Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/N_9RovqRSbfPkHzB2kC15wWa-Kw.roa
File: N_9RovqRSbfPkHzB2kC15wWa-Kw.roa (raw, json)
Hash identifier: BvTp+a5h4dc0vHi554zGF+oHAbM8/9wzZkAdAg8SFXY=
Subject key identifier: 37:FF:51:A2:FA:91:49:B7:CF:90:7C:C1:DA:40:B5:E7:05:9A:F8:AC
Certificate issuer: /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial: 018571BA18A813821E03555E49F3AC16161A
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/N_9RovqRSbfPkHzB2kC15wWa-Kw.roa
Signing time: Mon 02 Jan 2023 09:04:59 +0000
ROA not before: Mon 02 Jan 2023 09:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13020
IP address blocks: 94.45.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:18:a8:13:82:1e:03:55:5e:49:f3:ac:16:16:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Validity
Not Before: Jan 2 09:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37ff51a2fa9149b7cf907cc1da40b5e7059af8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:e4:cc:45:94:2c:be:cd:1c:c4:f3:62:a4:
45:08:9d:20:db:8f:5c:5a:19:61:7f:5a:86:d3:59:
35:e7:11:d1:90:b2:e1:d8:93:d4:c6:4c:12:91:51:
91:4d:3c:27:2f:b5:fe:a4:28:71:20:bd:2b:1a:36:
98:42:dc:03:af:51:66:7d:4e:b0:98:31:31:f8:97:
5e:8f:a1:a2:d9:c7:b9:83:10:8b:f8:24:da:f8:6f:
c7:cb:57:52:c9:f6:99:f7:a0:fc:32:6f:63:9e:ba:
51:f4:b8:d6:f8:4a:2e:08:e6:4c:4d:bd:cc:6c:8a:
9a:c9:98:d5:c5:c0:ef:7b:20:5f:94:68:fb:1d:f1:
ca:d8:d6:08:11:9b:32:a7:97:72:f0:5a:46:af:ca:
c4:e8:ca:e1:4a:58:c0:4b:e1:87:e5:e0:5c:aa:6d:
4f:14:63:97:3b:4c:cf:54:96:de:dd:62:36:90:e6:
4a:06:c0:f4:79:92:45:a7:4e:66:05:48:d9:79:50:
02:b2:20:a7:45:f0:04:32:1a:e9:2a:b2:7c:01:98:
c1:29:38:67:eb:fa:6d:6d:e3:78:0c:7d:3d:b9:40:
a8:e5:22:0c:cd:f4:17:ef:9d:6b:49:75:a9:4d:1f:
02:1b:6d:1c:73:65:12:9a:2a:73:81:98:26:81:2a:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FF:51:A2:FA:91:49:B7:CF:90:7C:C1:DA:40:B5:E7:05:9A:F8:AC
X509v3 Authority Key Identifier:
keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/N_9RovqRSbfPkHzB2kC15wWa-Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.224.0/19
Signature Algorithm: sha256WithRSAEncryption
53:c0:a2:ef:69:c7:11:6b:59:ce:5d:00:e7:01:1b:bf:a2:d2:
48:49:d9:cc:c7:10:75:20:99:1a:a1:9a:1b:ca:fa:5f:71:1b:
53:b6:36:17:d3:5e:1b:fd:6b:de:a7:86:e4:8b:ce:6e:70:83:
24:3d:44:98:5f:5c:47:3e:df:b0:fe:33:90:e9:86:f1:b4:f0:
eb:82:ab:49:a4:26:28:d9:c8:d1:7c:44:01:a5:f0:42:cd:f0:
7e:5d:6e:a6:0c:c1:10:d2:ca:cb:34:5d:0e:42:03:72:56:83:
e9:75:c3:df:72:bb:a8:12:6e:00:52:04:4b:5f:6d:a7:cf:88:
57:59:b4:1c:36:45:d3:79:38:95:58:ab:60:fa:94:bf:8b:f8:
1b:95:c2:30:61:7f:98:6c:b6:c3:d4:6b:4a:cf:09:3f:89:0c:
e7:4b:cf:de:ce:98:eb:6b:d5:bf:44:e4:d3:3f:97:96:3d:ba:
21:17:00:8f:1b:a0:b7:29:aa:f7:21:be:f3:c1:35:27:ca:11:
a2:b1:c0:de:14:54:d5:ed:a0:0c:0b:93:9f:f4:11:c9:35:c3:
93:55:73:48:16:c2:ee:4a:8d:e6:c3:41:1a:64:3d:c3:f8:21:
84:3a:42:15:17:e2:3e:17:3b:7b:cf:97:de:d3:ac:5d:b9:fc:
00:cf:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:34 2025 by rpki-client