Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/XInfupXuQ8nDLsPTFKuYvP4Qv04.roa
File: XInfupXuQ8nDLsPTFKuYvP4Qv04.roa (raw, json)
Hash identifier: +uUk8GMWV2naVK/pE1qD019rCU68b8oy/PBftRYF0Rs=
Subject key identifier: 5C:89:DF:BA:95:EE:43:C9:C3:2E:C3:D3:14:AB:98:BC:FE:10:BF:4E
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 01856D0AEAD36E044ADED96DC86FDC1C11AC
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/XInfupXuQ8nDLsPTFKuYvP4Qv04.roa
Signing time: Sun 01 Jan 2023 11:15:10 +0000
ROA not before: Sun 01 Jan 2023 11:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56791
IP address blocks: 94.243.224.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ea:d3:6e:04:4a:de:d9:6d:c8:6f:dc:1c:11:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 1 11:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c89dfba95ee43c9c32ec3d314ab98bcfe10bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:71:b0:f0:85:f2:02:16:6d:f2:5a:c6:92:
c3:59:dc:a7:62:2e:e3:84:d7:72:d5:fc:d4:8c:28:
50:cd:64:68:7f:bb:69:52:70:80:96:bc:f1:f7:31:
c0:1f:f8:bb:58:58:22:5c:e7:43:e4:52:ab:0b:98:
c1:a5:4d:77:c9:37:6e:5d:2d:ff:5a:10:b1:d1:d8:
fb:14:01:3c:db:d3:4d:f0:d6:4f:03:ca:7a:e2:b4:
73:e0:de:ce:fd:05:d4:4e:69:3c:28:1d:d3:62:40:
77:dd:c6:7a:84:39:f8:ab:10:d6:b5:a3:6d:d7:d4:
b9:ad:86:78:3d:a0:30:d9:96:d3:4e:26:c4:68:09:
6f:ba:24:99:59:4f:3b:41:60:79:f4:b1:32:e6:af:
dc:28:d2:fb:6d:c1:df:0b:32:36:da:50:47:eb:30:
34:88:d9:f6:aa:9a:fc:e8:99:b6:82:ac:77:4a:39:
6b:dd:ee:40:35:b3:52:83:16:0a:d9:d8:79:f7:a3:
34:34:5e:f5:c2:90:98:37:cb:ad:c8:fb:49:ab:95:
4a:be:37:d0:40:db:a1:14:c1:a7:33:52:49:1d:c4:
ee:fe:98:13:68:51:51:f0:95:4c:ff:40:a6:c3:7e:
6b:bc:c3:72:b1:24:b2:de:1d:fc:d4:a6:28:1a:0c:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:89:DF:BA:95:EE:43:C9:C3:2E:C3:D3:14:AB:98:BC:FE:10:BF:4E
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/XInfupXuQ8nDLsPTFKuYvP4Qv04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.224.0/21
Signature Algorithm: sha256WithRSAEncryption
77:cc:7e:76:ef:60:ac:26:36:86:33:d6:37:3e:a5:c4:26:af:
4b:fa:f0:82:93:b3:d2:72:1b:15:20:ff:10:0d:fc:36:b1:62:
f3:9a:f6:54:19:d5:60:d1:a9:22:37:25:66:c8:72:c6:33:cd:
0d:bb:31:6d:da:af:4e:54:3e:79:a4:6f:84:ee:ab:2a:79:7a:
da:cc:10:2a:8c:fe:d4:18:a0:d4:75:ee:2f:d0:40:d0:41:a0:
fd:5e:e2:6e:6e:5a:96:4a:a2:0d:9f:db:ef:f7:fb:af:2b:32:
41:24:cd:cd:f3:fe:28:89:fa:ae:9f:f4:69:f4:9d:8b:49:46:
84:25:28:44:cb:71:82:e0:df:ac:1a:7a:37:19:37:c8:8e:05:
ac:e7:46:7d:28:1f:27:63:39:45:eb:e7:30:39:1b:4f:ee:bf:
65:5c:74:7e:5d:9a:a3:24:29:ff:d4:88:79:44:c8:4d:73:67:
4c:27:9d:54:eb:5c:e0:50:f3:3a:6a:46:b6:a5:92:dc:2e:38:
6e:d4:c1:9f:fc:48:bf:19:25:6d:a6:0b:40:43:98:e6:97:82:
a5:df:d7:03:99:93:db:c8:f6:e9:05:fe:4d:c8:d7:50:ef:17:
2f:f5:83:fb:52:54:d0:8a:8e:4b:3f:33:52:33:54:5e:ef:65:
40:59:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:16 2025 by rpki-client