Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7jIRLArzacPVFkffQyNv2CKpi90.roa
File: 7jIRLArzacPVFkffQyNv2CKpi90.roa (raw, json)
Hash identifier: Yw9bpwpAJseDC2xK1LEceDKRT0hCzW718Qg8IkS8NXc=
Subject key identifier: EE:32:11:2C:0A:F3:69:C3:D5:16:47:DF:43:23:6F:D8:22:A9:8B:DD
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD52CBE4B11B8D61A85AD488C735E34
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7jIRLArzacPVFkffQyNv2CKpi90.roa
Signing time: Mon 02 Jan 2023 00:15:19 +0000
ROA not before: Mon 02 Jan 2023 00:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50990
IP address blocks: 94.176.180.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2c:be:4b:11:b8:d6:1a:85:ad:48:8c:73:5e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee32112c0af369c3d51647df43236fd822a98bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:cb:31:cc:54:1c:24:67:26:f0:87:bf:30:
76:58:36:3d:b0:52:22:dd:9a:2d:ea:25:c6:47:0f:
d9:03:43:c6:f4:8f:84:ce:18:f4:b7:3e:07:e7:ea:
7e:46:c4:1e:7f:fc:d7:55:e1:d5:7b:69:ab:f7:b6:
d5:26:73:e1:38:ad:b7:95:df:24:8c:06:39:88:4b:
63:6f:c9:0f:27:91:55:ae:08:d3:8f:83:14:27:aa:
13:08:c8:17:bb:f6:a8:79:81:7a:73:5b:79:80:bf:
3e:01:8a:59:6b:fb:ad:4c:8f:66:5a:10:89:9d:a3:
b4:c9:bc:25:3e:2c:ad:7f:aa:21:68:11:04:f6:91:
d3:29:e4:28:f1:9b:04:1a:e5:3a:59:5e:2c:2b:73:
54:b0:32:dc:b0:e9:f5:bd:3c:31:8f:2e:fa:c0:ad:
4c:c7:7a:57:b8:61:7b:fd:88:58:b3:77:71:c8:fd:
d3:dc:dc:d7:99:3d:3c:4f:8e:1c:0d:ff:fe:91:42:
af:6d:65:0e:09:a0:63:2a:1e:aa:ee:b6:5f:f4:6d:
55:81:cc:ae:44:9c:72:29:97:8b:7b:64:bb:ac:14:
3d:61:68:67:52:9b:94:46:10:77:c3:18:6d:41:50:
80:7f:45:c5:78:bf:b1:13:70:9b:fa:41:bb:9c:fa:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:11:2C:0A:F3:69:C3:D5:16:47:DF:43:23:6F:D8:22:A9:8B:DD
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7jIRLArzacPVFkffQyNv2CKpi90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:c5:ba:9c:8d:50:53:3d:ab:54:66:74:ba:01:5e:8e:5f:b3:
31:01:50:68:79:9e:fa:60:12:1f:7d:f0:70:56:6e:39:3d:fa:
e4:5e:b0:6f:89:03:f6:9b:a5:43:95:53:5f:a0:39:f6:bc:44:
35:46:bd:f9:96:38:4e:31:95:f5:0e:61:e1:1e:a8:a5:d7:b6:
e7:2e:12:6c:db:61:6d:b2:29:33:52:fa:d1:62:06:17:33:cf:
2c:63:00:c3:0c:7f:f8:c9:a5:af:8e:8f:69:0b:d8:d9:41:31:
b0:5c:71:db:d4:d7:2c:d1:67:72:02:42:98:b4:7e:da:ef:e7:
e5:5f:d4:10:a1:73:5c:db:71:dc:4b:af:27:c4:fc:68:1b:f3:
a5:4c:45:6e:36:72:9d:6c:ca:27:fb:2d:5f:3b:a0:47:e5:e9:
14:76:9b:a0:6f:1b:4d:f4:b0:fa:37:c0:16:dc:9e:f2:6e:0e:
3f:35:18:4c:05:a1:8c:f7:4f:d1:0b:e1:02:75:88:b8:a4:07:
03:dd:2e:53:df:e2:e8:49:93:27:e2:50:3a:fd:df:a2:d7:b1:
32:3a:8c:19:4d:92:0b:3a:9d:88:5a:79:52:0f:96:80:7d:dc:
35:26:ef:35:47:74:53:48:f4:37:ed:2b:5e:63:e1:12:cd:ab:
dc:c6:c0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:13 2025 by rpki-client