Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/t-hPl4gUhBdP-YFErhHaWag8W7g.roa
File: t-hPl4gUhBdP-YFErhHaWag8W7g.roa (raw, json)
Hash identifier: 7/EjWxPj92DUPXK3sh/QoMO/2VSl9OdJEWMYERWVY5w=
Subject key identifier: B7:E8:4F:97:88:14:84:17:4F:F9:81:44:AE:11:DA:59:A8:3C:5B:B8
Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial: 04E1EDAF
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/t-hPl4gUhBdP-YFErhHaWag8W7g.roa
Signing time: Sat 01 Jan 2022 02:59:12 +0000
ROA not before: Sat 01 Jan 2022 02:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56376
IP address blocks: 94.231.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81915311 (0x4e1edaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Validity
Not Before: Jan 1 02:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7e84f97881484174ff98144ae11da59a83c5bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ad:1f:cf:81:f1:a4:2e:fe:61:fa:9f:bc:17:
f1:19:8e:fd:85:4f:8f:c8:bc:32:6a:9a:a4:84:56:
6f:9a:a7:ef:24:e5:a5:63:84:46:ff:39:b0:b1:ef:
60:44:9e:cd:f0:26:31:1d:6e:64:2c:7b:87:e8:a4:
77:20:2f:d0:20:1b:dc:cd:6b:94:d1:b8:f2:f2:bf:
2c:ee:8f:63:de:7b:25:fe:49:ba:a2:43:a2:e5:6d:
47:fc:f2:ac:7c:7e:da:97:fd:c7:1d:d3:bb:f7:5e:
7c:33:80:8f:a2:6c:2b:b6:93:84:93:83:46:2c:d8:
8a:15:6d:a0:e0:43:4d:e8:89:3e:7f:1b:eb:43:5d:
aa:69:d0:af:32:4b:8f:5c:3c:ff:b5:bf:0c:26:0e:
2b:81:f5:65:7f:92:4c:86:56:ce:cc:79:71:d2:90:
ac:e8:46:5b:a1:0d:5d:31:10:33:fd:3a:1c:fe:61:
29:8e:52:47:b1:93:09:85:7c:eb:8b:45:81:43:20:
d8:f9:1b:64:0e:39:21:32:ff:66:17:98:1c:72:b7:
24:dd:9f:24:f3:8b:9b:89:69:a2:f5:9a:17:4f:bc:
50:18:a9:2f:91:de:ab:b1:b1:b2:cf:d0:7c:c0:17:
77:45:d2:09:f8:71:c1:b4:5c:59:dc:1f:45:67:1b:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:4F:97:88:14:84:17:4F:F9:81:44:AE:11:DA:59:A8:3C:5B:B8
X509v3 Authority Key Identifier:
keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/t-hPl4gUhBdP-YFErhHaWag8W7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7c:e4:3f:8e:b4:2d:20:da:b9:58:6d:c0:46:9f:10:80:00:
e6:64:6a:0c:3f:9c:c1:2a:ad:99:5c:48:29:e9:d8:c9:77:e1:
2b:fa:8b:1f:ac:b4:7f:1a:6e:4c:da:4d:b6:98:3a:7f:20:4f:
c5:3f:08:20:dd:b4:c5:b3:89:79:98:ea:0f:e5:d1:c4:ba:8f:
4f:28:46:9e:d8:28:91:c3:1b:4e:a6:e7:57:98:e4:7d:f5:dd:
77:23:89:6b:e2:05:15:22:54:8e:32:51:59:ca:67:77:e3:c3:
b1:b0:eb:7c:f9:ec:1d:52:68:17:37:84:40:30:77:d7:13:84:
94:ee:c8:06:40:78:c3:01:c1:e8:26:88:00:57:df:4c:fd:24:
0f:ee:f3:8c:ab:e3:2c:b2:9c:d7:c2:7f:92:21:69:57:41:10:
e8:16:53:c7:88:1e:c7:2e:a1:8d:d7:f0:87:15:83:21:17:bd:
eb:a1:37:b0:e4:1a:a3:8d:f3:6f:a7:49:b8:b3:fc:a1:14:d4:
f2:fa:49:5d:11:ee:e5:31:ad:90:bd:79:9f:b6:2f:aa:48:fc:
c1:5a:30:6b:57:d5:aa:54:59:f6:8c:09:0c:58:2e:cb:3c:82:
b9:6a:da:2f:00:e5:9c:c9:a8:f5:0b:66:7d:80:25:f9:a0:f2:
66:c1:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:17:44 2025 by rpki-client