Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/y-6BdR_xcbTAtU3dPIF3QiS36F0.roa
File: y-6BdR_xcbTAtU3dPIF3QiS36F0.roa (raw, json)
Hash identifier: i7UKjZu9kmtPXpYrlomYhX4x4egAh80udj3rwrAey2w=
Subject key identifier: CB:EE:81:75:1F:F1:71:B4:C0:B5:4D:DD:3C:81:77:42:24:B7:E8:5D
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 018572BA72CF9BFEE1049BBE8EDF7CA185F2
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/y-6BdR_xcbTAtU3dPIF3QiS36F0.roa
Signing time: Mon 02 Jan 2023 13:44:59 +0000
ROA not before: Mon 02 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16243
IP address blocks: 94.103.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:72:cf:9b:fe:e1:04:9b:be:8e:df:7c:a1:85:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 2 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbee81751ff171b4c0b54ddd3c81774224b7e85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:04:39:d8:60:df:0f:e9:67:c0:cc:71:ce:
9d:d8:f6:24:21:8b:59:eb:9e:65:be:9a:f8:8a:61:
70:da:1e:3e:30:db:5f:05:f8:0b:f6:8e:11:49:34:
7f:08:d8:51:54:71:1c:4d:34:ca:25:a4:21:a2:d4:
30:26:c7:86:5d:f6:57:10:36:b7:15:7a:20:1c:b5:
bb:9f:40:bd:0a:fa:1a:10:72:b4:e1:fa:ac:de:a8:
9f:56:2b:bc:f1:00:a2:4a:39:ec:d3:b3:ad:75:30:
b3:2e:c4:02:25:15:c4:1c:2c:6c:b6:24:93:55:e0:
b8:f0:80:a1:da:9e:38:8f:9a:27:27:53:38:5c:1b:
6d:9d:38:98:01:a8:45:d6:f3:40:a4:ac:49:e2:70:
4b:6a:b5:b6:06:62:a9:08:e7:01:42:a5:55:67:fb:
16:0d:ee:2a:69:37:bf:56:e6:82:c1:fa:31:90:46:
77:87:cd:72:b6:9f:73:dd:98:fc:c9:1c:96:50:0c:
41:91:fe:0c:d4:84:28:25:8a:83:59:11:06:54:08:
ed:c0:6f:cf:bf:a9:84:27:d4:b9:07:f6:70:24:03:
9e:99:04:b3:32:96:39:c5:61:8a:57:92:47:b6:db:
4d:07:b8:f5:c2:fb:fd:82:9c:04:dd:e2:b6:f9:c4:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:81:75:1F:F1:71:B4:C0:B5:4D:DD:3C:81:77:42:24:B7:E8:5D
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/y-6BdR_xcbTAtU3dPIF3QiS36F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.17.0/24
Signature Algorithm: sha256WithRSAEncryption
86:48:1a:1a:e1:8b:08:69:02:8e:b7:c0:04:3d:34:0f:59:b1:
7a:18:c6:7e:52:f2:5a:8c:04:de:35:2a:a1:9c:bc:ee:e3:c6:
43:af:c4:f3:3f:9f:bb:2a:85:37:c3:74:46:a8:9d:a4:da:b7:
d0:6f:d6:87:50:b9:e1:ef:ab:62:2c:a5:33:78:92:73:99:39:
f1:0b:c5:77:bd:57:a7:c0:61:f8:68:50:97:d8:6c:49:32:29:
24:62:e1:e4:9e:36:26:a1:37:97:10:1c:96:d8:e8:ea:42:a4:
68:6e:3c:f3:d0:5a:a7:b1:87:83:51:a7:08:83:93:60:1b:6f:
22:b5:e4:d0:87:75:4e:9c:fe:82:fd:ed:5f:f8:e1:7d:5b:a2:
22:e7:38:d2:89:bb:9b:ab:da:b1:d3:3a:60:07:58:c4:e8:f2:
f0:dc:fa:46:36:85:75:f6:e5:4a:73:55:4b:01:1c:ea:48:51:
23:3d:83:20:59:60:8b:88:03:ae:3d:3e:46:e7:0b:2d:5a:36:
98:80:e5:9a:1b:e1:75:4d:66:0a:5b:b0:7a:20:0e:e4:d6:3a:
04:57:b1:9f:fc:10:2d:6c:15:44:a0:e8:b3:0d:90:4e:4e:99:
ad:28:79:55:21:37:ba:38:59:32:34:37:6b:7b:29:74:76:f0:
45:5b:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:41 2025 by rpki-client