Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/nKqmPiG8F3Gt-5ONtW44jtC8jEM.roa
File: nKqmPiG8F3Gt-5ONtW44jtC8jEM.roa (raw, json)
Hash identifier: WEGJO/MH2v44Ee1Y8qxouOqlAVEwPcMPsCR3EDvpqss=
Subject key identifier: 9C:AA:A6:3E:21:BC:17:71:AD:FB:93:8D:B5:6E:38:8E:D0:BC:8C:43
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01857195547D3E982D18AC288D555893DE9D
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/nKqmPiG8F3Gt-5ONtW44jtC8jEM.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212193
IP address blocks: 45.94.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:54:7d:3e:98:2d:18:ac:28:8d:55:58:93:de:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9caaa63e21bc1771adfb938db56e388ed0bc8c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:0d:49:0c:d7:cc:08:c2:7b:1e:6e:5e:c6:
cb:62:49:d9:3e:d4:75:88:07:b9:67:5d:a8:a9:f2:
3d:18:d1:2f:db:09:f4:2f:20:83:3e:87:bc:38:c5:
4d:4b:89:88:b4:9d:5e:e2:c1:65:19:9b:9f:40:a9:
63:12:d5:71:c3:27:21:11:23:3d:bc:f8:91:13:46:
6a:ec:e8:7c:2f:ae:53:9b:54:eb:2f:05:d5:7a:ef:
d7:5a:51:12:d9:a7:80:05:3d:4f:68:09:87:76:03:
15:ad:9d:fa:87:88:48:fa:42:ea:9c:b6:3c:9a:fa:
94:13:fe:49:71:b9:57:fe:4a:30:4f:0f:e6:be:25:
e0:ba:e6:d8:dd:0d:9f:08:4a:94:08:09:67:84:b2:
9d:f8:6e:3d:2e:08:4f:a3:dd:c3:41:20:ff:c2:68:
41:c3:68:72:10:63:39:1e:04:6e:e5:31:ce:9e:af:
1c:b5:d0:89:ad:b3:65:b3:f5:0d:bb:97:52:ea:4d:
52:24:9c:bb:6c:bd:41:08:39:c9:e5:9f:72:5e:9c:
75:d6:76:3f:ee:0f:ae:08:7b:2b:98:d6:f7:df:d2:
42:ae:70:7e:26:dc:a6:fa:ef:97:87:ea:79:48:2d:
45:b8:10:ad:89:1a:8c:a7:2d:ce:73:31:af:e6:9d:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:A6:3E:21:BC:17:71:AD:FB:93:8D:B5:6E:38:8E:D0:BC:8C:43
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/nKqmPiG8F3Gt-5ONtW44jtC8jEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
Signature Algorithm: sha256WithRSAEncryption
af:de:23:d1:2c:76:e8:4e:be:53:9b:a1:6a:5f:75:79:24:38:
db:f0:ef:4a:b8:b3:e6:20:ee:9f:4d:c8:82:09:8b:e5:89:53:
ec:c2:9f:d2:5f:a5:b6:d4:4a:51:9b:23:b0:18:6e:82:a2:52:
26:53:41:10:dd:2f:13:4e:d2:0a:fe:4d:7e:09:de:e8:7f:a3:
7d:eb:ed:c6:ce:94:e2:82:57:d1:72:a2:63:fd:1e:98:6d:78:
76:d3:32:21:02:25:30:37:86:7e:3f:96:61:04:56:35:6b:10:
eb:a9:06:6d:e0:8b:ac:72:bc:de:11:3a:f6:d2:25:8e:18:1e:
16:47:66:9d:23:11:72:41:e4:6d:e3:2e:55:31:2e:fe:b3:57:
ec:0b:f9:f3:b7:18:02:70:b2:8f:e2:0b:3b:21:32:7f:b6:04:
f2:29:ae:da:dc:f1:92:49:00:da:df:cc:0c:57:57:fb:44:7a:
ff:15:b8:2d:34:03:a0:3a:30:b3:21:47:da:f4:54:9e:c9:1c:
6a:4b:e2:be:d1:b4:03:4d:e4:7f:7d:b3:dc:8a:f2:ec:a0:ed:
d9:2e:1c:65:20:75:82:7b:b2:35:13:c0:fd:f8:58:71:09:b6:
d7:a3:3c:fb:91:4a:58:5b:d4:18:34:35:76:d0:49:ed:77:b0:
07:f2:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:17:20 2025 by rpki-client