Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xZpPRbL-hGVGd5RLcbvM8uaLbPw.roa
File: xZpPRbL-hGVGd5RLcbvM8uaLbPw.roa (raw, json)
Hash identifier: I4+7Cmz1UbaHRNXZ1h8HAIl+bxNhJ0070R49zaOt1UY=
Subject key identifier: C5:9A:4F:45:B2:FE:84:65:46:77:94:4B:71:BB:CC:F2:E6:8B:6C:FC
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 023FC234
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xZpPRbL-hGVGd5RLcbvM8uaLbPw.roa
Signing time: Sat 01 Jan 2022 05:56:45 +0000
ROA not before: Sat 01 Jan 2022 05:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204300
IP address blocks: 94.131.24.0/22 maxlen: 22
94.131.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37732916 (0x23fc234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 05:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c59a4f45b2fe84654677944b71bbccf2e68b6cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:7b:1d:b1:8b:56:8d:f0:48:1c:95:07:9c:
b7:58:f7:60:f6:64:57:9d:56:9a:56:7e:09:9e:d6:
9f:20:cc:e1:a5:28:6c:10:d3:2f:7c:a0:d5:68:5c:
a8:99:30:8f:55:5b:24:5c:e7:ad:ae:de:a8:a1:3c:
1d:82:3e:66:1f:00:0f:ba:61:d6:3b:8f:61:52:c5:
b3:16:30:44:ff:a2:7c:66:28:60:ad:a2:a7:a5:02:
c2:d9:21:27:df:27:8d:87:90:25:2f:02:57:2f:ae:
17:6c:c1:57:81:79:37:99:b9:37:c3:11:53:45:e4:
72:f5:26:34:12:dc:d7:28:14:c0:bd:39:40:9d:e8:
dc:54:24:4e:dc:9d:25:82:08:56:01:80:a0:e9:1e:
53:3f:d3:c5:41:30:dd:62:e5:0e:53:4e:04:ec:99:
31:dd:e9:5c:3c:c6:e9:46:39:f0:88:10:45:0e:0a:
ba:c1:2d:43:d0:46:52:d9:a2:30:c7:46:a5:71:b2:
3d:d5:1e:e8:03:b3:89:92:a0:60:64:52:aa:30:57:
10:54:de:94:5c:1b:94:d5:9d:38:59:7f:34:05:69:
1e:61:1d:9e:ac:12:a6:26:63:70:ba:06:fd:e1:bb:
92:12:02:fb:28:ef:34:a6:36:99:1b:47:7d:6b:eb:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:4F:45:B2:FE:84:65:46:77:94:4B:71:BB:CC:F2:E6:8B:6C:FC
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xZpPRbL-hGVGd5RLcbvM8uaLbPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.24.0/21
Signature Algorithm: sha256WithRSAEncryption
59:24:b8:eb:ad:e2:be:47:53:a9:e4:52:38:b7:cc:1f:4a:42:
53:ef:80:eb:1e:24:0d:7a:3a:71:5e:1c:95:a4:db:9e:8e:51:
b4:68:e2:02:9c:f1:5b:d3:d4:a4:7c:9d:e4:5c:c0:5e:1e:e5:
1e:f3:d0:6d:d6:1e:8b:00:ff:47:04:48:09:d5:ea:4a:cd:bf:
54:57:b1:82:48:f8:25:31:f5:c9:39:da:f8:21:87:27:d9:7f:
f4:07:2c:c3:07:4d:1c:06:74:e1:e8:30:76:0e:b1:4a:cc:34:
7a:3a:b2:d0:07:63:b4:b8:cf:96:76:96:30:07:d9:08:7d:e4:
e4:bf:5c:1f:56:c2:69:61:53:02:91:14:25:d8:55:bc:8f:ef:
95:f6:be:82:66:8c:1d:61:cd:47:a2:d1:09:d8:c5:21:9b:38:
6e:61:e3:5e:bd:90:12:f8:f0:91:b0:db:63:d4:6a:88:2b:92:
2b:21:7f:1a:c6:e4:b4:55:00:d1:07:73:a9:88:7e:0c:91:df:
49:df:f5:de:ad:8b:29:24:b7:9d:eb:ef:d4:09:f9:f7:26:7e:
98:08:f0:28:68:68:34:b2:18:fb:2a:d1:76:70:53:27:60:f4:
d8:fd:48:c4:b6:39:c4:a5:7c:e3:00:ae:23:37:8b:69:1b:62:
da:61:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:42 2025 by rpki-client