Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/S3NY1snHpyxQPWwzXt-oBCaRM8o.roa
File: S3NY1snHpyxQPWwzXt-oBCaRM8o.roa (raw, json)
Hash identifier: fGtvhz9TeZht9e/YDfUxi03aienNyEuH9StLdZyu/3o=
Subject key identifier: 4B:73:58:D6:C9:C7:A7:2C:50:3D:6C:33:5E:DF:A8:04:26:91:33:CA
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 018602068AADC48ABA3630B61D25CA20D47F
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/S3NY1snHpyxQPWwzXt-oBCaRM8o.roa
Signing time: Mon 30 Jan 2023 09:33:48 +0000
ROA not before: Mon 30 Jan 2023 09:33:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34946
IP address blocks: 94.126.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:06:8a:ad:c4:8a:ba:36:30:b6:1d:25:ca:20:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jan 30 09:33:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b7358d6c9c7a72c503d6c335edfa804269133ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:06:53:90:53:d1:a4:b2:04:09:d3:52:fa:6c:
5b:0c:cf:e8:d6:ff:eb:e0:fb:cd:d5:25:9a:63:03:
05:5a:a4:25:a8:bb:5e:0e:4c:b8:f1:91:2f:48:76:
3d:ef:ed:3c:32:6e:a6:85:51:fb:bf:30:18:38:fb:
7e:51:19:cc:38:af:8a:0f:ac:37:17:1d:92:c6:d7:
e6:35:37:7c:17:9a:81:3f:27:f2:fc:96:91:54:3e:
36:3c:c2:9c:92:30:b6:f8:aa:37:1c:c5:8b:33:d8:
84:62:d2:0f:86:f0:9f:bf:d7:48:2b:f4:06:91:39:
82:15:68:b9:df:10:03:7d:ac:6d:fb:ce:3a:64:23:
44:86:e1:a2:70:16:35:00:f9:58:83:6f:d9:bc:75:
6b:b1:ff:db:9e:f5:90:6b:2a:18:f1:a7:49:a4:8f:
7d:08:ec:c2:4e:78:8f:df:97:e0:62:66:d6:cf:5d:
81:2e:f1:da:11:d5:20:8c:32:80:a2:27:4c:32:b6:
e0:29:7b:78:9b:c8:fa:6a:a1:ce:2d:ec:29:14:f1:
3c:45:ff:43:09:7d:3e:09:9e:39:ed:85:1a:e3:8f:
76:43:1a:16:f0:62:49:a6:52:f0:08:2a:d3:01:e8:
aa:a0:29:7b:81:b3:b8:5a:ca:31:6f:78:cd:65:c5:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:58:D6:C9:C7:A7:2C:50:3D:6C:33:5E:DF:A8:04:26:91:33:CA
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/S3NY1snHpyxQPWwzXt-oBCaRM8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.80.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:a5:57:53:67:8a:6f:91:b9:ca:10:99:51:77:4d:a1:c8:22:
8a:d6:36:df:fd:9c:68:fe:44:d0:33:8a:68:5f:26:33:2b:86:
14:5c:63:2e:72:aa:ac:5b:72:6f:5c:4d:95:a3:af:8a:fd:45:
ed:87:79:7b:37:6d:0e:d1:06:05:8f:f3:ac:51:db:24:c6:f9:
4d:9f:8b:46:6e:38:00:c3:70:42:1f:58:87:fc:31:e5:0e:5e:
a1:11:13:ef:65:1e:e8:dd:a6:a2:78:b6:2c:fc:fb:2f:ca:2a:
ce:aa:8f:ef:22:87:25:e6:2a:1e:38:f8:5d:e8:5c:15:66:2d:
31:ce:28:da:e0:09:44:5e:11:c8:e9:8c:52:bd:6b:0d:68:9c:
6e:c5:59:cc:33:1e:0a:3d:42:f2:0c:1d:cd:9a:70:90:81:ab:
b5:ce:f8:62:b5:a6:c2:7b:82:90:2a:ae:37:ed:ca:43:56:e5:
0b:1a:f2:ca:dc:a8:10:7f:4c:53:01:3b:6c:c6:f8:89:13:62:
19:a2:67:d0:d9:77:b8:ed:68:3e:66:5c:dd:ca:5c:4d:ac:c3:
a5:39:fc:15:df:2c:4b:22:f5:40:53:a9:02:e1:a0:59:f9:63:
f6:92:10:77:5f:f2:6e:a5:c3:b5:58:9d:7d:e9:da:4e:17:c9:
8f:c7:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:54 2025 by rpki-client