Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/gharqXgKI05WwPGjf6URNy_12Os.roa
File: gharqXgKI05WwPGjf6URNy_12Os.roa (raw, json)
Hash identifier: pVPzyRTdz2PVW4d5cseaJCjQmQlh/AOAtl1bVjON+ts=
Subject key identifier: 82:16:AB:A9:78:0A:23:4E:56:C0:F1:A3:7F:A5:11:37:2F:F5:D8:EB
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42A9942A135DE33D3F184267DD1BD7
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/gharqXgKI05WwPGjf6URNy_12Os.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51395
IP address blocks: 94.131.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a9:94:2a:13:5d:e3:3d:3f:18:42:67:dd:1b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8216aba9780a234e56c0f1a37fa511372ff5d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:49:2c:7f:4b:2a:88:cc:47:dd:4d:cd:1e:
65:87:82:14:2f:f3:af:0f:f4:f4:c9:b7:9d:ee:e7:
a0:44:72:ad:ce:fd:fb:cd:e6:7f:88:df:a9:1c:d5:
46:a6:16:dc:88:f4:0f:0e:19:f1:88:46:a4:59:db:
bf:7f:1d:57:1d:d0:b6:72:6f:5c:fe:86:01:06:9e:
3b:78:b6:df:52:9d:11:72:93:9c:de:59:29:28:3a:
b7:88:4b:e3:d9:4f:c9:bc:41:96:48:f0:99:3e:be:
af:33:54:a8:93:3b:84:6d:8e:ce:8e:a7:19:fc:be:
49:39:6d:98:18:2b:8e:31:53:8a:82:29:f4:c4:b8:
f0:45:6a:85:2d:14:83:1b:d4:dd:02:fd:f8:bd:62:
5c:a0:d9:e8:af:08:47:a5:f8:34:19:9e:c0:22:cd:
e3:58:16:ee:92:e1:a2:cf:3e:21:58:b5:a3:4c:83:
e1:c2:30:68:1a:04:0d:0a:e6:b0:f1:2a:fa:e0:83:
35:fb:66:56:6a:37:bb:c2:96:96:e7:5c:59:64:eb:
dd:70:9a:15:ca:1e:33:53:63:64:03:4b:a9:d5:d8:
69:ad:82:da:ba:77:7b:5d:d1:57:19:89:66:01:d7:
64:a5:42:eb:ac:11:d1:89:1b:e1:bc:b7:26:8b:39:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:16:AB:A9:78:0A:23:4E:56:C0:F1:A3:7F:A5:11:37:2F:F5:D8:EB
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/gharqXgKI05WwPGjf6URNy_12Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:35:c9:9c:57:d5:b3:c7:4d:10:0f:72:4b:34:b8:40:6d:9f:
5c:f5:44:0d:c8:33:79:ae:e1:69:7e:d1:35:5d:03:7c:ab:90:
45:15:db:df:1b:6f:b5:fe:b2:bb:ca:96:f7:82:54:44:a4:b5:
a6:8d:89:1b:cc:60:ed:f9:65:55:60:aa:0a:03:9a:d4:3d:f6:
ac:93:40:fe:ba:8f:4b:1b:cc:72:30:6c:94:e6:44:db:62:2c:
80:fd:f0:ae:de:cd:61:c3:8e:a3:4b:c1:ce:ee:c3:b2:8d:2f:
c9:0c:29:d6:b8:6d:b3:ec:b3:4c:9a:51:05:e2:9e:f3:f2:7e:
02:fd:bd:0b:a5:26:a8:d0:6c:5a:39:19:4a:92:7d:2d:52:17:
af:2a:62:eb:d1:bc:5e:b1:b6:2c:a1:49:fb:77:0c:8c:5b:25:
d6:70:ac:32:81:84:5f:91:27:33:b1:ce:02:43:02:51:1f:3c:
af:91:e7:ca:68:0d:c1:83:4e:21:32:1a:52:5e:5f:98:60:8d:
7e:e4:cf:17:3d:63:87:16:a9:c8:bf:13:d9:0e:bc:64:86:3a:
b8:6e:63:d5:88:5c:9f:00:e1:32:22:67:8c:60:49:fc:00:2a:
a8:3b:e9:f0:9d:3b:4a:29:c3:11:63:6c:1e:69:b0:62:9e:d8:
e1:02:22:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:12 2025 by rpki-client