Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/rf9Y-Nw27ssXiuhEu1QWSF_ksSo.roa
File: rf9Y-Nw27ssXiuhEu1QWSF_ksSo.roa (raw, json)
Hash identifier: EsgGFqPQXFK+t+bGMNcIQ9U/ro4XILyeu2GnufHWfJc=
Subject key identifier: AD:FF:58:F8:DC:36:EE:CB:17:8A:E8:44:BB:54:16:48:5F:E4:B1:2A
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 14C1086F
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/rf9Y-Nw27ssXiuhEu1QWSF_ksSo.roa
Signing time: Sat 01 Jan 2022 04:52:50 +0000
ROA not before: Sat 01 Jan 2022 04:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200820
IP address blocks: 185.94.13.0/24 maxlen: 24
185.94.14.0/24 maxlen: 24
185.94.12.0/24 maxlen: 24
185.94.15.0/24 maxlen: 24
2a03:9fc0:2::/48 maxlen: 48
2a03:9fc0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348194927 (0x14c1086f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Jan 1 04:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adff58f8dc36eecb178ae844bb5416485fe4b12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:a3:ef:17:06:0f:06:c0:91:c4:ef:b8:5c:
25:81:d4:8d:2e:e1:ba:9e:e7:3e:95:e5:ab:38:c7:
70:29:e5:c7:1c:51:2f:b7:d6:c8:4b:b5:96:f6:e5:
13:5b:3a:cd:bb:9a:0c:af:4f:58:b3:01:09:53:a4:
cd:9c:5b:9a:bd:81:46:22:81:38:35:86:f1:18:41:
a2:8c:f9:87:39:15:6b:56:10:39:e7:5c:e9:0d:c3:
09:a6:f1:a2:fb:c1:d9:55:47:c3:92:4f:fe:c5:a3:
58:fa:87:40:ef:b6:b0:b8:cb:8c:bc:13:34:65:14:
aa:de:da:00:fe:d5:a0:d3:a3:8f:19:c5:36:84:08:
65:b7:46:52:9b:ea:97:36:7d:3a:62:fe:a5:4c:f7:
b3:8f:6f:81:1f:35:d3:3f:4a:bf:04:e2:4f:57:5f:
e9:52:4b:e0:73:46:fc:38:8f:e3:bf:05:ac:04:23:
12:aa:e4:e6:2c:ad:64:a0:47:c2:21:73:7b:7a:41:
7a:a1:0e:d9:14:19:e4:20:f7:97:fe:fa:7b:0a:32:
82:66:45:04:ec:76:e6:34:95:34:63:c0:88:9a:cd:
61:4b:be:7d:00:76:de:2e:61:79:0b:10:05:b0:7b:
ca:68:e5:82:a4:27:76:9b:07:ae:bd:8f:cb:68:0f:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FF:58:F8:DC:36:EE:CB:17:8A:E8:44:BB:54:16:48:5F:E4:B1:2A
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/rf9Y-Nw27ssXiuhEu1QWSF_ksSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.12.0/22
IPv6:
2a03:9fc0:1::-2a03:9fc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:c1:23:34:bf:1b:ad:47:ff:7c:88:06:7c:47:be:dd:f2:46:
bd:87:85:39:e1:26:b5:c9:9f:79:5f:a4:9d:04:2b:41:be:1a:
08:1b:fa:78:91:dd:25:b7:a1:49:18:ac:05:15:7f:db:cb:90:
e2:c6:4d:37:43:c8:1d:98:51:1a:6a:4a:ed:68:d1:a1:0d:bd:
ec:80:ba:7c:5a:0c:90:6b:9f:d5:4a:fe:6e:6b:f4:96:1e:20:
08:fc:2b:4c:ee:00:45:ec:5e:97:f9:6a:6f:45:d9:10:a9:e5:
30:a4:f8:8b:09:ea:4c:4a:53:69:16:d0:51:5e:8c:e9:ee:d4:
51:3c:69:ee:b3:91:49:1f:66:13:06:f0:b6:8b:08:65:39:fd:
3e:cd:75:bd:d1:48:ea:1b:12:19:90:0f:1c:6f:73:81:63:e6:
1e:06:15:38:27:c2:68:43:97:6a:74:54:9b:6d:57:5a:94:40:
b3:05:8e:e8:d6:8e:5a:78:48:8a:84:e5:10:8d:30:01:5f:5b:
f0:7d:da:fa:22:c7:2f:88:ad:29:6f:7f:7d:6d:fe:dd:bd:1b:
53:fe:e9:d3:3e:45:98:55:95:88:d6:f7:6e:09:73:8a:4d:c0:
d6:7c:2e:81:9b:87:57:f9:51:57:66:b1:de:20:ea:45:77:65:
26:1e:95:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:00 2023 by rpki-client on console-fra.rpki-client.org