Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/7daEuSewuHMx7PlfzjxCb8T5KNA.roa
File: 7daEuSewuHMx7PlfzjxCb8T5KNA.roa (raw, json)
Hash identifier: PDS8cCxwStvtmQlGzvfVNBhvMtBfer9vlsPyyweKnSc=
Subject key identifier: ED:D6:84:B9:27:B0:B8:73:31:EC:F9:5F:CE:3C:42:6F:C4:F9:28:D0
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0186E9AD806F3824E298A1D5DE70BC4C8DB7
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/7daEuSewuHMx7PlfzjxCb8T5KNA.roa
Signing time: Thu 16 Mar 2023 09:08:27 +0000
ROA not before: Thu 16 Mar 2023 09:08:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199458
IP address blocks: 94.137.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:ad:80:6f:38:24:e2:98:a1:d5:de:70:bc:4c:8d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Mar 16 09:08:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edd684b927b0b87331ecf95fce3c426fc4f928d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:84:e4:ba:29:a2:f6:3a:59:2d:12:1e:aa:
29:25:39:80:0a:28:a7:b9:9c:fd:57:86:25:57:c7:
c3:e5:ef:9c:cb:c3:16:2d:4e:8c:74:37:52:95:80:
c8:3b:1d:04:b5:9b:e6:4b:83:a8:8d:79:7f:f6:33:
49:6c:24:13:5f:a2:88:19:d2:c9:c0:1b:01:73:85:
ae:67:b8:26:53:86:f7:53:c4:51:4e:77:90:cd:25:
24:75:01:07:af:3c:a7:2a:6d:99:ef:ef:29:62:ad:
9f:fe:95:2d:33:55:7d:22:5e:ff:f6:dd:bd:bf:b6:
68:5d:81:fc:62:72:a5:ba:0a:8b:63:d1:a1:e2:79:
89:57:35:f0:2f:82:a9:4a:b5:fe:ab:7d:7d:50:61:
89:fa:ed:3e:7b:58:3f:a2:31:a1:5c:4b:c8:20:d2:
bf:05:19:37:d3:a7:e4:45:05:14:48:12:65:ee:b6:
c3:2a:14:99:2e:17:e5:c3:f1:86:3b:bb:78:75:ce:
ac:a4:a8:23:e6:da:01:de:fe:75:c6:9e:5a:01:e6:
18:77:6c:58:d4:9c:05:87:65:75:60:01:c6:2d:d4:
46:e0:b4:76:46:4d:c1:d1:e8:8a:e4:68:88:74:1b:
a3:ad:4c:d1:11:0b:e4:1e:9d:a5:9e:2d:e9:a2:e1:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D6:84:B9:27:B0:B8:73:31:EC:F9:5F:CE:3C:42:6F:C4:F9:28:D0
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/7daEuSewuHMx7PlfzjxCb8T5KNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fb:c2:f0:82:18:35:6f:f9:da:b7:09:95:8a:91:25:0f:b3:
ec:21:5d:37:a9:60:79:cc:43:96:64:d8:c7:38:48:b8:35:68:
ef:24:14:c8:4f:88:fa:d2:a8:c4:2c:e4:b4:81:22:e5:23:89:
f3:ba:0c:63:b7:1d:69:5b:dd:3f:92:35:13:61:2e:48:37:49:
74:9f:aa:13:b9:ec:cf:1f:fa:6a:b4:50:b6:7a:0f:83:66:0c:
57:49:8d:aa:ec:c2:f9:84:c8:65:cd:cd:61:18:f2:60:51:ec:
fa:ef:cd:33:93:df:85:8e:da:46:1d:4f:3a:25:c5:34:8a:ad:
bf:60:33:9c:a5:78:52:8c:89:03:49:08:e1:0d:39:7d:60:87:
f3:d2:a0:e2:f5:bc:78:a8:b0:49:9b:0e:06:7a:a8:eb:dd:dd:
fe:50:c1:a8:86:54:e7:d8:c8:37:26:9c:14:08:65:7b:eb:17:
1b:92:fc:7b:62:61:15:15:74:3b:c4:bd:05:51:de:74:3b:19:
ef:2e:b4:68:3d:f9:e8:ac:35:8e:b9:de:ef:13:3d:54:cb:4a:
79:97:c3:c9:8f:fc:18:e2:ed:7b:b1:b6:1a:ac:d6:01:13:bf:
0b:b3:71:44:dd:a2:04:d6:24:67:28:4a:6c:7b:99:4a:68:99:
84:cb:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:50 2025 by rpki-client