Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/u67lriXaIVrS57s23k7WwM7EmE4.roa
File: u67lriXaIVrS57s23k7WwM7EmE4.roa (raw, json)
Hash identifier: 17WOiKtNOog6ZXMavyO0Iz43brrE290tvw0DF5vUkII=
Subject key identifier: BB:AE:E5:AE:25:DA:21:5A:D2:E7:BB:36:DE:4E:D6:C0:CE:C4:98:4E
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0184324510EA643E16BAA74A12DF02915C29
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/u67lriXaIVrS57s23k7WwM7EmE4.roa
Signing time: Tue 01 Nov 2022 08:18:17 +0000
ROA not before: Tue 01 Nov 2022 08:18:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42571
IP address blocks: 94.250.82.0/23 maxlen: 23
94.250.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:45:10:ea:64:3e:16:ba:a7:4a:12:df:02:91:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Nov 1 08:18:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbaee5ae25da215ad2e7bb36de4ed6c0cec4984e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:a4:46:ca:cc:2e:35:58:28:71:22:06:35:
3f:f1:44:22:42:ba:51:aa:21:d4:ed:90:4a:77:04:
1d:56:53:d1:d6:15:2d:cc:9c:35:0c:bb:8c:87:2f:
cd:84:fd:cc:1d:0c:11:f7:bb:ab:11:df:93:9d:5a:
5e:75:36:72:c0:4c:0e:95:66:6e:4b:95:d7:e0:18:
58:7f:03:f6:14:49:49:c2:53:96:79:c7:bc:da:12:
97:13:5d:56:a1:1b:18:71:c0:7b:60:e5:27:ff:c7:
df:c2:7a:c7:89:4a:7d:e3:0a:9e:64:80:e6:3f:ff:
d8:73:2f:f0:53:75:bd:16:ee:d8:14:18:c0:19:51:
29:10:b3:9e:c1:a7:95:01:83:96:4b:d6:fb:d1:31:
7e:c5:61:b9:8d:9e:d7:a9:ac:f5:0f:27:20:27:0a:
2b:02:ef:d1:9d:28:a6:fb:75:48:ce:7c:c8:39:3a:
1b:09:cb:47:b5:de:cf:8d:f7:aa:df:87:99:b9:68:
b5:85:e3:37:6f:b8:1c:83:53:e9:c4:a4:77:04:72:
07:fd:31:85:19:17:ac:c9:40:02:f5:f1:e7:dd:7f:
3c:c9:d3:26:fb:91:d4:e1:ac:89:59:b7:97:2e:f0:
6b:5a:2e:5a:8c:56:8a:ef:c1:a6:9a:f7:b4:be:bf:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:E5:AE:25:DA:21:5A:D2:E7:BB:36:DE:4E:D6:C0:CE:C4:98:4E
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/u67lriXaIVrS57s23k7WwM7EmE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.82.0/23
94.250.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:6e:02:6e:4a:0f:b9:bd:28:22:86:96:09:0f:6e:d2:ca:c7:
36:3c:57:95:83:96:75:36:95:87:f9:94:6c:91:1b:28:ce:98:
58:5c:a9:8d:90:a7:24:f0:d4:e7:a0:00:90:8b:37:1f:35:8e:
5e:fe:fc:fe:0f:64:24:ab:05:f2:0c:70:02:06:83:44:f7:4a:
fb:36:41:1c:e5:34:d0:a5:a0:31:2a:be:d8:1d:c3:a2:8d:65:
2a:d5:45:17:67:b7:06:9f:a9:8e:85:5e:0c:1f:14:0a:33:1b:
fd:b5:48:35:6f:81:92:b5:f8:17:ed:b8:b7:2f:84:96:c1:ef:
f1:32:2a:09:56:84:94:50:57:61:1b:89:bf:01:36:82:a0:a7:
63:83:7f:7b:32:8c:e9:1b:b0:f5:89:c5:d6:c1:4f:6c:4e:d7:
4a:96:62:75:aa:5f:16:a9:b5:09:7d:0e:fe:2c:58:77:12:a8:
3e:ae:0f:04:99:15:ff:b4:dc:46:83:b2:ed:1f:1e:61:63:20:
7d:91:d4:7e:6b:a1:0a:6a:4f:94:70:a8:ce:5c:c7:f7:69:f6:
65:94:47:2b:33:87:f5:e4:20:98:d0:6b:de:98:5e:1c:d8:7e:
bc:96:2f:a7:57:12:09:fc:68:e3:4d:3d:f8:f4:59:2e:86:b2:
a8:7e:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:13 2025 by rpki-client