Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/DMdkZHeWbZkWYvoKludt5TKnCDE.roa
File: DMdkZHeWbZkWYvoKludt5TKnCDE.roa (raw, json)
Hash identifier: s/U6EkMZEOxc+c4pEo9Pr7jSABy9kOBfIO7XnCNH09Y=
Subject key identifier: 0C:C7:64:64:77:96:6D:99:16:62:FA:0A:96:E7:6D:E5:32:A7:08:31
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 368E69ED
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/DMdkZHeWbZkWYvoKludt5TKnCDE.roa
Signing time: Fri 08 Apr 2022 12:35:15 +0000
ROA not before: Fri 08 Apr 2022 12:35:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47807
IP address blocks: 94.125.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915302893 (0x368e69ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Apr 8 12:35:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc7646477966d991662fa0a96e76de532a70831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:45:7d:71:f1:5b:45:81:e0:b7:73:ea:25:
e8:29:b4:67:9f:20:33:2c:f8:ad:88:72:9a:7b:5c:
e8:c8:87:c1:0a:4e:e2:ed:64:93:6e:66:39:17:fb:
00:f7:03:22:61:2d:60:1e:40:c1:e4:a9:4d:d5:24:
39:4c:9c:62:0e:f6:93:91:73:50:94:5f:7f:63:97:
ce:86:76:2d:ef:86:78:26:2e:c9:2c:41:d6:3d:cb:
b9:b4:e0:39:18:f3:28:b1:03:85:a5:2f:af:7c:ca:
ca:d0:02:2a:a8:f1:e8:f6:61:55:b9:c9:1a:2a:9f:
e0:b5:3d:cb:24:96:e4:f5:dc:e6:a6:66:9b:5f:69:
76:87:de:a5:f1:7d:56:dc:d3:10:6b:5d:f1:21:e2:
83:97:e2:b0:aa:23:9c:56:8c:14:3c:b5:a9:43:04:
95:7f:a7:f0:00:40:34:e6:69:20:f8:ba:59:f8:8f:
e9:2d:f0:97:2b:f8:8c:1a:a3:00:63:6d:71:e5:57:
3b:8e:32:ca:1e:09:f4:af:94:1d:3f:5c:95:c7:8f:
9a:22:b9:d5:9e:c5:a8:11:3b:ff:28:6e:9f:01:d1:
71:cb:fb:27:40:b8:85:4f:62:c3:6e:19:13:2d:ad:
f8:06:4f:24:2f:2d:61:90:6f:27:81:a5:91:4d:8b:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C7:64:64:77:96:6D:99:16:62:FA:0A:96:E7:6D:E5:32:A7:08:31
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/DMdkZHeWbZkWYvoKludt5TKnCDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:8b:95:cc:af:20:f2:d2:82:8e:78:8a:1b:e8:d0:52:d2:2b:
92:d2:51:5f:f7:de:f7:3a:f3:e6:23:53:f2:dd:bd:4a:ee:56:
05:0c:1c:f0:aa:6a:d5:b2:c9:84:63:56:3f:41:12:ea:81:f7:
95:8a:e5:1f:c0:53:f0:91:32:3f:17:63:f9:8f:ae:fd:2d:ff:
4f:2a:fd:43:60:77:c1:ce:37:9c:06:d4:aa:2e:bf:49:f0:a0:
01:c6:60:4c:88:7b:3e:ed:b8:4c:8b:0b:65:e4:71:9b:a3:16:
6b:88:70:f5:6f:e5:7f:da:d2:25:5e:d6:fe:41:ae:7e:6e:d2:
b9:27:f8:a7:bb:07:50:fe:0d:58:20:ad:2a:41:84:91:d4:a5:
01:27:0e:d1:fc:be:63:89:2b:05:25:89:f1:f3:4a:e7:f5:96:
56:02:7a:93:24:6e:50:70:71:33:6b:66:e0:95:f4:35:ca:ef:
f0:cc:39:e3:23:aa:9a:c7:0c:6a:77:b1:82:08:1b:a5:5e:d5:
0b:c6:4d:45:b0:14:cf:2d:2b:e0:ad:cc:2e:95:e0:88:cf:ef:
cf:51:53:75:c0:8c:e1:86:cc:db:c4:0f:01:ec:d7:dd:87:09:
1d:6f:94:a8:da:67:b2:03:09:4d:20:68:38:4d:4c:5a:ba:bf:
25:ad:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:13 2025 by rpki-client