Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/7MxjVxz76TW6tF2_V-JzMkGY8zY.roa
File: 7MxjVxz76TW6tF2_V-JzMkGY8zY.roa (raw, json)
Hash identifier: 70LGj6UTR82bFiaSYjJvrx1qT4l6BBOaDjwTZqSAn/U=
Subject key identifier: EC:CC:63:57:1C:FB:E9:35:BA:B4:5D:BF:57:E2:73:32:41:98:F3:36
Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial: 018570E76C62D5412DF05D9221583C4BA8C1
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/7MxjVxz76TW6tF2_V-JzMkGY8zY.roa
Signing time: Mon 02 Jan 2023 05:14:52 +0000
ROA not before: Mon 02 Jan 2023 05:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48451
IP address blocks: 94.124.40.0/21 maxlen: 21
2a00:f78::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:6c:62:d5:41:2d:f0:5d:92:21:58:3c:4b:a8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Validity
Not Before: Jan 2 05:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eccc63571cfbe935bab45dbf57e273324198f336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7a:a3:00:5b:47:b9:2a:8d:29:25:3b:6d:31:
d8:a2:ef:f1:88:4b:4e:10:09:40:28:56:a1:b6:2a:
cc:68:bd:a5:22:00:f2:a2:98:de:76:b9:f2:2d:6a:
e8:95:8b:2a:01:a7:d5:7e:f6:c4:25:ed:9e:f3:7f:
b1:30:29:d7:f8:97:a4:8d:5b:10:93:65:c2:9f:d5:
08:d3:56:d7:81:45:35:00:2b:45:e9:4c:9f:96:aa:
d8:a1:3d:87:2d:47:8c:f5:ee:f5:e8:80:9f:50:c9:
34:81:31:39:e7:b3:9f:1a:ad:b4:58:70:55:60:4c:
92:21:74:af:b6:4b:33:d2:8b:d7:8d:6c:25:c3:cc:
c0:b2:cf:94:c7:7a:24:e2:c7:a7:94:fd:f4:c3:c0:
fc:2e:c0:7a:b2:25:b9:db:3c:5d:34:85:75:7a:ea:
5a:2a:a7:2f:95:5b:90:06:76:f9:d1:4f:0e:16:7b:
77:8c:3d:b2:de:22:b0:3a:c6:27:42:6d:04:9a:5e:
3e:f3:05:5a:03:f3:6b:32:04:89:07:03:fa:11:98:
c4:77:75:27:07:d1:1d:24:db:3b:69:3e:f9:9b:7a:
e8:6e:c2:13:77:96:b7:ea:fe:f6:5a:6f:db:15:41:
93:37:85:cd:6a:10:12:2b:7e:4c:45:27:59:be:84:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CC:63:57:1C:FB:E9:35:BA:B4:5D:BF:57:E2:73:32:41:98:F3:36
X509v3 Authority Key Identifier:
keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/7MxjVxz76TW6tF2_V-JzMkGY8zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.40.0/21
IPv6:
2a00:f78::/32
Signature Algorithm: sha256WithRSAEncryption
69:ca:15:75:72:fe:63:8a:5c:59:05:b2:a2:80:bf:86:06:3e:
a4:04:2e:1b:62:95:31:ef:33:08:a3:f7:89:19:2f:d5:11:ca:
dc:47:c7:e3:15:6c:ae:3b:e4:44:ea:e3:08:9f:1a:94:4e:1e:
ca:e4:cf:65:cb:ac:09:1a:4a:55:bb:29:16:2c:22:77:85:10:
9c:e9:04:b8:39:ab:09:f6:b1:a0:3b:06:0d:f0:e2:b1:30:30:
f3:95:88:16:4e:5a:c1:27:b0:7c:bf:67:a3:92:68:c2:a5:74:
f5:3a:93:fd:54:c8:ba:95:7d:43:15:22:61:d3:d5:42:14:79:
42:1b:40:34:7a:10:bf:98:bc:a0:80:42:7c:8a:7a:bb:a5:78:
ec:93:4f:e5:a0:42:bd:2f:a6:be:d7:ce:bf:00:83:57:73:78:
38:c0:dd:d7:7b:19:ed:f3:2c:4f:b1:87:b1:71:04:d6:5a:f2:
01:2c:1a:d6:d6:91:4a:9b:67:da:64:64:20:6f:81:57:aa:83:
db:3a:18:bb:6e:ed:ed:e5:91:8a:82:22:13:ae:7b:ae:86:a6:
6e:24:e9:53:d1:1b:fc:bb:f2:3e:23:69:98:c4:e0:67:6c:14:
96:71:9a:e7:5e:3b:d0:55:e0:02:66:e8:ad:9a:f9:37:32:f3:
ae:ed:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:08 2025 by rpki-client