Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/8akhYFntnqgE33M53chrSEaUwlA.roa
File: 8akhYFntnqgE33M53chrSEaUwlA.roa (raw, json)
Hash identifier: 4xpvHzBC2ItAxdRrQEFzux8jNZZzCVEOZZHb3vKJ+vc=
Subject key identifier: F1:A9:21:60:59:ED:9E:A8:04:DF:73:39:DD:C8:6B:48:46:94:C2:50
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 01856C1C9ED10AD46CD2155D3FFA32B9B80F
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/8akhYFntnqgE33M53chrSEaUwlA.roa
Signing time: Sun 01 Jan 2023 06:54:52 +0000
ROA not before: Sun 01 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42532
IP address blocks: 94.158.218.0/24 maxlen: 24
94.158.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9e:d1:0a:d4:6c:d2:15:5d:3f:fa:32:b9:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 1 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1a9216059ed9ea804df7339ddc86b484694c250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:f2:7a:39:c4:dd:c2:d9:81:9d:ad:b2:e7:
d7:e2:13:20:41:3a:e9:dc:32:58:8e:54:49:23:01:
e5:68:13:38:5a:30:59:74:95:98:3a:cf:9f:84:01:
9c:32:9f:1d:6b:d7:cb:42:23:2e:26:6f:c6:e9:55:
1a:a3:53:9c:4a:3c:28:2e:05:2b:c1:09:a8:4e:dc:
bc:9f:81:02:09:7c:54:f8:92:2c:82:53:2c:1a:38:
40:5a:2a:ad:3e:4c:10:2d:86:16:8f:65:c2:d4:4a:
f9:e7:02:b0:83:7b:7a:92:42:67:85:8d:32:c4:4e:
37:84:35:c9:b2:26:21:e8:5e:b2:f1:f6:bf:40:80:
a6:3c:10:76:1d:52:c2:7f:a5:c0:0f:36:5e:17:11:
ee:07:85:9e:80:01:95:94:0c:eb:1c:b0:1a:34:82:
7b:9b:74:17:98:d6:23:b5:ea:fa:a9:d6:a7:53:16:
59:e0:8f:68:5c:ea:9a:29:0a:68:11:f8:f6:d3:14:
6e:a8:1e:0d:98:9f:7e:e6:29:27:eb:17:2d:e5:60:
db:fc:06:b0:71:7e:7f:2a:c1:c2:a8:40:48:a4:87:
2c:2e:0a:95:55:c8:ab:a1:bd:6d:33:a2:69:b6:17:
68:83:87:b4:32:9e:7c:a7:ec:71:fe:97:33:d2:0a:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:21:60:59:ED:9E:A8:04:DF:73:39:DD:C8:6B:48:46:94:C2:50
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/8akhYFntnqgE33M53chrSEaUwlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.218.0/23
Signature Algorithm: sha256WithRSAEncryption
53:f7:46:63:12:89:20:56:8b:c5:f8:b7:40:20:4a:9c:4f:34:
62:32:45:ad:79:21:30:03:cb:ba:63:9e:f0:78:dd:e7:79:c8:
4c:65:9f:ac:33:9e:dd:80:86:ea:65:ab:31:18:6a:29:c7:b9:
b6:04:f2:7b:48:a2:0a:1f:f8:52:f6:76:48:38:0e:ca:d1:fa:
75:ba:d7:0b:7d:8d:f6:b0:18:4f:45:88:27:9b:50:26:b8:78:
31:08:13:49:11:5a:b0:ef:de:c2:e7:13:f0:03:d7:6f:21:56:
ec:10:36:cc:9e:e5:8d:20:b8:e2:76:d4:c1:b9:7a:b5:c9:bb:
1e:e6:ba:0d:88:ca:25:32:0c:20:97:b3:57:b2:35:25:a4:2d:
e4:8d:ce:f4:68:23:6f:1c:f4:35:bd:7f:d1:16:a3:a6:30:5b:
cf:b4:fc:3c:1b:e4:69:5b:65:eb:aa:d9:ac:cc:17:4d:66:b3:
13:68:8d:88:d8:06:ce:d3:65:04:99:54:96:3f:c9:de:29:91:
79:6b:e3:e1:0d:eb:1f:e4:8e:e2:84:ba:9e:df:d4:7b:78:2e:
24:02:90:65:59:8c:aa:47:fc:1d:ae:e8:3e:04:ae:cb:d5:aa:
a5:cc:45:c7:fe:e1:fc:22:61:a5:19:ed:62:f8:67:9e:85:0b:
f9:47:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:25 2025 by rpki-client