Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/p7psr98vf8LBYgAUZptxnag_fnI.roa
File: p7psr98vf8LBYgAUZptxnag_fnI.roa (raw, json)
Hash identifier: ZuhG2cFFY4Ut1h8QfU/YTw63EArI6jk1AmGfdXCYfMw=
Subject key identifier: A7:BA:6C:AF:DF:2F:7F:C2:C1:62:00:14:66:9B:71:9D:A8:3F:7E:72
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01856F0240B75718613C770CF0E157657E1D
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/p7psr98vf8LBYgAUZptxnag_fnI.roa
Signing time: Sun 01 Jan 2023 20:24:56 +0000
ROA not before: Sun 01 Jan 2023 20:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42571
IP address blocks: 94.250.82.0/23 maxlen: 23
94.250.80.0/23 maxlen: 23
94.250.96.0/20 maxlen: 20
94.250.112.0/22 maxlen: 22
94.250.64.0/24 maxlen: 24
94.250.68.0/22 maxlen: 22
94.250.67.0/24 maxlen: 24
94.250.65.0/24 maxlen: 24
94.250.66.0/24 maxlen: 24
94.250.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:40:b7:57:18:61:3c:77:0c:f0:e1:57:65:7e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 20:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ba6cafdf2f7fc2c1620014669b719da83f7e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c5:ee:1c:c3:6b:db:7c:5c:66:df:72:c6:11:
6b:3e:57:7d:61:a9:d7:f4:fb:8a:d0:81:97:b0:7b:
4f:ae:4b:ac:13:a3:7e:78:4c:85:39:d1:c7:5c:19:
3e:2a:dd:ee:ed:ea:ee:72:e4:58:fc:8d:cc:71:52:
b7:69:dc:be:7b:a7:44:38:07:1c:5e:16:0f:61:6d:
6e:07:42:c2:e6:b9:00:fe:aa:52:da:66:f4:82:4e:
55:da:d5:00:69:5d:21:ea:2f:fc:7e:79:f1:3e:ef:
b8:a7:a8:04:f9:26:1d:1b:d4:b9:7a:c0:aa:aa:ac:
12:cf:90:d0:17:fe:99:ab:45:93:9d:b1:a1:66:33:
ee:4c:6d:7c:1c:df:ba:dd:9b:a3:80:d2:26:d7:84:
2a:0c:8f:d0:40:78:5e:f8:eb:97:47:e6:5c:39:22:
4d:ff:ea:28:c1:c8:25:04:c6:1b:3e:92:0f:16:5b:
f0:04:a7:c1:5d:97:89:61:01:62:aa:0e:ae:11:50:
5c:31:d1:5c:7d:09:f3:35:00:f7:65:4a:59:10:51:
df:b1:78:f5:79:b6:8f:e5:2d:c4:3b:84:fe:ae:ec:
b0:f2:3c:87:3d:1b:7b:71:b0:7d:98:a1:75:2a:f7:
75:65:a5:49:77:08:b4:21:f3:de:74:78:f1:31:83:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BA:6C:AF:DF:2F:7F:C2:C1:62:00:14:66:9B:71:9D:A8:3F:7E:72
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/p7psr98vf8LBYgAUZptxnag_fnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.64.0-94.250.83.255
94.250.96.0-94.250.115.255
Signature Algorithm: sha256WithRSAEncryption
41:6a:ac:46:c4:fc:d1:39:34:66:4b:d9:07:55:1a:eb:45:85:
92:5f:b9:e4:30:9f:2d:83:8f:7a:5d:34:4d:bd:9b:4b:fa:d8:
a9:ee:b1:b6:12:e7:34:01:1b:1f:73:10:61:b7:4e:86:b8:b0:
39:38:f4:a6:b4:3e:c9:b8:6b:1d:63:79:fa:79:07:8e:75:5a:
69:5a:07:20:d2:30:59:1e:32:98:8b:45:1f:2a:fb:aa:5e:2b:
57:03:e0:af:be:c9:38:e8:e3:6e:89:1a:59:81:15:51:2c:d7:
ca:6f:9a:ae:64:cf:2a:e8:30:1f:dd:77:4b:2a:d2:18:9e:b3:
3a:3f:4a:1c:7e:23:a6:4d:93:eb:10:84:91:ac:80:2f:2a:02:
b5:52:8c:4c:64:2f:8c:73:e7:0a:8e:95:0e:da:8d:95:6d:1f:
d0:57:9b:64:ae:5a:c6:74:a8:60:b1:fa:77:40:03:b7:c7:a8:
e7:6b:aa:2d:f3:02:23:42:c2:29:30:1f:38:dc:12:0e:6e:38:
8d:92:79:47:61:4d:78:22:c7:e7:79:f7:47:91:8b:3c:18:9a:
ae:c5:f0:a3:93:f6:be:d7:71:73:52:1a:22:5d:8d:f0:a9:86:
66:6c:2a:36:4e:a1:91:89:5e:df:2b:e2:0c:f1:cb:23:39:09:
3f:5a:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:29 2025 by rpki-client