Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/9Kt-fvwsJIXo48ub0GP8biYWlDQ.roa
File: 9Kt-fvwsJIXo48ub0GP8biYWlDQ.roa (raw, json)
Hash identifier: TY0mbDFoS/YYpI8k1bQ1yI6jiLGlF1FVneRAMi+29NU=
Subject key identifier: F4:AB:7E:7E:FC:2C:24:85:E8:E3:CB:9B:D0:63:FC:6E:26:16:94:34
Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial: 01857267CBE2AA2FAD34DC5E18F9C5B3A7C3
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/9Kt-fvwsJIXo48ub0GP8biYWlDQ.roa
Signing time: Mon 02 Jan 2023 12:14:43 +0000
ROA not before: Mon 02 Jan 2023 12:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 94.247.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:67:cb:e2:aa:2f:ad:34:dc:5e:18:f9:c5:b3:a7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Validity
Not Before: Jan 2 12:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4ab7e7efc2c2485e8e3cb9bd063fc6e26169434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:2a:9e:65:94:8e:82:ec:40:06:a7:3d:44:
e7:fb:72:04:79:18:96:21:90:c0:7a:92:2b:bf:91:
f1:f2:f7:29:94:6e:e6:01:71:0a:81:37:3f:53:53:
63:63:9b:d7:8d:a2:d4:7d:3b:0a:5a:84:02:be:da:
1a:d6:94:39:bc:a1:48:6a:3f:20:8f:58:90:a6:4e:
c9:e0:50:25:12:7f:85:95:52:02:a7:1d:20:80:ca:
9b:cf:ab:e6:51:02:38:dd:56:36:06:29:4c:b8:e2:
87:35:2c:f9:d3:80:84:b9:39:75:1b:ea:13:c9:01:
b4:c7:bd:0c:47:cb:b2:43:92:1b:47:00:e1:f5:01:
07:cc:c0:66:36:60:83:0a:67:bd:91:eb:aa:b6:e0:
10:4b:fe:e7:f0:08:21:7a:8d:b4:f6:fc:6d:20:de:
78:76:30:c3:bd:0a:14:2c:66:43:f6:d0:7d:a3:70:
56:2e:d0:7e:22:ac:ee:76:f7:14:e6:01:12:52:76:
ff:64:e8:bb:df:68:da:73:34:5b:71:73:c8:05:0b:
9f:4f:2b:89:3b:6f:47:1a:74:53:07:86:46:13:0a:
d1:32:a2:32:96:b0:9e:50:e3:16:14:ea:9e:28:41:
d2:aa:3c:6b:a9:d4:96:1a:94:0f:86:f7:d1:19:f8:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:7E:7E:FC:2C:24:85:E8:E3:CB:9B:D0:63:FC:6E:26:16:94:34
X509v3 Authority Key Identifier:
keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/9Kt-fvwsJIXo48ub0GP8biYWlDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.141.0/24
Signature Algorithm: sha256WithRSAEncryption
46:da:31:dc:cf:bd:c6:36:20:9e:a4:59:5b:8d:e8:91:dc:84:
43:18:14:3c:8d:4b:d0:b9:a5:00:b2:0d:81:74:94:7a:e7:41:
ac:2d:75:80:34:56:6e:26:ca:dc:d6:a1:cc:a8:bc:3c:51:52:
33:a3:55:12:32:93:9c:f6:61:7c:79:68:34:98:f8:c4:50:eb:
15:ee:5f:ac:3d:82:59:c3:77:bd:7c:4b:59:e3:b8:3b:d0:7f:
65:09:03:ee:44:e0:cc:e9:69:89:97:df:eb:d7:b5:a5:35:f5:
a9:3b:a7:cf:95:15:c5:97:86:e1:9b:7c:b0:52:e5:06:f1:5c:
a2:80:b7:99:36:99:76:a4:93:aa:30:d1:3e:a4:6d:1f:0c:e2:
d3:28:9e:44:80:ad:6d:bf:15:d1:9c:00:1d:0b:1f:6e:86:0c:
80:ee:4b:73:e3:b3:57:22:bf:c7:fa:09:1e:f5:5f:83:a7:b5:
1b:d7:ce:02:d3:fe:85:7a:11:0f:be:da:a0:ec:e4:4b:0d:44:
14:b1:bf:43:4a:13:9f:07:8a:38:0e:bd:d5:e5:90:95:de:4d:
ca:94:3b:92:92:e6:ef:9d:16:9c:cb:af:ca:77:40:b4:5c:c8:
da:69:4a:7e:04:ad:e2:72:5f:eb:fa:1b:45:38:fa:fd:3f:d5:
6d:19:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:41 2025 by rpki-client