Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/k4Yuda8EO7EMHZnbgZvYXWZS6bA.roa
File: k4Yuda8EO7EMHZnbgZvYXWZS6bA.roa (raw, json)
Hash identifier: PD6GSccC6UE4tE+s9LpzCD4dxJk9VhTNkk9+6H4lxaI=
Subject key identifier: 93:86:2E:75:AF:04:3B:B1:0C:1D:99:DB:81:9B:D8:5D:66:52:E9:B0
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 394878E9
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/k4Yuda8EO7EMHZnbgZvYXWZS6bA.roa
Signing time: Sat 01 Jan 2022 08:05:36 +0000
ROA not before: Sat 01 Jan 2022 08:05:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59794
IP address blocks: 194.225.32.0/22 maxlen: 24
194.225.108.0/22 maxlen: 22
2001:14e8:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961050857 (0x394878e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 1 08:05:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93862e75af043bb10c1d99db819bd85d6652e9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:4c:57:19:cd:69:89:3f:1f:c1:40:82:2b:
b2:58:52:3f:f8:e3:1d:c3:0e:69:65:3f:c7:90:41:
55:98:3d:5d:db:81:1c:83:0c:af:82:85:a5:e9:9a:
61:1c:c4:e6:aa:5f:a3:94:02:3d:38:2c:dc:27:a3:
42:4f:c0:c9:3b:26:7b:4b:81:58:53:f9:b9:74:75:
7f:c6:08:ce:34:b7:e7:42:0c:3e:ba:e2:c9:7c:47:
98:55:61:c2:43:cb:67:ee:27:5c:db:4b:db:bc:90:
43:c1:35:4e:13:86:c3:53:2e:fd:b0:5d:be:57:b3:
fc:af:a5:60:37:d4:45:c0:80:f3:4a:11:05:9a:d4:
25:ad:ba:6f:06:c4:41:67:d4:a5:12:ad:ad:14:2a:
02:49:2f:2b:72:21:e7:e7:4b:b2:70:9a:29:4b:78:
26:bc:8e:d5:c5:f1:9e:41:d3:88:c6:65:d3:16:19:
1a:1e:0c:da:d1:31:ad:48:c3:29:ce:0e:84:da:c0:
de:aa:cd:2c:18:2d:dd:d8:b2:35:2d:0c:48:8c:df:
c4:c7:b9:4f:2d:01:83:22:da:53:56:82:d2:2d:fd:
f0:52:d7:41:2c:c0:6f:08:82:21:fe:0e:b2:b7:da:
9d:8c:8f:32:81:2d:bc:3d:9e:d1:97:19:d9:4f:74:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:2E:75:AF:04:3B:B1:0C:1D:99:DB:81:9B:D8:5D:66:52:E9:B0
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/k4Yuda8EO7EMHZnbgZvYXWZS6bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.32.0/22
194.225.108.0/22
IPv6:
2001:14e8:6::/48
Signature Algorithm: sha256WithRSAEncryption
6e:5b:0b:23:3d:49:f6:93:00:c6:f8:60:e6:c4:c0:2b:73:f6:
16:4e:f3:76:0b:e7:5b:8c:94:ca:88:b9:50:a0:26:71:69:e1:
84:1c:89:d9:71:66:7f:9f:24:64:01:67:30:02:9c:60:46:c8:
0e:7e:fc:a2:62:2a:0d:d1:94:95:f7:75:19:f1:b2:3b:68:ce:
49:f2:d3:18:a9:d6:4f:f3:ea:6b:44:29:71:3b:85:e3:9e:5b:
05:0b:61:be:0f:cc:3e:4e:71:de:de:66:e2:f1:ef:b5:79:84:
88:f3:a6:3a:ae:fc:57:38:5e:74:5c:11:39:49:ed:ad:52:84:
b9:d6:0e:ab:45:51:af:06:98:51:6e:bf:a3:85:ac:54:4a:0b:
35:a1:11:2f:26:30:d1:b1:4c:d3:d1:f7:ba:bf:51:86:f4:02:
2c:80:d4:28:54:f9:d0:9b:91:12:8c:36:c1:3b:4c:1e:21:f7:
4d:b6:6c:15:77:c0:72:87:4f:d5:ef:fe:e0:5b:e1:f0:2d:cf:
b2:b8:f5:d2:9e:df:fc:13:24:ba:dc:35:16:2a:e0:16:cb:63:
7e:45:a5:17:38:67:92:4f:61:5f:4f:f6:77:36:0e:c7:87:e3:
0b:e3:92:bd:cc:9d:6b:fc:b0:9d:13:58:76:5d:66:66:ae:b9:
ef:24:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:28 2025 by rpki-client