Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/bJKpjEMI_o_jWvZzf8fsO03ONlY.roa
File: bJKpjEMI_o_jWvZzf8fsO03ONlY.roa (raw, json)
Hash identifier: FdlyQQXLRQxjfh+CLqsIq3RtR+g3Cnb6EVqZouINhYk=
Subject key identifier: 6C:92:A9:8C:43:08:FE:8F:E3:5A:F6:73:7F:C7:EC:3B:4D:CE:36:56
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 180A8C5E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/bJKpjEMI_o_jWvZzf8fsO03ONlY.roa
Signing time: Sat 01 Jan 2022 04:00:35 +0000
ROA not before: Sat 01 Jan 2022 04:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202209
IP address blocks: 94.236.145.0/24 maxlen: 24
94.236.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403344478 (0x180a8c5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c92a98c4308fe8fe35af6737fc7ec3b4dce3656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:bf:eb:dd:cb:f2:37:ea:f6:3d:e1:53:1d:
c5:d3:d7:e3:ba:ff:fa:af:ed:bc:86:c5:ba:ea:79:
1e:a8:20:d6:28:ee:05:8d:b2:e6:80:ce:43:4e:00:
71:3a:80:f7:d3:c9:e3:40:59:53:6e:e5:4b:59:50:
c3:ad:72:3e:b3:35:9d:da:03:21:1f:c2:65:da:09:
30:6d:ce:ea:b5:47:a1:ec:dd:ba:12:61:19:e8:d7:
84:11:26:cb:48:08:1b:28:ec:e1:18:4a:51:a1:4b:
cb:6f:18:20:91:59:1f:fa:be:10:73:e1:fd:cd:49:
26:6e:42:0a:71:0c:10:98:c0:57:5a:56:3e:96:4f:
db:a1:33:20:f9:b8:e3:d8:ee:04:f5:a0:1c:1c:78:
27:40:96:35:8d:7f:84:8f:ea:17:2e:69:fa:f2:6d:
96:ec:9e:11:95:27:d7:ad:82:15:c7:31:c8:58:be:
42:07:5c:cb:a5:9e:45:70:20:b5:b5:92:96:2c:42:
e0:10:47:43:98:01:29:f0:08:08:6a:a1:d2:f4:09:
96:e0:db:7b:9a:7a:79:76:f8:be:7a:b5:0b:24:80:
fa:90:51:98:06:2f:72:ce:3a:35:2b:c6:68:56:d7:
64:fc:a4:4b:f8:8d:f5:d5:6f:98:b8:a0:57:23:18:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:A9:8C:43:08:FE:8F:E3:5A:F6:73:7F:C7:EC:3B:4D:CE:36:56
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/bJKpjEMI_o_jWvZzf8fsO03ONlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.236.145.0/24
94.236.159.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ae:20:88:80:93:58:95:60:0a:10:0e:6c:21:2a:02:ef:b7:
bf:5b:1f:01:c0:01:9a:04:b7:3b:c9:15:85:1c:d3:a9:e2:fc:
b8:68:aa:13:6e:54:ac:2b:70:f5:71:75:50:2a:80:1d:6a:f7:
62:34:7d:74:6a:23:58:08:db:ad:47:85:66:97:04:43:1b:14:
e0:18:f3:f7:63:57:4e:1a:8b:dd:3d:ab:e9:2f:08:22:5d:7f:
98:f4:c8:18:a2:a4:de:fa:c4:89:dd:e8:50:82:98:ab:6f:da:
9f:20:3b:f6:b7:29:6c:1c:7b:e5:2e:46:6d:a8:b0:29:b0:2f:
45:58:d3:0c:24:6c:06:68:32:e6:e8:2f:4c:99:02:67:33:14:
84:cf:29:b0:7e:50:9d:8e:b6:a0:c1:86:aa:ec:0d:af:04:24:
74:d0:d6:df:04:f3:f7:e1:dc:fb:c2:70:5d:41:cb:c2:83:33:
50:6f:29:0f:93:5e:a1:f0:69:5c:db:70:d8:6c:b0:74:0b:84:
b8:fb:01:4b:91:cf:0c:db:70:54:1a:b2:a2:74:ea:8d:a9:59:
57:87:5e:b9:04:e2:5b:84:dd:92:64:7a:a6:38:97:b0:9d:a2:
60:de:c2:62:43:cb:24:7e:42:c7:62:c4:d0:aa:24:d4:5e:41:
3d:0f:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:54 2025 by rpki-client