fimarbTGewWztIDNKs0MNhsl2NqdyBv2olQ=
Subject key identifier: 44:19:97:29:5D:68:77:50:26:57:B2:E8:BB:E4:6F:96:DC:DC:9E:F7
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0185A860F6661F80D30FC03BC932A5EEACD2
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/RBmXKV1od1AmV7Lou-Rvltzcnvc.roa
Signing time: Thu 12 Jan 2023 23:46:44 +0000
ROA not before: Thu 12 Jan 2023 23:46:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51395
IP address blocks: 94.131.99.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:60:f6:66:1f:80:d3:0f:c0:3b:c9:32:a5:ee:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 12 23:46:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=441997295d6877502657b2e8bbe46f96dcdc9ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:0c:44:7c:a8:af:69:ae:bf:17:64:76:54:
eb:77:c4:e8:47:bf:89:9c:5a:08:eb:4a:05:8c:e6:
16:71:8e:0d:47:63:f4:ec:31:6b:67:70:a9:c5:1e:
16:53:74:b5:a4:d2:18:93:d8:0e:80:f9:85:fc:d8:
95:45:7f:25:99:8d:d4:90:24:92:69:19:2e:90:5b:
5a:d0:30:b3:7f:a3:d4:7c:b3:cb:67:5b:ef:08:9b:
7d:01:b1:ab:a3:f8:a1:ec:1a:a5:ab:7a:2d:0b:83:
82:83:82:b4:3d:31:0d:ec:31:4d:92:c8:d0:a8:37:
e3:88:9c:a9:e3:26:1a:65:c3:91:c7:51:d8:36:df:
3d:59:b8:be:ab:06:36:6b:b7:b0:01:0a:08:1b:f3:
96:34:1c:ce:b7:a9:6b:f2:e1:b2:9f:a2:b9:68:2c:
5b:7c:da:ae:0d:f7:03:5a:89:21:eb:a0:e7:15:92:
b4:83:d2:d0:fc:8f:04:64:0a:ae:01:7f:94:48:5b:
0e:ea:18:59:41:30:6f:69:75:56:19:61:d8:16:1a:
dd:45:51:3a:81:8a:56:05:21:f4:3f:66:ef:63:ec:
6f:28:90:f1:6e:de:18:0c:b8:f2:0a:35:39:91:7f:
3e:90:8a:a3:10:33:ed:0f:66:49:fc:99:51:4a:0e:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:97:29:5D:68:77:50:26:57:B2:E8:BB:E4:6F:96:DC:DC:9E:F7
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/RBmXKV1od1AmV7Lou-Rvltzcnvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.3.0/24
94.131.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ad:c9:07:87:2d:dc:2a:96:cd:fb:4e:4a:77:63:ca:db:40:
7b:9f:68:1d:9c:ba:3c:3a:fc:d5:3e:93:d6:0a:f8:d3:bb:6c:
2f:69:3f:cf:9b:ad:3a:12:13:32:e4:c2:07:e2:cb:fd:fe:55:
70:64:64:6a:24:14:96:e8:fe:b5:ec:6c:31:d5:8f:67:32:cc:
de:bf:73:a4:ba:ba:22:12:7a:47:1a:e8:4c:b7:66:ab:42:c9:
f1:1d:0b:95:5f:cb:ce:d4:04:b0:2a:be:98:f6:bf:f4:5e:c7:
04:a2:f7:50:d0:d8:73:93:58:14:85:4a:14:e5:58:b1:db:7b:
36:8c:37:70:67:9a:89:11:58:79:66:66:56:93:7e:d8:2b:99:
49:10:c7:0a:f7:8a:4e:93:cd:87:55:c5:cc:75:22:47:db:42:
3b:9d:b6:8b:a0:db:7a:d9:b9:8e:6a:91:29:69:b9:55:13:a1:
5b:c9:16:75:e1:c1:d4:18:e9:23:71:21:8b:c8:f4:2c:28:2a:
bc:c4:f9:e6:64:87:5a:f0:91:a6:91:2c:5f:ae:75:fe:a2:c5:
32:b5:f3:df:8b:71:c2:fa:9a:ad:3b:bc:c9:4f:c2:76:6a:1f:
64:9f:40:68:f0:2d:9f:c2:6e:2b:b0:f9:7e:f7:f8:dd:a6:b8:
49:87:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:58 2025 by rpki-client