Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/sJ9rAWlrX3mY4D48pySHlH4H8fw.roa
File: sJ9rAWlrX3mY4D48pySHlH4H8fw.roa (raw, json)
Hash identifier: lmH/veKYLqCEkSUpFyBArAwUsHDUQn/JZei7tTiGuuw=
Subject key identifier: B0:9F:6B:01:69:6B:5F:79:98:E0:3E:3C:A7:24:87:94:7E:07:F1:FC
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 03FFD34E
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/sJ9rAWlrX3mY4D48pySHlH4H8fw.roa
Signing time: Sat 01 Jan 2022 01:52:28 +0000
ROA not before: Sat 01 Jan 2022 01:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47748
IP address blocks: 94.155.47.0/24 maxlen: 24
94.155.48.0/24 maxlen: 24
94.155.49.0/24 maxlen: 24
94.155.55.0/24 maxlen: 24
94.155.93.0/24 maxlen: 24
2a02:4c8:af::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67097422 (0x3ffd34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b09f6b01696b5f7998e03e3ca72487947e07f1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:9c:c7:75:a6:b1:b3:a1:81:59:74:db:08:
fd:4f:71:23:3b:ca:c3:cb:1e:0c:f0:f7:93:87:64:
d4:a6:5d:52:dc:0f:b1:f4:28:cc:36:ea:65:86:db:
75:c4:8e:a2:1d:51:c3:ea:61:bd:42:4d:88:d3:73:
3e:1f:65:0d:ed:90:11:4e:9e:86:8d:b2:2a:62:dc:
65:d1:52:ca:4f:25:58:18:23:3f:7e:33:3e:66:23:
1e:ed:bd:b0:a9:e8:f8:2a:72:2d:5c:53:4e:0d:33:
ba:98:84:c2:5a:6c:4f:40:32:0c:f7:c0:2b:5d:8a:
49:e5:d3:ac:f7:3b:d5:9b:78:d5:21:60:51:45:45:
7f:49:47:30:02:e2:4b:f8:a3:59:3c:3a:e5:b4:c1:
65:16:43:dd:6b:f8:b0:44:80:7a:a3:f9:77:30:4f:
0c:72:4b:19:d8:78:70:86:0b:9a:57:09:fc:34:29:
f6:84:60:88:5d:c2:94:7e:1a:e4:9a:01:2c:fa:8d:
41:7d:2d:76:b9:b2:16:16:8e:0f:9b:d4:0c:fa:91:
e4:e2:56:f2:e2:5c:8a:19:b7:7f:b7:10:68:9d:d5:
d1:53:df:65:27:06:c3:50:2a:d9:47:e1:5a:83:90:
fc:64:0f:d2:5f:ea:a2:02:39:69:d1:e2:25:63:cb:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:6B:01:69:6B:5F:79:98:E0:3E:3C:A7:24:87:94:7E:07:F1:FC
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/sJ9rAWlrX3mY4D48pySHlH4H8fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.47.0-94.155.49.255
94.155.55.0/24
94.155.93.0/24
IPv6:
2a02:4c8:af::/48
Signature Algorithm: sha256WithRSAEncryption
c8:f4:ae:d2:56:97:8a:56:40:cc:12:06:e8:17:ac:6a:7a:1a:
b9:d7:d9:42:27:d9:ba:eb:95:0a:9c:e3:cd:be:fd:45:68:90:
fc:ca:e4:02:95:31:d8:a9:a2:3c:ec:d8:fa:c7:17:56:10:41:
88:8c:77:51:ba:98:98:e7:81:9b:76:57:35:d2:99:37:93:46:
63:a2:2c:0b:cc:8e:ae:33:14:00:42:a8:01:73:e0:24:4f:4e:
5b:53:e6:42:bf:0a:4a:cf:08:09:d4:eb:5d:0d:4d:e5:c4:9e:
d0:6f:4b:1a:06:d1:46:cc:2d:bd:0f:5e:22:32:44:90:68:d2:
c6:9e:0e:7b:35:c5:78:18:ea:1b:0a:0a:63:4a:1f:cb:72:d7:
e3:16:47:13:47:e0:f2:fd:97:b0:88:4c:99:05:51:7d:35:f4:
c2:f4:40:c6:63:53:c3:7e:72:6b:41:19:08:e6:f8:6e:c4:b6:
7b:ae:da:87:79:8b:cf:eb:59:2a:6a:49:ca:75:15:9f:28:39:
f3:55:d8:4f:4a:c7:41:12:ec:8b:fb:54:23:2b:31:3f:24:65:
03:64:fe:12:ac:8f:3a:ef:54:e8:b8:3b:df:f8:ea:c5:7a:e9:
6c:a3:6f:ff:dc:c3:fc:cb:f9:b8:f3:75:80:0d:7c:20:d4:88:
69:28:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:50 2025 by rpki-client