Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/l-9ovsVflpIZgygsRt8sbPyl1GQ.roa
File: l-9ovsVflpIZgygsRt8sbPyl1GQ.roa (raw, json)
Hash identifier: yLTdNmr24h4NmgV5a76y5qgNo4tAcc8grI7QRxpxQR4=
Subject key identifier: 97:EF:68:BE:C5:5F:96:92:19:83:28:2C:46:DF:2C:6C:FC:A5:D4:64
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 018570E75500D53FD16CEC166FF352F5ADD0
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/l-9ovsVflpIZgygsRt8sbPyl1GQ.roa
Signing time: Mon 02 Jan 2023 05:14:46 +0000
ROA not before: Mon 02 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210719
IP address blocks: 94.103.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:55:00:d5:3f:d1:6c:ec:16:6f:f3:52:f5:ad:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Jan 2 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ef68bec55f96921983282c46df2c6cfca5d464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:0a:84:ec:15:d8:f8:e9:7f:72:09:b0:1d:
a7:86:2f:d8:0c:28:e4:4d:75:45:aa:02:af:82:38:
0a:15:95:7c:92:57:56:66:4e:eb:a8:fb:12:e1:24:
87:5d:47:12:85:ff:55:f1:b3:2c:4b:f9:78:f9:e4:
7c:c0:3b:70:b8:36:78:02:eb:ab:77:33:d0:bf:ce:
2f:54:cc:aa:ec:29:af:2f:f0:31:16:96:b6:73:64:
02:3d:9e:cb:2a:61:7b:5a:5d:35:37:a5:9b:17:2a:
bc:48:f3:f3:93:c2:0b:b0:dc:99:a9:41:a4:2b:26:
17:77:3a:c7:37:06:78:87:dc:b4:42:41:15:01:39:
01:6d:fc:21:bb:bb:38:fe:4b:e1:ec:9c:3c:98:c1:
e0:a4:52:65:1a:f2:c1:10:1b:87:5f:03:94:c9:26:
5f:55:ed:13:53:f4:f6:c7:b7:07:9d:92:cc:d7:70:
88:4b:7d:0f:e4:d1:41:74:b1:f3:00:f7:78:ff:45:
f9:6d:ae:23:52:3f:3f:23:39:e6:fe:0c:40:31:57:
fb:ba:14:02:f4:07:68:79:4a:26:81:43:b5:cc:70:
b0:4a:e7:ce:9d:af:2c:29:8b:7a:0e:cd:1c:0d:c4:
b3:58:cb:14:0b:88:d1:6c:be:8d:2d:47:c9:a2:7e:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EF:68:BE:C5:5F:96:92:19:83:28:2C:46:DF:2C:6C:FC:A5:D4:64
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/l-9ovsVflpIZgygsRt8sbPyl1GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:eb:be:d5:9c:75:8a:8c:ea:50:0b:99:fb:a5:69:6d:0a:e6:
ec:52:40:2c:a6:cc:e8:d8:e2:e6:15:da:d5:16:1a:88:0a:bc:
3a:c5:d0:1b:0f:80:e4:4b:8f:1f:30:25:62:ef:72:c9:1a:7b:
b7:ec:5d:aa:7c:c9:d9:68:a8:64:66:b3:9f:2c:a9:57:15:8c:
9f:ff:5e:7b:6d:a1:51:45:ee:ec:dc:6b:43:df:61:fb:1c:50:
a7:ef:70:b2:52:0b:04:65:db:30:7b:30:67:b6:3c:58:b8:10:
28:0c:73:e4:9b:ed:78:f9:75:ac:bd:81:a9:78:de:a3:4a:57:
9a:62:11:33:9d:f9:af:74:5b:ca:5e:30:eb:30:07:d1:a4:9f:
4e:c2:08:11:ea:75:f8:8a:df:1f:85:9e:e7:b6:4b:d9:ae:27:
fc:62:95:f7:f6:53:a9:a4:04:11:84:e6:41:5e:29:4c:51:3d:
f2:b2:18:43:78:e7:2a:f4:a3:76:4c:db:18:02:e8:1d:48:c0:
01:2d:48:54:3d:bf:ca:cb:94:bb:91:d5:54:81:81:ce:cb:8b:
f4:ed:71:d4:42:c0:be:4b:4f:a0:ef:18:b8:92:d4:c0:c3:f4:
d8:ac:3b:54:ba:17:73:75:d1:1b:1b:b8:4f:c3:0a:b1:71:a7:
a1:c9:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:16 2025 by rpki-client