Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/Oz9CYLeXdgGZwG4cKZjLVYm_sy4.roa
File: Oz9CYLeXdgGZwG4cKZjLVYm_sy4.roa (raw, json)
Hash identifier: cuLlU0lZ6iC0wIv6gpn/zUvYny6lxUb6jIAzupCIiak=
Subject key identifier: 3B:3F:42:60:B7:97:76:01:99:C0:6E:1C:29:98:CB:55:89:BF:B3:2E
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01856F0240430E511F57E088DC815AAA2EC9
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/Oz9CYLeXdgGZwG4cKZjLVYm_sy4.roa
Signing time: Sun 01 Jan 2023 20:24:56 +0000
ROA not before: Sun 01 Jan 2023 20:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39826
IP address blocks: 94.250.32.0/23 maxlen: 23
94.250.33.0/24 maxlen: 24
94.250.34.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:40:43:0e:51:1f:57:e0:88:dc:81:5a:aa:2e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 20:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b3f4260b797760199c06e1c2998cb5589bfb32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:44:eb:20:33:0b:81:0e:31:e1:63:d5:3c:
2f:fa:08:af:8d:26:88:55:d7:be:0d:65:fd:e2:b2:
ab:de:6c:b8:5a:b9:13:72:81:3d:94:43:8a:80:18:
86:36:e7:68:c1:f5:4a:d2:30:8d:09:16:f3:7a:68:
a1:48:23:78:3c:23:70:ec:fd:06:60:69:26:2b:67:
12:5a:a5:36:a3:b8:ad:e2:de:b3:aa:fc:a9:ae:6a:
9c:b7:f3:84:d8:a0:97:c4:3a:ac:bf:f1:95:46:42:
c8:29:45:e7:38:db:6d:73:ae:a1:90:ff:67:72:3a:
22:e7:ba:1a:4d:0a:9e:53:f9:5e:08:f4:2b:4a:da:
2d:b4:ef:56:24:64:b3:fc:a1:f1:cb:98:18:9b:ae:
12:14:77:66:93:f3:3e:fa:93:48:f5:f5:8c:e3:08:
ec:f7:9a:6f:a6:32:1e:fd:71:ee:09:b5:0e:22:b4:
dd:b3:fe:fa:c5:6b:8d:42:eb:af:c1:68:25:b8:ce:
7c:5b:2b:c6:c6:2f:be:81:69:b2:bc:cb:43:a7:3b:
b8:84:d5:3f:78:06:58:5f:89:d6:6a:9b:c8:33:5d:
a4:18:00:4e:80:54:ce:93:25:eb:a4:57:8e:9d:da:
11:9a:b0:99:7d:c2:da:b9:2f:53:51:29:f0:da:e9:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:42:60:B7:97:76:01:99:C0:6E:1C:29:98:CB:55:89:BF:B3:2E
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/Oz9CYLeXdgGZwG4cKZjLVYm_sy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:ce:b4:7d:ad:83:40:38:60:0c:a1:e0:18:6c:11:b8:c2:ee:
75:1a:58:12:17:f5:0f:0c:6f:c4:9e:9f:43:b8:53:ab:5a:a8:
d4:36:4c:55:2f:e4:38:cc:a6:83:c9:b6:78:46:54:79:c6:75:
b1:3e:44:06:a6:49:77:cc:17:df:b0:bf:e9:a1:d1:7a:88:2e:
16:f5:81:2c:e4:d9:69:ab:2c:f9:1f:cc:3d:cb:e3:3b:23:c4:
f5:60:a3:37:6e:63:4d:2c:9e:8d:f3:90:4c:52:25:92:d4:e8:
21:1c:28:5c:50:15:5d:44:75:22:91:02:8c:1c:25:65:ed:78:
88:5a:7e:90:47:4b:56:bf:52:59:b5:b3:7e:19:dd:8f:a7:9f:
b5:26:ae:e6:83:44:22:0a:77:88:0e:43:02:d2:39:e4:1e:de:
2e:f7:26:41:ee:41:4a:0d:e5:10:db:62:0f:a1:1e:22:36:b9:
ee:92:6b:97:07:b0:7d:09:eb:41:bd:b8:5a:1b:69:9c:fa:89:
0a:73:1e:a1:fc:b0:1e:a0:2d:a3:80:de:14:fb:7e:ae:05:ef:
d4:b9:97:66:db:80:57:21:09:21:20:f8:bc:ed:f8:49:cf:fc:
8f:87:df:13:3f:99:03:02:23:fd:57:f4:fe:b8:8e:26:ba:93:
7f:2f:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:08 2025 by rpki-client