Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/p4YameQhQ3Vh3-IWTI7DysjfuyM.roa
File: p4YameQhQ3Vh3-IWTI7DysjfuyM.roa (raw, json)
Hash identifier: D1LKha/Q0sw/R+4qGqlATLRHi03cscWjNwbuW9/6kUU=
Subject key identifier: A7:86:1A:99:E4:21:43:75:61:DF:E2:16:4C:8E:C3:CA:C8:DF:BB:23
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 2AC6EE
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/p4YameQhQ3Vh3-IWTI7DysjfuyM.roa
Signing time: Sat 01 Jan 2022 01:50:37 +0000
ROA not before: Sat 01 Jan 2022 01:50:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49720
IP address blocks: 94.131.240.0/24 maxlen: 24
94.131.241.0/24 maxlen: 24
94.131.242.0/24 maxlen: 24
94.131.243.0/24 maxlen: 24
94.131.246.0/24 maxlen: 24
94.131.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803438 (0x2ac6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jan 1 01:50:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7861a99e421437561dfe2164c8ec3cac8dfbb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:25:ba:5c:f6:ce:4c:1c:0e:72:06:10:7e:
fd:d0:26:50:18:70:e3:d6:33:4f:81:ab:85:e5:61:
a7:2a:c0:22:1c:64:b0:f3:e3:16:af:cb:d1:f5:39:
f4:0d:a0:fd:fc:ce:d2:09:e7:f4:55:68:d9:40:e9:
9c:f2:26:73:7d:90:ab:85:c4:88:78:bd:06:8d:a1:
06:b3:23:24:f6:40:d5:04:2c:61:61:ff:9c:57:31:
5f:f4:2f:65:c2:85:d6:e5:4e:64:79:cd:63:7a:0b:
cd:5c:1e:09:b8:bc:5e:9b:92:5d:47:b7:f1:cf:35:
e7:ce:00:f6:8f:36:09:8d:9b:f8:f6:1c:c4:51:c1:
48:59:ab:6b:67:4d:cd:8c:3c:d1:cb:cb:60:a1:ae:
4d:f7:a7:12:55:56:03:04:6e:8f:10:30:e0:b0:11:
dd:ca:50:bf:67:d3:de:b4:aa:25:28:1c:76:cc:c9:
72:66:3c:06:81:45:81:0f:cd:7e:b1:b7:2e:92:34:
4d:33:3b:21:12:ef:85:89:cb:be:15:b7:3a:d9:f6:
7a:11:0e:03:b5:5c:87:ae:c8:4c:07:6c:82:43:0b:
2d:55:8d:67:cd:98:4a:3a:88:4c:08:87:b7:e5:7d:
28:82:2f:7c:a5:b6:07:e1:01:f3:a4:2c:f3:59:e6:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:86:1A:99:E4:21:43:75:61:DF:E2:16:4C:8E:C3:CA:C8:DF:BB:23
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/p4YameQhQ3Vh3-IWTI7DysjfuyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.240.0/22
94.131.246.0/23
Signature Algorithm: sha256WithRSAEncryption
92:75:03:34:67:af:f0:28:99:1a:e7:90:a9:71:ae:04:bd:39:
bf:23:df:31:d3:23:fb:b1:a2:15:33:73:d2:bb:5d:03:53:a1:
70:15:8d:0e:41:4c:52:0d:49:12:80:ba:0c:a9:0f:1b:9e:07:
ce:21:51:88:65:d5:2e:7c:73:be:f4:f9:f8:43:04:96:0e:63:
42:12:e2:f2:2d:f7:57:6e:85:62:8a:c5:23:80:aa:94:15:15:
07:93:f9:97:84:39:a3:0d:9f:80:59:20:28:fa:86:fa:7e:e5:
42:4f:e9:57:de:cb:51:cd:e1:1d:03:9a:ed:c8:2e:9d:1c:2d:
2b:68:dc:b4:e8:12:80:49:e2:24:7f:3e:7c:ed:2d:66:14:c2:
34:16:45:f8:da:e9:68:dc:eb:4b:5d:3e:ca:f5:46:17:ae:82:
d2:9f:60:32:b8:73:39:e8:8c:20:5d:c8:75:13:1a:9f:67:74:
1d:48:57:7d:ea:75:23:69:65:5e:fa:e8:d2:f0:7d:e8:59:f4:
a7:72:04:a9:15:6d:48:92:3f:82:cf:9e:39:f6:c3:9b:3c:b1:
1c:bc:d6:a8:52:d9:0b:1b:88:59:c9:01:51:f4:0f:aa:1f:f2:
be:16:6c:07:df:d3:9c:57:ee:62:a0:0d:d8:32:6c:c2:b2:74:
91:22:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:20:52 2025 by rpki-client