Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/3dK5B77_rzKH9YAqWICXw9pA-jE.roa
File: 3dK5B77_rzKH9YAqWICXw9pA-jE.roa (raw, json)
Hash identifier: lLncgUTViAOFUpFFp9RzDoCmd3j5zsHo5KNnQZN2abA=
Subject key identifier: DD:D2:B9:07:BE:FF:AF:32:87:F5:80:2A:58:80:97:C3:DA:40:FA:31
Certificate issuer: /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial: 1A0EC7D6
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/3dK5B77_rzKH9YAqWICXw9pA-jE.roa
Signing time: Sat 01 Jan 2022 08:53:48 +0000
ROA not before: Sat 01 Jan 2022 08:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48450
IP address blocks: 94.247.64.0/22 maxlen: 22
94.247.64.0/21 maxlen: 21
94.247.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437176278 (0x1a0ec7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Validity
Not Before: Jan 1 08:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddd2b907beffaf3287f5802a588097c3da40fa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:41:ee:34:4c:b4:7e:d1:07:03:21:35:4b:
c6:fd:69:43:04:cd:6a:11:14:40:9c:3f:e2:53:69:
2d:bf:5f:d9:b5:3b:ee:a7:82:84:3e:63:4c:93:19:
5d:0b:41:62:1c:f4:09:9f:4d:68:0c:43:f8:db:ff:
d9:cb:c4:81:31:dc:c4:ee:ee:33:96:e2:9e:0e:ed:
3b:ba:f5:75:00:73:52:80:6f:b0:0c:03:ee:da:ae:
6f:4e:b3:4b:40:5b:c5:de:2c:c8:4a:8b:c9:f8:a5:
82:84:ea:d0:92:f3:43:cc:f9:49:9c:e5:3b:89:03:
87:bb:ca:8b:f2:f1:3c:f4:59:a6:f4:d6:4c:5e:e3:
82:b8:2a:61:22:19:8c:5e:05:67:87:94:76:71:84:
87:6b:8f:a2:69:d8:3b:79:55:80:e8:54:1f:f6:15:
e1:db:57:b3:60:6f:bb:aa:28:08:5a:17:23:39:14:
a1:57:26:0d:49:bd:ca:19:59:65:e5:0a:7e:46:fb:
f6:6a:8b:3c:e6:51:12:1f:c3:b4:14:57:28:0e:d8:
7c:33:95:e3:7e:ca:86:67:d9:0d:ea:c7:0e:4d:98:
ca:2a:05:99:36:de:bf:3c:9c:43:30:07:db:38:e3:
6a:83:29:d4:61:89:80:c9:80:b6:66:0c:50:78:9a:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:B9:07:BE:FF:AF:32:87:F5:80:2A:58:80:97:C3:DA:40:FA:31
X509v3 Authority Key Identifier:
keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/3dK5B77_rzKH9YAqWICXw9pA-jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.64.0/21
Signature Algorithm: sha256WithRSAEncryption
62:18:4e:97:59:4a:08:b8:ed:38:da:55:11:f5:ac:58:19:77:
af:41:12:01:2f:7b:ba:28:d7:d0:c2:12:02:1b:47:e0:dc:32:
28:61:41:75:e3:ee:ce:49:9d:0e:58:12:63:3b:1b:b4:2d:a6:
85:cb:65:46:14:84:a1:54:ec:63:40:8e:4d:39:56:f5:61:ea:
68:da:9f:c2:36:f3:aa:36:24:a2:c8:f9:97:11:b8:4a:e9:0a:
68:84:18:a6:b3:6d:6f:d9:89:51:cc:15:80:20:85:b6:6a:be:
e2:28:4b:eb:ad:c1:e4:21:e8:8b:dd:0b:52:f8:1d:6e:f9:2c:
b8:e5:18:0b:41:af:94:26:ad:3f:da:85:e3:83:09:41:8c:6b:
94:b3:82:01:12:59:68:d8:de:10:a8:56:59:76:da:6c:05:3e:
0b:ac:64:1c:a2:83:d5:fa:89:d2:b9:68:fa:2c:fd:6b:68:7b:
80:df:9b:cd:94:9d:2e:e3:54:24:01:7f:0d:d5:d8:bf:b7:bf:
a8:32:49:39:b1:ad:db:55:df:cd:27:d8:66:5d:11:ed:15:ad:
31:fe:ad:19:38:ee:e2:11:bb:ea:ab:b6:31:e4:73:e5:11:b1:
3c:fc:b7:b0:61:f4:4d:c4:32:22:55:0c:5d:a0:d5:1a:e7:73:
4a:3f:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:18 2025 by rpki-client