Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/VknKKZv_St6oEqqSnvAYYRpOr8s.roa
File: VknKKZv_St6oEqqSnvAYYRpOr8s.roa (raw, json)
Hash identifier: 2aV+TJv2sYhxIbkDltCqHeNZFAGSTrXeFKNequybw+4=
Subject key identifier: 56:49:CA:29:9B:FF:4A:DE:A8:12:AA:92:9E:F0:18:61:1A:4E:AF:CB
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42A8E801F72875E286B8746363914E
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/VknKKZv_St6oEqqSnvAYYRpOr8s.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 94.131.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a8:e8:01:f7:28:75:e2:86:b8:74:63:63:91:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5649ca299bff4adea812aa929ef018611a4eafcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:57:1e:6c:f1:29:9b:21:d7:6a:52:11:c5:
b6:da:f2:1b:40:c9:2b:00:0e:7b:fa:c1:4c:12:fd:
fb:80:a5:6e:a5:4d:26:a1:f2:06:1b:f4:72:f9:17:
17:2e:e3:48:98:94:aa:96:71:51:c0:e0:f4:c8:7f:
6a:20:52:49:ff:36:97:9e:4a:df:ce:de:74:31:ec:
bb:04:12:10:a1:7e:b4:2d:91:cc:c9:d5:9f:be:53:
df:6b:49:3e:33:e3:51:a9:ae:fb:78:b8:b9:e1:a8:
03:a4:f1:4d:22:6d:c7:a7:93:56:2e:ad:51:59:82:
01:21:34:8a:07:ef:6e:39:24:1a:31:a8:dd:5d:40:
d3:8d:81:fe:40:82:5f:18:5b:35:dc:74:d2:c3:c8:
56:58:41:63:2f:b4:05:44:b2:0e:3f:29:c0:2f:1a:
08:c1:bb:e5:3f:66:36:2f:a6:8d:6d:d9:73:c1:ad:
61:9e:ce:52:06:d4:67:43:7f:55:51:fa:44:89:84:
77:57:70:a7:99:8e:c0:36:5c:20:17:d3:73:07:6b:
30:c7:e9:54:cf:b4:41:4d:e9:63:e0:b6:8b:c6:cd:
09:fe:3f:f8:67:d9:e2:de:39:6e:12:dd:08:82:fc:
39:65:12:33:ec:65:b1:c4:c9:d6:16:c1:09:87:00:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:CA:29:9B:FF:4A:DE:A8:12:AA:92:9E:F0:18:61:1A:4E:AF:CB
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/VknKKZv_St6oEqqSnvAYYRpOr8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.104.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9d:ee:13:0c:7b:df:33:bf:4a:4d:bd:8f:5b:51:8e:cf:ae:
1c:78:4d:8e:74:49:d9:ec:cb:e3:94:48:45:20:1e:00:cd:22:
13:84:be:ce:05:d4:2e:bc:28:37:b7:dc:90:d3:7e:ab:11:a5:
6c:be:ef:61:e1:86:73:53:3e:c4:38:e3:32:52:51:20:9e:49:
1e:ee:ff:db:34:cc:f3:68:3c:12:67:bf:08:db:fa:03:2f:d8:
bc:d7:ac:a2:08:21:d9:93:b0:b2:9c:0a:1c:f5:12:8a:24:d3:
17:9a:9e:26:77:c8:7e:38:d0:bf:0c:60:92:1f:03:8b:e7:5a:
f8:7d:82:b3:5b:68:d7:2a:75:f4:d0:02:82:0c:7f:8b:43:1f:
be:95:e6:b3:4f:c3:60:87:41:57:a9:c1:a8:03:4e:9e:1e:a6:
ba:3b:30:26:32:69:58:03:a7:73:7b:f2:66:5e:a1:73:ab:33:
94:aa:08:6d:53:36:8c:da:e6:86:40:16:3a:b9:74:88:f4:53:
8c:05:e5:bd:4b:42:2a:f6:75:a2:6d:c9:45:23:7d:8d:50:bb:
ef:44:ec:a9:fc:4d:db:f9:3d:c6:9d:db:c8:f6:d4:8a:b5:0b:
12:b2:17:6d:84:e4:e2:cf:aa:36:6e:9a:dc:d0:be:22:a8:8b:
f5:49:eb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:20 2025 by rpki-client