Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/1Wl4J6rxqfBKrFoez5gDoRFo_NY.roa
File: 1Wl4J6rxqfBKrFoez5gDoRFo_NY.roa (raw, json)
Hash identifier: PxVB+hFskFkAEaSBwJRJ9MWeA1sHbGUQPIq+Z2F3naU=
Subject key identifier: D5:69:78:27:AA:F1:A9:F0:4A:AC:5A:1E:CF:98:03:A1:11:68:FC:D6
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018738115D0A03FEAB9FA7E4B1754E30E44B
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/1Wl4J6rxqfBKrFoez5gDoRFo_NY.roa
Signing time: Fri 31 Mar 2023 14:27:54 +0000
ROA not before: Fri 31 Mar 2023 14:27:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199152
IP address blocks: 94.247.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:11:5d:0a:03:fe:ab:9f:a7:e4:b1:75:4e:30:e4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Mar 31 14:27:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5697827aaf1a9f04aac5a1ecf9803a11168fcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:2e:47:2e:05:7d:d1:f8:84:df:16:40:e0:
fa:7e:c6:75:b2:90:c4:f3:e1:ce:f9:d8:7f:12:1b:
00:62:12:d8:55:37:01:cb:07:e2:78:3d:19:f0:8c:
8d:20:7b:b4:2b:35:0d:e0:48:ac:32:a0:c4:40:98:
a0:f9:f2:59:a2:3f:03:90:93:e9:a5:dd:dc:43:a8:
d3:ce:52:5f:1d:8a:c8:35:92:6f:f8:e1:4b:70:9e:
c2:7e:49:22:de:99:0b:da:c1:0d:e5:db:8b:ea:cd:
49:3e:00:aa:81:aa:cc:ae:cc:78:57:ed:5f:7b:b2:
c7:06:a9:f0:5e:28:42:bc:e0:8c:ff:34:4a:e0:88:
be:5a:9b:71:0c:a1:76:c9:cb:11:d1:27:81:fd:dd:
0b:aa:32:3a:b1:6b:36:7f:b4:58:4b:8c:a4:54:b5:
04:46:62:81:d2:56:70:4a:7d:99:75:f9:80:38:2a:
b5:2e:f1:10:ac:3f:98:93:33:1d:37:d1:2f:4b:48:
b9:f9:49:13:03:de:0d:7f:65:fe:67:f0:24:d2:93:
67:0c:f2:b4:4a:63:c5:c0:b2:d9:3d:7a:67:3d:be:
44:12:96:09:1c:20:02:3b:cf:6b:dc:6d:a5:bb:69:
5f:b9:b8:a6:11:e3:7c:cb:64:ba:5d:e7:c6:50:c1:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:69:78:27:AA:F1:A9:F0:4A:AC:5A:1E:CF:98:03:A1:11:68:FC:D6
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/1Wl4J6rxqfBKrFoez5gDoRFo_NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:98:c4:74:1b:87:37:72:bf:20:2e:4d:eb:25:45:31:83:29:
da:79:2f:a8:c3:9e:b1:94:57:2b:51:06:18:d0:8f:20:db:71:
d1:28:98:34:fd:62:40:6d:da:63:f4:01:ff:c0:e6:c4:95:88:
8b:55:ad:ed:eb:55:e8:4e:43:14:3d:5c:08:1b:57:b2:e9:ee:
1b:20:cf:c4:2e:df:a7:a1:cb:40:50:96:3d:3d:19:93:ad:de:
72:57:52:19:ac:01:0c:68:65:1f:c1:8a:9a:4f:88:e8:82:c6:
f1:56:27:a6:63:42:e9:d6:e4:d5:2d:e5:c8:ea:e5:d3:f5:97:
13:6d:83:ec:87:5d:dc:19:fd:02:a5:b0:10:56:d5:d8:82:57:
cf:d1:49:a4:c1:d0:bf:0b:3a:57:34:6d:9a:c0:d2:b1:c5:fd:
3f:07:71:ba:b3:36:28:8d:cc:d4:08:21:72:fd:04:e4:a4:87:
11:e5:a5:4f:fb:62:da:92:13:6b:32:1a:cc:96:43:bf:04:f9:
7f:7e:d2:66:be:39:f6:d3:fe:ee:39:26:b4:d9:de:8a:89:49:
a1:3b:94:e2:8b:cb:5c:bd:dd:b7:45:a6:3b:dd:32:5f:0c:f5:
bf:6d:69:e7:23:d6:28:3d:c8:ab:ba:38:23:7c:2c:45:64:35:
65:09:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:10 2025 by rpki-client