Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/Jcga3Mi-MGVmEpU0vmW1Xz0-kn4.roa
File: Jcga3Mi-MGVmEpU0vmW1Xz0-kn4.roa (raw, json)
Hash identifier: AXyUEJ3ys1Pxd6XsUl+84UmxhiSuxSPaukCVLD9dOPA=
Subject key identifier: 25:C8:1A:DC:C8:BE:30:65:66:12:95:34:BE:65:B5:5F:3D:3E:92:7E
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 0184E69576D6756387CDD487186C56585EB9
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/Jcga3Mi-MGVmEpU0vmW1Xz0-kn4.roa
Signing time: Tue 06 Dec 2022 08:37:45 +0000
ROA not before: Tue 06 Dec 2022 08:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196714
IP address blocks: 93.94.7.0/24 maxlen: 24
93.94.6.0/24 maxlen: 24
93.94.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:95:76:d6:75:63:87:cd:d4:87:18:6c:56:58:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Dec 6 08:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25c81adcc8be306566129534be65b55f3d3e927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:da:2e:79:74:b6:57:24:9c:b7:18:54:d0:
b5:83:9e:18:0a:69:f8:c2:03:95:2d:dc:56:6e:49:
0b:15:30:1b:46:e8:8f:64:4a:a9:c4:49:74:29:a7:
81:c1:c3:ca:40:1e:e6:28:1b:b6:19:87:7e:5f:5f:
d8:20:4d:8f:dc:a5:0f:b5:24:2c:d7:43:73:d6:cc:
c0:67:7b:f7:1f:f9:c4:54:1a:f1:b5:fd:ac:25:d5:
c1:68:93:af:e9:17:b6:0e:88:d8:6b:e9:84:6a:db:
82:80:5a:a3:b2:84:7c:f5:8c:f5:d1:31:ae:b8:ba:
41:43:66:23:1c:92:1a:69:11:2a:e3:5f:99:51:5e:
f7:75:85:66:76:7d:aa:00:a1:cc:78:ef:59:c3:a9:
6b:62:2d:4e:7c:7a:86:f6:25:eb:18:37:85:4c:49:
6e:1f:96:1a:f4:a1:b1:4b:71:13:1f:40:34:d0:6b:
70:5e:96:ff:83:d2:94:00:25:4c:e3:e4:ee:5a:ec:
92:fe:cf:b6:6d:3c:a3:28:1e:da:e3:9d:ef:ad:0a:
b2:89:c9:49:db:92:56:73:f2:80:25:af:8d:ba:15:
09:cf:ed:6f:98:2f:a3:5b:1a:eb:34:c2:19:5d:49:
f2:fe:e7:9e:66:f9:c1:b3:69:91:73:a8:64:24:c7:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:1A:DC:C8:BE:30:65:66:12:95:34:BE:65:B5:5F:3D:3E:92:7E
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/Jcga3Mi-MGVmEpU0vmW1Xz0-kn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
76:6a:74:57:f6:5e:a9:b9:a3:e7:ab:6b:d2:2b:58:d7:85:e4:
7f:d6:4f:84:eb:45:93:66:d1:77:62:ec:8f:0f:bd:a2:96:27:
bc:a1:83:28:8e:36:80:75:28:09:de:cb:42:4a:85:81:be:38:
2d:ba:0b:15:02:e9:fc:77:cf:97:31:c3:e6:32:66:61:e6:95:
f6:7a:df:cc:17:16:eb:20:56:9a:4c:fe:61:63:a2:fd:5e:78:
31:1f:2e:ed:8a:31:b9:1a:69:6c:37:a6:c4:71:c5:75:8b:f1:
88:d3:50:5b:a7:7c:1f:83:86:e8:28:73:77:6a:8a:f2:3f:bb:
8a:3e:6d:96:4f:6b:79:02:c0:77:b9:27:db:18:50:4d:10:8d:
f6:87:a1:c8:88:75:b4:93:60:3d:3d:f2:58:a6:4e:d9:ff:dd:
86:1f:9a:0d:62:ce:f9:de:1f:06:53:bc:58:23:10:2c:e6:4f:
db:7d:08:c9:24:c2:49:08:1a:ec:ac:40:7d:46:78:86:0c:e4:
3e:bd:ec:03:97:f4:ce:96:93:04:35:48:1a:02:5e:aa:3b:0f:
6f:a3:7d:94:4b:4e:70:bb:a6:10:c8:38:7c:91:e5:28:0b:d0:
80:3e:b8:65:19:c7:26:9d:7d:65:ed:36:89:ac:31:95:21:30:
ac:cf:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:57 2025 by rpki-client