Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/6EBdFVj3xKMSaFQLBPkG0vXJNp0.roa
File: 6EBdFVj3xKMSaFQLBPkG0vXJNp0.roa (raw, json)
Hash identifier: G0RoyW/KgaEIAC3v3HIZrZI7U+PVIZAnnXZ/o6P7EB4=
Subject key identifier: E8:40:5D:15:58:F7:C4:A3:12:68:54:0B:04:F9:06:D2:F5:C9:36:9D
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 026043FE
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/6EBdFVj3xKMSaFQLBPkG0vXJNp0.roa
Signing time: Sat 01 Jan 2022 02:53:53 +0000
ROA not before: Sat 01 Jan 2022 02:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48437
IP address blocks: 94.232.176.0/21 maxlen: 21
178.54.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39863294 (0x26043fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Jan 1 02:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8405d1558f7c4a31268540b04f906d2f5c9369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:d6:59:37:e2:de:25:7c:4b:90:c8:6a:c6:
c8:e6:9c:68:54:25:3b:05:4b:44:1b:ff:0f:a6:47:
3c:42:fd:62:b3:f5:a1:9b:f2:97:a1:cc:32:91:f9:
03:7a:6c:17:c3:09:9a:90:f7:86:eb:a2:20:dc:5b:
bc:5e:ba:cd:9f:e8:ef:5e:1f:f7:b6:73:47:cf:13:
c0:ee:1f:f2:e0:2d:31:b8:2b:ca:bb:01:7b:fa:e1:
8f:71:d8:9a:c8:60:08:c0:6e:ca:38:ff:95:f0:22:
4f:95:7f:92:41:8a:e4:58:f8:7a:09:6c:2d:ab:db:
29:78:d4:74:38:c6:5e:ce:5d:34:90:e7:36:e6:b5:
70:ca:49:69:b4:06:76:77:1c:d0:af:51:df:46:2e:
fc:94:ff:8d:db:9f:30:9f:46:55:1c:36:08:45:10:
23:88:53:1f:b2:02:73:83:b9:ec:7d:f9:90:a0:a7:
39:a6:2b:cf:65:be:54:43:3d:b8:aa:86:59:ed:a3:
09:35:d8:2e:39:1e:c5:6c:bd:cf:17:45:5c:a2:1c:
63:cb:86:ce:a6:9c:4b:11:91:89:da:3d:fe:22:8e:
1e:4a:b8:0a:1b:15:32:8e:4b:23:7d:f4:80:49:0a:
53:1c:81:6b:a5:29:0d:0c:f4:bd:68:a2:16:a9:56:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:40:5D:15:58:F7:C4:A3:12:68:54:0B:04:F9:06:D2:F5:C9:36:9D
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/6EBdFVj3xKMSaFQLBPkG0vXJNp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.176.0/21
178.54.128.0/17
Signature Algorithm: sha256WithRSAEncryption
38:9f:99:2a:aa:c6:b9:7a:b3:cf:86:a4:0f:a2:03:9a:ed:9c:
ee:43:f1:4b:e0:d9:86:c7:b5:c6:93:96:fa:72:c1:3b:42:58:
1b:12:34:3c:f3:4d:b8:4e:de:79:4b:68:1a:33:35:95:59:95:
92:41:44:f6:43:ba:db:c2:0b:f4:5f:a5:c4:04:96:61:db:f4:
e7:a2:5d:05:25:98:68:0a:10:99:6e:90:7e:8e:c6:42:df:80:
5c:8c:94:9b:90:8d:fc:45:5d:32:fa:c5:54:5d:04:45:68:79:
53:e4:1c:63:41:99:57:d7:d9:9c:b8:3d:dc:37:8a:51:4f:31:
ad:7f:f0:a2:e9:48:bd:64:90:1b:1b:d9:af:fa:0d:ee:56:7f:
05:c2:78:dc:20:eb:62:e3:75:73:81:bb:da:af:00:a6:42:da:
2b:6b:c1:07:3c:66:31:12:09:c3:04:48:db:ec:25:3b:21:75:
3b:85:62:6a:ee:87:ea:9a:cf:c6:6c:d6:39:6d:d4:e4:90:78:
86:05:06:be:dd:41:79:b8:9b:30:71:db:c2:f3:a3:c7:5f:c7:
b7:83:3b:7d:21:de:3f:98:a8:91:01:42:bf:b7:58:34:03:05:
f4:42:47:85:5d:38:02:b7:bb:e7:ad:49:f6:cd:6d:50:01:5c:
90:44:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:13 2025 by rpki-client