Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/leea8L3-rSxVGHEDo0uHmQ8QETQ.roa
File: leea8L3-rSxVGHEDo0uHmQ8QETQ.roa (raw, json)
Hash identifier: 83U6jqW3dijKRGGKg755rDiyHK5ocda9fWfTNDKpH90=
Subject key identifier: 95:E7:9A:F0:BD:FE:AD:2C:55:18:71:03:A3:4B:87:99:0F:10:11:34
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01888B0F8DEAD788365A08A0076C01C421FD
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/leea8L3-rSxVGHEDo0uHmQ8QETQ.roa
Signing time: Mon 05 Jun 2023 10:17:12 +0000
ROA not before: Mon 05 Jun 2023 10:17:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56619
IP address blocks: 94.125.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:0f:8d:ea:d7:88:36:5a:08:a0:07:6c:01:c4:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jun 5 10:17:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95e79af0bdfead2c55187103a34b87990f101134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:9d:d5:9f:27:c8:a7:12:fc:80:86:2d:a7:
1a:9b:95:f2:e8:77:5e:09:39:e1:fa:46:df:0f:73:
ad:fe:4b:7f:fd:a1:d7:83:e4:23:2e:4b:05:ce:51:
db:b9:e6:d9:b3:06:91:4a:57:a1:16:ee:cb:cf:cb:
35:de:a1:72:8e:db:f5:87:91:06:97:07:88:92:e2:
fd:04:1b:02:43:40:b4:eb:1a:22:6e:61:0e:4b:a6:
18:e8:c9:7a:33:87:18:3a:b6:03:95:82:79:f9:bc:
fd:d6:6e:e6:6a:c2:87:95:36:54:0c:ee:ea:99:88:
17:44:ab:44:83:70:c6:27:1d:7e:40:fc:cc:ca:a1:
1e:70:1b:b8:d2:fa:cd:d1:f3:4a:fd:15:98:3f:20:
c1:f1:0a:b3:44:ed:04:63:97:ce:b0:43:55:9a:56:
64:4f:0c:05:6e:7b:96:09:2f:0c:39:e9:97:fa:93:
8c:37:ff:83:b3:1b:b7:85:94:2f:8b:5d:ba:b8:d0:
4a:81:3b:6d:61:8f:06:10:02:40:ed:7d:ee:21:15:
95:19:2c:7e:4a:f1:9b:62:37:6e:1f:9e:cd:52:ec:
20:bd:e9:6d:30:45:6b:94:9f:93:d3:0a:4a:1d:36:
bf:5c:da:c7:98:d5:fb:19:40:e6:2c:d3:44:a6:33:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E7:9A:F0:BD:FE:AD:2C:55:18:71:03:A3:4B:87:99:0F:10:11:34
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/leea8L3-rSxVGHEDo0uHmQ8QETQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.13.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:53:14:2b:52:a2:9b:51:48:5d:6e:49:e8:74:37:8e:0c:c1:
dd:8c:a0:53:48:ae:7b:02:c3:2c:00:7a:11:cb:9e:da:98:fb:
7e:21:b7:51:6d:17:d1:b4:b5:d2:57:45:7f:c6:c9:dd:8e:1d:
55:65:2e:2b:c8:e0:be:5e:02:1e:01:68:6c:ee:f3:8f:53:97:
2d:44:29:a3:89:88:63:74:22:a2:79:0e:fc:a9:0f:05:c8:8d:
e3:5f:7b:4d:63:17:d1:69:c8:1a:19:ee:6f:e4:74:18:5d:8b:
77:5f:ea:ab:60:ab:00:c4:70:e5:48:36:26:26:3a:5c:0f:20:
3d:0a:81:82:6f:b6:25:88:d7:12:d8:aa:67:c5:a2:67:4e:59:
52:b7:87:93:97:05:86:2b:1c:bc:53:89:da:b9:22:63:a3:a4:
af:59:fc:38:6d:07:c2:67:f9:70:c4:bd:b7:55:1d:24:b6:a6:
f8:4f:13:89:f5:b1:2b:2c:b7:6a:0e:27:2d:4f:79:ee:f5:04:
4c:dd:54:b5:0a:b2:95:75:e2:e8:2a:fd:9a:d3:56:b9:3c:b6:
15:d2:65:80:53:22:75:0c:3c:42:59:6d:53:82:ee:20:a9:36:
47:86:e3:92:d6:f3:97:94:02:9a:d9:22:b9:e5:be:9d:bf:4b:
b0:d0:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:46 2025 by rpki-client