Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ku6exI0rMkLytcn19tcOjId9ROM.roa
File: ku6exI0rMkLytcn19tcOjId9ROM.roa (raw, json)
Hash identifier: 1mRAeCZ20EmE3KrhTrYA7S6484kAFaMXsozyTwfywAk=
Subject key identifier: 92:EE:9E:C4:8D:2B:32:42:F2:B5:C9:F5:F6:D7:0E:8C:87:7D:44:E3
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0188486DA2FE28A74EAD6ED919BF3B49E15B
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ku6exI0rMkLytcn19tcOjId9ROM.roa
Signing time: Tue 23 May 2023 11:45:24 +0000
ROA not before: Tue 23 May 2023 11:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200736
IP address blocks: 94.131.147.0/24 maxlen: 24
94.131.146.0/24 maxlen: 24
94.131.151.0/24 maxlen: 24
94.131.150.0/24 maxlen: 24
94.131.149.0/24 maxlen: 24
94.131.148.0/24 maxlen: 24
94.131.152.0/24 maxlen: 24
94.131.157.0/24 maxlen: 24
94.131.156.0/24 maxlen: 24
94.131.155.0/24 maxlen: 24
94.131.159.0/24 maxlen: 24
94.131.158.0/24 maxlen: 24
94.131.154.0/24 maxlen: 24
94.131.153.0/24 maxlen: 24
94.131.130.0/24 maxlen: 24
94.131.128.0/19 maxlen: 24
94.131.132.0/24 maxlen: 24
94.131.131.0/24 maxlen: 24
94.131.133.0/24 maxlen: 24
94.131.137.0/24 maxlen: 24
94.131.136.0/24 maxlen: 24
94.131.135.0/24 maxlen: 24
94.131.134.0/24 maxlen: 24
94.131.139.0/24 maxlen: 24
94.131.138.0/24 maxlen: 24
94.131.144.0/24 maxlen: 24
94.131.144.0/23 maxlen: 23
94.131.143.0/24 maxlen: 24
94.131.142.0/24 maxlen: 24
94.131.141.0/24 maxlen: 24
94.131.145.0/24 maxlen: 24
94.131.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:6d:a2:fe:28:a7:4e:ad:6e:d9:19:bf:3b:49:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: May 23 11:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92ee9ec48d2b3242f2b5c9f5f6d70e8c877d44e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:43:ce:08:88:18:1a:48:e9:1c:41:11:96:
85:64:ec:2d:e1:1e:a9:47:b5:84:5d:d5:ad:5a:43:
98:47:02:3b:f2:9c:c4:02:a5:87:77:59:36:0a:d6:
e5:43:04:b8:f0:49:b5:09:59:4e:20:19:6b:be:52:
e8:9a:e3:c2:e7:66:5c:ac:92:32:1e:2a:97:04:94:
c3:c0:78:9c:e1:b8:dd:33:53:75:65:9c:bf:fb:df:
c2:b5:ca:7d:3d:b1:cb:2e:aa:7a:fb:f8:75:64:08:
32:29:87:aa:81:33:2b:a8:45:ba:92:9d:68:5e:ac:
0d:e0:2e:b1:8a:9a:47:ea:cb:7c:6c:8b:bd:9d:52:
a6:4b:67:bb:1e:54:92:86:0d:cc:48:1a:c1:90:51:
bf:60:98:44:70:7e:5c:f8:8a:3c:4c:78:56:08:5e:
91:31:fa:f1:6b:70:cb:ff:55:4d:74:5b:4a:52:8a:
13:b0:cd:12:b9:39:0a:d6:24:35:6e:eb:86:b9:50:
49:1d:7d:03:0b:ac:bb:1c:5e:c1:57:40:ea:bf:a8:
6a:5b:17:e2:29:85:24:52:4a:80:f9:a7:84:e2:96:
f6:6b:81:0d:70:f7:6c:0e:08:81:7e:e8:d8:8b:4b:
71:b3:e4:f3:fa:7a:b9:b4:46:ed:dd:38:f8:29:d8:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:9E:C4:8D:2B:32:42:F2:B5:C9:F5:F6:D7:0E:8C:87:7D:44:E3
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ku6exI0rMkLytcn19tcOjId9ROM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.128.0/19
Signature Algorithm: sha256WithRSAEncryption
39:b3:a3:e3:64:3f:e6:e1:d2:45:51:20:b6:44:c2:73:93:66:
69:aa:0b:6c:c8:eb:d9:29:32:a2:24:be:a3:b3:0e:9f:a2:e6:
86:0d:12:1e:c5:ff:02:1b:3f:4e:c2:ff:0f:9b:b9:6b:89:9f:
20:77:33:87:76:4b:50:3a:8e:86:26:93:10:74:ec:fb:41:a7:
02:c6:1c:96:24:27:8f:9b:ab:94:77:7b:b7:29:e8:48:9b:1a:
2a:47:ec:44:3a:f8:94:e8:5c:fd:2f:28:e2:92:fa:3f:87:f0:
ad:a9:a4:0f:16:d8:cd:d1:58:7b:c8:06:a0:8a:92:4b:53:b9:
18:7c:48:96:7a:55:8d:99:0e:46:f1:c3:50:3b:ac:9c:22:fb:
60:2d:d0:53:9d:e2:c9:2b:b3:fc:d9:a1:ca:f1:03:26:88:33:
69:a9:c9:4b:94:55:59:4c:fc:f9:be:1e:b6:8a:80:70:cb:d1:
22:21:3b:c4:1f:6f:d4:fa:f5:3a:9c:d9:2b:43:8f:57:a8:0e:
c7:e5:15:96:26:9f:e6:7e:72:14:5b:0d:3b:64:7f:34:9a:eb:
fc:8c:e0:22:a9:68:6f:68:51:ef:da:7b:d7:2f:f6:a0:1d:76:
86:c9:a6:b2:87:8d:42:46:8c:8e:31:d4:1b:75:95:3b:a4:68:
75:91:a4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:04 2025 by rpki-client