Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/_gRI6OZ4VZvWnfwOzPN5RWhSmVs.roa
File: _gRI6OZ4VZvWnfwOzPN5RWhSmVs.roa (raw, json)
Hash identifier: JDB56JwoWDSv/j0U76fC8rFbPHjYUjztX40xn5feXw8=
Subject key identifier: FE:04:48:E8:E6:78:55:9B:D6:9D:FC:0E:CC:F3:79:45:68:52:99:5B
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018C10E43ADCC436020C5612E81DBE337FA0
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/_gRI6OZ4VZvWnfwOzPN5RWhSmVs.roa
Signing time: Mon 27 Nov 2023 13:07:21 +0000
ROA not before: Mon 27 Nov 2023 13:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 94.154.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:e4:3a:dc:c4:36:02:0c:56:12:e8:1d:be:33:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Nov 27 13:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0448e8e678559bd69dfc0eccf379456852995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:ea:70:73:cd:98:58:03:95:4c:31:65:98:
a5:1a:c0:f3:70:c2:fb:b7:13:6d:62:0e:d0:41:be:
1a:c7:70:1b:ba:b3:fd:b4:52:40:3f:11:47:a1:2d:
f4:cf:1d:25:79:aa:70:4b:7e:9f:09:41:86:a9:0d:
96:c1:df:4f:24:0b:21:e2:02:8a:41:f4:07:be:c0:
ba:11:ce:12:bc:91:8c:f0:4a:da:1b:fa:19:fa:52:
d3:4f:48:c7:c5:a3:b7:42:6e:36:e5:8a:60:1b:b1:
cb:55:1f:05:a0:e4:e3:02:92:0a:79:c5:e0:98:94:
11:43:2d:a2:49:8f:73:5e:97:6e:d8:46:d2:7e:37:
13:dc:ea:ac:59:2d:5e:33:29:c6:c7:ad:1b:ad:36:
c9:b1:d6:0b:86:b3:8b:47:b8:96:5f:4b:3b:4a:1e:
d1:ef:bf:23:db:04:89:bc:bb:ef:15:c9:05:ba:a1:
2c:eb:af:6a:bc:ab:81:5c:27:c0:17:9e:6b:65:71:
a3:9e:54:ee:03:12:ec:88:69:d3:a4:c7:8f:10:cf:
fa:7b:7d:72:d7:ba:e9:a8:2c:4d:d4:15:1b:39:ac:
69:c1:3e:f8:bc:80:d1:c2:5a:e2:3d:e4:2a:60:37:
c5:41:9f:b3:b6:91:f0:d6:70:e7:97:e6:91:f3:6b:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:04:48:E8:E6:78:55:9B:D6:9D:FC:0E:CC:F3:79:45:68:52:99:5B
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/_gRI6OZ4VZvWnfwOzPN5RWhSmVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5e:2c:f9:76:bd:49:0b:71:74:b1:d7:cd:94:0b:2a:94:22:
30:f0:ce:f7:9c:5d:51:a7:3f:9a:ea:97:8a:19:74:2d:8e:9e:
bf:5c:27:77:3b:10:97:c9:2a:2a:aa:f0:0f:81:a8:da:ce:b6:
04:06:f4:03:8e:f5:58:cf:88:68:68:be:87:b4:39:b0:66:2b:
fc:ff:7f:c0:56:3b:a4:ab:37:36:aa:21:f1:c2:28:4f:18:d6:
e6:11:b6:db:3a:d0:75:fe:44:25:ba:bf:0e:46:07:d1:7e:30:
00:09:98:69:9c:b4:7f:6c:04:07:2d:40:3d:f1:f0:58:10:68:
24:ea:27:87:c2:25:02:38:f4:cc:8f:47:2a:59:84:b2:7a:b2:
75:0d:f9:b5:dc:a9:cd:e6:72:da:24:c0:30:5c:48:d6:56:04:
d6:51:6f:08:a9:45:8d:2d:f2:d2:86:69:ec:c9:28:8c:6d:b2:
c6:46:46:f4:00:a1:25:f0:61:dc:fc:14:10:7a:0e:9d:c0:08:
75:9f:02:a5:6f:08:e8:d6:00:61:9c:8d:80:b6:9d:0a:9d:e3:
85:ef:96:cf:ab:18:eb:60:67:bf:e3:fe:f0:e7:e9:94:cb:6e:
63:8c:36:d0:95:73:69:1e:67:d0:90:2e:a7:42:f5:15:bf:a9:
63:d0:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:14 2025 by rpki-client