Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/XtGlfnhW12uKDWQR60gn6BR1O9Q.roa
File: XtGlfnhW12uKDWQR60gn6BR1O9Q.roa (raw, json)
Hash identifier: ztQRN67Kiq7F/5sGn/MX3k2khW47RD9/8ym1AT/gPWI=
Subject key identifier: 5E:D1:A5:7E:78:56:D7:6B:8A:0D:64:11:EB:48:27:E8:14:75:3B:D4
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 05F4FD0D
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/XtGlfnhW12uKDWQR60gn6BR1O9Q.roa
Signing time: Sat 01 Jan 2022 11:01:46 +0000
ROA not before: Sat 01 Jan 2022 11:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207421
IP address blocks: 94.231.214.0/24 maxlen: 24
2a10:b00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99941645 (0x5f4fd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Jan 1 11:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ed1a57e7856d76b8a0d6411eb4827e814753bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:03:c7:1f:6b:31:5d:27:d4:40:2e:40:73:
fd:c5:15:a4:89:57:ae:fc:6f:e4:97:06:0e:01:1b:
18:9a:d9:42:f7:4b:3f:bd:23:8d:50:21:b9:35:f3:
1e:cd:82:0f:b7:9b:e7:5e:54:d1:b5:ad:2b:7a:00:
7a:29:06:aa:90:7c:72:cd:ff:24:4c:d1:e8:4d:d4:
77:5e:9b:44:a0:49:c0:01:7c:35:8a:bb:31:a4:36:
7c:9b:53:a2:11:14:e0:36:ac:18:ff:fb:c8:5b:77:
28:36:a3:67:97:b7:3a:69:6a:cc:a8:30:aa:7b:a2:
dd:31:f1:a3:90:9c:77:57:57:38:68:53:28:53:f0:
91:c5:01:bf:0f:14:e6:23:ac:8b:97:30:b7:61:2a:
41:6d:16:df:17:a8:da:57:59:89:d2:30:19:26:0e:
3c:33:0d:c2:66:36:9c:d9:05:bc:dd:67:da:ee:31:
dd:e1:f9:36:c7:5f:d5:93:dc:0c:e2:dc:68:b1:27:
63:27:ae:4e:d8:49:f2:cb:56:29:25:13:f0:8d:7f:
1e:af:47:ad:da:5e:cd:c9:b7:85:88:5b:21:c5:f8:
99:08:f0:82:98:6c:e5:12:8d:c8:f8:72:4a:70:95:
9d:5f:5a:6d:59:47:31:14:0f:63:7e:60:21:f5:37:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:A5:7E:78:56:D7:6B:8A:0D:64:11:EB:48:27:E8:14:75:3B:D4
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/XtGlfnhW12uKDWQR60gn6BR1O9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.214.0/24
IPv6:
2a10:b00::/29
Signature Algorithm: sha256WithRSAEncryption
94:30:3b:c8:2e:42:17:a0:e2:22:b5:21:23:ba:85:2c:f5:63:
32:6d:bb:3c:f0:7f:7a:8a:4f:dd:06:fb:77:b8:62:63:08:83:
80:4b:48:03:db:68:fa:8f:fb:8e:a1:c6:e8:ac:ea:ac:58:1c:
c1:36:0c:44:56:90:83:80:f1:3d:ab:d8:0c:51:81:a8:9c:87:
46:93:e6:56:64:90:cb:fa:f6:0e:f7:9f:ad:54:8d:73:fe:c5:
e7:f0:05:0b:db:32:9a:8e:da:64:48:9a:d8:ce:47:a3:0d:28:
3a:0e:41:96:0e:ee:a3:3a:27:6e:67:d9:78:9c:21:67:40:cf:
68:a9:12:08:7a:28:66:56:1d:a4:27:48:e4:d3:a5:1b:de:3e:
34:d9:7b:1f:df:1d:d1:ec:77:c0:2e:2d:cc:55:d7:70:3a:42:
04:d3:0b:21:5d:a3:3e:2d:87:a9:55:e0:3a:f1:c9:d9:1a:be:
f2:11:ba:65:e4:90:0d:d5:90:2a:2f:13:e5:5a:01:13:30:b9:
43:b6:53:ae:3d:46:b6:80:54:43:b3:52:4d:f8:15:a0:72:6a:
1f:2b:cd:d1:c1:9d:e0:17:15:31:86:13:c4:73:5c:e7:5f:d0:
4f:b1:ee:d3:48:6a:1a:0a:99:f5:f1:f6:c5:d4:c9:de:a6:1d:
c6:f1:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:03 2025 by rpki-client