Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/1aJTUjlc33aPNv1YF-n_nEk0E1Q.roa
File: 1aJTUjlc33aPNv1YF-n_nEk0E1Q.roa (raw, json)
Hash identifier: IBZFrvmhdh9NpPGM0FoZOZIoD+m2mR9V6zYsyzYGZi4=
Subject key identifier: D5:A2:53:52:39:5C:DF:76:8F:36:FD:58:17:E9:FF:9C:49:34:13:54
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 01856EB928F4B4529ABA17F30AF706B4EA9E
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/1aJTUjlc33aPNv1YF-n_nEk0E1Q.roa
Signing time: Sun 01 Jan 2023 19:05:06 +0000
ROA not before: Sun 01 Jan 2023 19:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209011
IP address blocks: 94.177.128.0/24 maxlen: 24
194.28.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:28:f4:b4:52:9a:ba:17:f3:0a:f7:06:b4:ea:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Jan 1 19:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5a25352395cdf768f36fd5817e9ff9c49341354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:1f:dd:74:60:65:42:0b:dd:d0:83:e2:91:
58:9d:35:5f:aa:67:23:d2:c8:bd:96:21:8f:e3:e9:
8e:f5:2b:c3:7f:81:4d:d7:78:45:c7:7a:21:30:96:
39:87:06:a6:30:d4:d7:d1:ea:f4:41:01:5f:8f:fa:
44:c0:0d:fb:8c:d0:a8:3b:a8:f4:3f:74:05:18:5f:
cd:51:d0:bc:df:1d:d1:2f:07:d2:1a:32:ea:c2:8d:
f8:29:11:16:66:6e:89:3b:e5:4f:e4:60:59:f9:e0:
ec:2a:25:19:7a:90:c2:43:30:2d:45:8f:9b:cf:28:
db:ab:a9:ad:65:0a:a6:5a:40:a5:76:cf:2e:df:d2:
de:76:c9:e5:ac:36:e0:66:24:36:4f:a2:a4:ca:82:
50:3e:23:e2:9b:f0:e0:cd:51:f4:79:e2:c8:1b:f5:
3f:9f:af:45:5a:df:79:56:8a:0d:d8:09:fb:3c:ca:
bb:07:16:04:c4:1c:9e:5c:bf:89:6d:3b:05:1c:88:
d7:01:10:14:1b:b5:65:3a:f4:2e:77:0c:bf:d4:24:
22:1d:10:39:88:50:27:f8:72:d7:36:ca:28:08:f5:
f4:a3:54:be:5a:1b:87:77:08:c1:f1:a5:e2:3d:d3:
a9:bc:3f:04:02:c1:72:28:83:cd:29:1e:cf:36:7d:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:53:52:39:5C:DF:76:8F:36:FD:58:17:E9:FF:9C:49:34:13:54
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/1aJTUjlc33aPNv1YF-n_nEk0E1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.128.0/24
194.28.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b6:74:25:30:ab:8f:0c:37:63:d5:b7:65:11:b9:f6:99:a7:
27:6a:98:ae:8f:30:ae:6d:01:61:68:db:b8:63:bd:74:86:81:
f3:0b:fd:a9:da:b7:d9:8c:d2:e4:54:cf:43:01:59:68:1e:9b:
b4:4d:64:75:21:37:dd:78:ae:bc:fe:f9:15:f8:fb:2b:50:de:
79:f7:68:20:c0:d5:33:55:32:6e:1f:f9:77:cc:a9:f5:ff:4e:
60:5d:4b:75:a9:2e:5d:8d:17:a2:d4:ec:3a:be:6e:18:27:b3:
47:e1:e6:51:08:5f:05:90:dc:07:37:9e:ee:18:0b:c0:be:32:
a8:3e:5a:1d:7c:51:59:e3:b0:4e:17:f9:e8:21:cc:ca:00:7b:
58:8b:ef:8d:0d:34:c1:ea:12:dc:4b:29:91:66:49:48:b2:bf:
24:82:74:e5:81:3b:4b:c7:38:ca:54:64:1c:16:66:5f:44:f2:
66:8b:2f:9a:0d:27:6d:11:82:9c:1a:d7:7a:79:29:2d:34:2d:
41:c6:7f:9a:c0:85:7d:c0:b7:74:4c:e7:73:97:f6:35:9d:03:
ff:bc:1a:25:cc:77:f7:48:c1:71:0d:84:6c:0e:e3:14:34:ad:
bb:37:bb:13:1e:85:27:78:85:17:3d:de:fc:3d:da:01:b6:6b:
41:b1:c6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:09 2025 by rpki-client