Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/OVC1sUBNCzay317X7gTtIu5kues.roa
File: OVC1sUBNCzay317X7gTtIu5kues.roa (raw, json)
Hash identifier: NmjdftREtwF0fR09xfKBiZwEWRdwfrNOiL4fc6nmsGA=
Subject key identifier: 39:50:B5:B1:40:4D:0B:36:B2:DF:5E:D7:EE:04:ED:22:EE:64:B9:EB
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 01856FC24B9BE9E97F000DFB1AFD3190D90B
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/OVC1sUBNCzay317X7gTtIu5kues.roa
Signing time: Sun 01 Jan 2023 23:54:42 +0000
ROA not before: Sun 01 Jan 2023 23:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207493
IP address blocks: 94.231.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:4b:9b:e9:e9:7f:00:0d:fb:1a:fd:31:90:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Jan 1 23:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3950b5b1404d0b36b2df5ed7ee04ed22ee64b9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:98:9f:a9:a8:d4:6d:d1:46:47:08:2b:a9:51:
34:08:90:58:16:e1:d8:4f:f4:5b:9e:93:29:c5:70:
ed:ee:1c:c3:f9:a5:26:ec:86:f5:fe:26:ec:34:90:
a9:24:92:f5:f5:6a:cb:14:da:5d:bb:c7:34:fb:3d:
23:b1:4b:f9:f8:4f:9c:1f:73:2f:b9:0e:00:65:b0:
3e:3d:79:80:c3:9b:81:7e:c1:99:eb:5a:a3:e7:a0:
26:13:b9:67:b7:6b:bc:97:c1:c1:7b:d7:1d:49:7e:
08:3b:0b:24:e7:73:7d:ff:83:f7:61:76:f8:64:5d:
37:d2:e1:86:1a:06:07:da:14:1a:10:91:1b:17:d4:
6f:6a:49:0e:f6:f7:5c:8c:8b:57:86:56:0c:25:c9:
7e:ef:ad:59:c0:66:2c:58:a9:b9:3d:4d:2f:8d:56:
cd:39:98:ce:b7:09:4c:83:a5:d0:d4:ff:8f:7f:be:
8f:60:a4:0a:40:bf:b7:ac:23:e5:33:46:22:55:f6:
d9:9b:78:c9:bc:95:b9:35:e8:e6:d0:a0:c5:ba:54:
23:55:58:6e:f4:b7:f6:05:44:5e:de:8b:ce:10:0e:
3f:c8:57:35:3f:aa:a4:42:e5:fa:d0:f4:fa:37:d5:
6c:bc:10:d8:bb:4d:ef:2e:5d:05:e0:37:7b:7f:8a:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:50:B5:B1:40:4D:0B:36:B2:DF:5E:D7:EE:04:ED:22:EE:64:B9:EB
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/OVC1sUBNCzay317X7gTtIu5kues.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.193.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7a:83:b8:13:7c:9d:79:e6:78:33:2b:e2:ea:26:e3:c6:dc:
87:e9:6e:af:a8:e4:ff:58:1f:6d:6a:b3:11:87:f0:af:ca:c9:
b3:3e:d8:1f:6d:35:75:59:54:53:1c:f9:7c:2a:97:9a:c8:19:
6c:26:a2:d4:73:09:0b:67:e9:99:36:d2:06:53:9b:e5:9b:ce:
ca:97:15:4e:4c:19:a2:69:ed:f4:81:a5:4a:ba:6e:56:25:23:
43:f1:2f:ff:52:7b:7d:ba:54:71:6d:12:e6:98:d0:0b:12:1b:
0a:b5:9f:e1:af:30:8a:6e:2f:36:0a:39:16:a3:c4:b2:37:11:
14:01:9d:cd:90:6b:0d:39:71:9b:22:1b:e3:cf:86:0b:b9:0c:
78:57:e3:7c:ff:5c:05:c7:ea:50:7d:9b:ee:ff:0c:97:35:a8:
2b:27:4e:fa:9f:77:c0:99:cc:71:eb:24:2e:ca:ec:e9:df:db:
f9:ca:4f:82:a8:2d:52:f1:c9:ae:a5:24:a8:3c:a8:d1:fe:ee:
55:14:6b:63:7c:8e:db:ff:4b:1f:f5:db:d8:21:0b:4a:9d:60:
95:97:86:fd:35:d6:bc:e9:19:b6:39:9e:f3:14:c0:0c:bf:b3:
0b:79:6a:18:85:93:b9:1c:cc:35:91:46:13:f3:23:e3:c5:72:
fd:6e:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:08 2025 by rpki-client