Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/oM9AEks7SA836RSd0GyLdck03qw.roa
File: oM9AEks7SA836RSd0GyLdck03qw.roa (raw, json)
Hash identifier: ZiP4FGm9kSVkPopoCSlXz9md8b8WgJTrp95GHFMsr6A=
Subject key identifier: A0:CF:40:12:4B:3B:48:0F:37:E9:14:9D:D0:6C:8B:75:C9:34:DE:AC
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0184BE4DCE496FE6F2B8E9F59692C5C5B85A
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/oM9AEks7SA836RSd0GyLdck03qw.roa
Signing time: Mon 28 Nov 2022 12:54:40 +0000
ROA not before: Mon 28 Nov 2022 12:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 84.254.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:4d:ce:49:6f:e6:f2:b8:e9:f5:96:92:c5:c5:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Nov 28 12:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0cf40124b3b480f37e9149dd06c8b75c934deac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:7b:19:9b:6e:a7:e2:1d:80:dd:19:00:5b:
ce:06:0b:fd:55:25:a6:c1:39:8a:ca:fc:34:41:7d:
1c:e0:de:61:e4:30:33:de:de:55:be:16:cb:d3:ee:
70:f4:2c:91:7f:40:6d:3b:5f:be:1e:36:9d:e1:41:
63:90:1c:7d:0c:dd:ba:bd:61:9e:a9:54:d6:04:c4:
36:83:68:6e:e5:6d:24:6b:4d:88:61:66:17:ba:e0:
67:16:0b:10:6f:8b:3a:6e:00:d1:00:1e:db:c1:7f:
82:ea:ad:3a:7f:f1:fb:ab:17:15:57:4b:ac:08:67:
31:d8:59:8c:de:23:39:1f:ba:59:aa:76:8d:66:cb:
d6:c3:b3:c1:b4:e3:c1:d8:de:98:d2:43:3b:a4:b3:
b2:a7:ca:d7:a0:ff:c5:f7:71:fb:ab:1e:e4:ce:18:
fb:86:fd:61:42:24:b7:13:6f:b3:96:0d:9c:b8:4c:
c8:f6:4c:e2:6f:24:c8:b5:f2:c6:16:41:38:c9:37:
7e:a9:a9:e4:fa:87:d4:d4:c0:a0:ae:4f:0f:53:ea:
7f:1b:a1:fe:80:24:4f:db:f8:f5:5b:b6:5b:0e:9a:
ba:c4:5e:e8:67:80:6d:6c:13:05:1d:87:69:93:72:
e1:45:97:0e:68:ad:f3:20:ca:fc:01:c3:31:a3:2c:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CF:40:12:4B:3B:48:0F:37:E9:14:9D:D0:6C:8B:75:C9:34:DE:AC
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/oM9AEks7SA836RSd0GyLdck03qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:80:56:39:e4:1c:4c:81:be:f5:ba:43:18:52:ee:fe:ef:7e:
cb:1d:de:cc:3c:05:12:9f:ce:99:49:e0:da:aa:5e:15:6f:04:
20:d6:15:53:4d:c1:0e:4e:d6:17:d7:9e:7b:a2:1b:a9:89:08:
5a:ac:4a:01:bf:53:47:02:01:d8:a2:e0:cb:65:5b:47:5e:83:
e2:a0:23:9e:d9:d4:40:a8:b2:e4:49:c8:6d:4b:ca:f4:12:95:
d1:d2:39:16:67:8e:43:f8:a0:9a:a7:21:9f:3d:89:be:0f:4b:
29:4b:6a:f6:a5:27:4f:f7:14:c9:65:39:58:3a:47:a9:e5:b7:
17:35:da:3a:4f:b9:06:af:92:e1:43:4b:93:81:88:b2:67:87:
50:af:b3:ad:d8:7f:d0:5a:a9:b6:8b:d7:42:5d:fc:f6:d8:f0:
1c:1f:66:b7:11:97:58:2a:2c:71:49:7a:16:5a:34:57:c5:e8:
30:20:fc:03:b9:cf:d5:ad:b5:7a:43:fd:a8:6a:09:d6:20:19:
9c:ce:88:80:b5:ae:d5:70:5f:11:29:f0:51:0c:2c:4e:18:0f:
b7:56:50:24:e4:2f:8e:f5:52:90:68:56:11:da:c7:65:c8:b7:
fa:79:7e:cb:5f:70:09:ee:b9:05:1d:49:a9:c0:71:cd:94:41:
75:fd:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:23:55 2025 by rpki-client