Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/ka0c1zmga3EKv-WRTP1gt0TkWWo.roa
File: ka0c1zmga3EKv-WRTP1gt0TkWWo.roa (raw, json)
Hash identifier: OxSYqtemwJChP8G93o0phtwzyOsEaQfPD04rb3Zrxzw=
Subject key identifier: 91:AD:1C:D7:39:A0:6B:71:0A:BF:E5:91:4C:FD:60:B7:44:E4:59:6A
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 039D63F9
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/ka0c1zmga3EKv-WRTP1gt0TkWWo.roa
Signing time: Sat 01 Jan 2022 12:02:18 +0000
ROA not before: Sat 01 Jan 2022 12:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 94.158.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60646393 (0x39d63f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 1 12:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ad1cd739a06b710abfe5914cfd60b744e4596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:50:6d:23:13:52:76:c6:4b:5c:18:5b:c4:
1d:88:d3:17:ac:65:f7:31:97:3a:46:1c:92:94:f8:
68:2c:60:f1:ff:5a:03:46:28:60:02:88:ae:16:21:
e7:8c:e8:3a:a3:2d:fe:e9:15:db:92:c9:4b:1e:f3:
65:1e:59:46:22:0f:b9:14:6e:df:ae:02:4d:c2:76:
7d:ff:27:53:05:8e:76:dd:a8:ff:e2:8a:fd:83:d6:
3a:96:a6:7e:3f:f6:a4:58:ef:49:34:78:95:4e:8b:
d7:63:2c:14:6f:3e:e0:34:11:d4:1a:87:42:26:fc:
59:e4:28:56:c7:f0:ae:a4:8c:83:99:a1:51:e4:99:
56:e4:41:b4:b9:a5:20:f4:b9:69:98:18:a0:e6:df:
66:50:f2:e5:7d:06:df:55:e4:d3:12:4a:33:cf:42:
23:ba:c6:bd:1b:45:06:6b:2d:52:78:68:e9:dd:40:
4e:77:72:e9:c7:96:d0:6b:c4:d3:69:00:bd:a0:46:
a7:2a:8f:44:41:3a:2b:4b:6b:8b:66:82:34:38:30:
40:be:13:6d:05:ad:54:bc:df:51:53:a8:33:6d:44:
07:8a:03:ff:53:f0:47:59:1a:8f:b8:c9:57:31:ee:
ed:9e:7e:4b:18:97:54:2d:b8:27:36:15:f7:96:83:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:1C:D7:39:A0:6B:71:0A:BF:E5:91:4C:FD:60:B7:44:E4:59:6A
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/ka0c1zmga3EKv-WRTP1gt0TkWWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8a:04:0a:a5:c0:2a:a2:6a:6b:73:db:03:97:a6:cc:db:2e:
90:57:6a:6b:10:d0:c5:16:9c:f7:c1:d1:df:ea:0b:14:ac:77:
b0:55:bf:1e:49:59:00:42:2a:57:72:b3:22:17:56:ee:ca:c4:
6c:bb:98:f9:81:f6:b3:d7:48:c6:f9:f2:dd:09:b5:e8:1c:95:
71:87:53:08:dd:c3:7d:e4:87:50:68:d5:ba:b0:e2:31:c0:fb:
05:a0:8d:ef:ac:cc:20:67:ec:ee:4b:c8:09:eb:a7:66:8e:8d:
ab:64:da:ee:6f:09:f6:7a:92:4b:3d:98:7c:19:96:67:a6:53:
3b:fb:cc:0c:79:fb:32:00:03:68:52:4a:8e:94:80:e5:09:07:
26:3c:eb:6e:e4:a0:87:49:36:56:ed:87:83:bd:70:41:a1:33:
db:2e:e8:cb:26:6b:6d:83:18:72:7a:6c:fa:22:47:46:0c:47:
60:20:91:7a:05:98:f0:54:e2:8f:48:5e:d4:17:8f:75:26:36:
48:c7:b7:33:49:7f:a0:cd:d0:bd:7b:ce:0a:e2:51:bc:8f:f4:
38:b8:db:e1:45:0b:d1:b9:09:e2:12:6f:9c:9c:6a:b9:5d:72:
33:4c:40:6f:24:94:3c:69:17:c7:ca:01:28:78:d6:32:28:c1:
0d:2b:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:44 2025 by rpki-client