Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/anUu4l87L8pIXcBDOLpxTXJAvNA.roa
File: anUu4l87L8pIXcBDOLpxTXJAvNA.roa (raw, json)
Hash identifier: pTjxzsHGjncHrqI6YaB/9EJhoAX3MNcCtCqojbsyvdo=
Subject key identifier: 6A:75:2E:E2:5F:3B:2F:CA:48:5D:C0:43:38:BA:71:4D:72:40:BC:D0
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 01856F4B72E0F2ED59E696B94BECF5BA0A37
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/anUu4l87L8pIXcBDOLpxTXJAvNA.roa
Signing time: Sun 01 Jan 2023 21:44:53 +0000
ROA not before: Sun 01 Jan 2023 21:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209842
IP address blocks: 94.154.144.0/22 maxlen: 22
2a09:c500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:72:e0:f2:ed:59:e6:96:b9:4b:ec:f5:ba:0a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Jan 1 21:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a752ee25f3b2fca485dc04338ba714d7240bcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:d3:4e:70:a9:f4:1b:1f:02:0f:bf:9a:f1:
a9:54:50:01:da:23:80:b8:3b:02:56:8f:f0:21:87:
c5:0e:14:38:70:24:5f:8e:5b:9c:c3:9d:13:3c:5d:
15:5d:f5:20:7c:a5:85:19:9d:52:e3:66:28:98:e5:
f4:e3:7b:c2:73:fd:77:36:5b:db:58:11:18:87:eb:
f4:4d:13:21:36:ba:73:6a:f8:bd:16:11:14:df:cd:
fb:b2:03:8c:a5:6e:84:74:82:25:dc:65:70:1d:be:
33:99:04:f4:3e:87:24:5c:15:33:85:20:ff:02:3c:
30:ff:c2:2b:45:57:36:cd:2d:bf:90:a4:0e:84:81:
06:2c:b6:d7:0e:3e:ee:97:99:0b:04:c1:3c:25:b6:
0b:24:e3:d9:45:c6:b3:92:56:ec:a6:75:ae:a2:9f:
70:8b:32:9d:05:23:f7:14:34:17:d7:fc:21:d7:4e:
c8:ba:a1:b7:43:47:6a:fe:da:cd:30:b3:d8:fa:2d:
67:16:13:bc:29:2c:fc:15:c7:6f:ed:87:5c:b5:aa:
b2:d6:b1:e9:74:8b:48:62:13:9f:3e:76:ee:26:7f:
73:7c:00:97:f4:0e:50:3f:00:3b:d2:ea:c3:3f:2e:
d6:2b:de:ae:34:59:ce:45:aa:44:a7:68:fe:8c:4e:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:2E:E2:5F:3B:2F:CA:48:5D:C0:43:38:BA:71:4D:72:40:BC:D0
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/anUu4l87L8pIXcBDOLpxTXJAvNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.144.0/22
IPv6:
2a09:c500::/29
Signature Algorithm: sha256WithRSAEncryption
75:bc:7b:be:1c:6a:11:a9:b6:69:92:ea:40:47:bc:37:c8:33:
02:06:44:04:46:2a:3e:8c:6c:0c:a0:91:0e:8a:69:0f:d1:67:
06:d4:4a:6d:5e:07:96:a1:41:6f:19:d5:be:a8:29:7b:af:e3:
b6:a8:c4:0c:04:65:2a:61:4f:85:d7:e0:70:2a:21:78:05:22:
c4:6c:f5:b9:29:53:8e:2d:d4:ff:67:69:99:94:72:1b:67:e2:
06:44:30:c6:59:6b:bd:bb:d4:8e:dc:0d:eb:13:52:ac:8d:66:
bf:ac:01:f0:ea:44:f7:31:f8:6f:29:bc:9c:40:ec:db:b0:7c:
fc:ea:0c:a9:6d:6e:1c:3f:1d:5b:36:74:03:d8:8f:a9:ff:4f:
21:ed:a6:19:3d:90:d4:1d:c0:b7:d3:f3:21:dc:ee:a7:14:4a:
cd:f1:b6:c9:d9:01:6a:ab:09:60:fb:4f:5e:46:cb:56:25:ab:
7d:50:bd:81:80:81:14:7b:72:cd:93:37:b7:a8:63:dc:7b:5a:
16:dc:cb:13:ac:2b:ff:0f:80:1f:94:2a:30:47:28:63:45:16:
4a:e3:bc:63:25:f6:0b:98:93:cf:26:87:cd:cc:3a:85:78:94:
9a:db:fc:5b:41:ca:53:52:45:5c:ba:70:3b:92:32:2a:05:72:
32:88:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:53 2025 by rpki-client