Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nbuIQY5MDbWs1MVRQxOGBrnwGac.roa
File: nbuIQY5MDbWs1MVRQxOGBrnwGac.roa (raw, json)
Hash identifier: R4/c/5V1KZ5RgjYFwUEDglcNsJD3sKnrbXRTWy38Hc8=
Subject key identifier: 9D:BB:88:41:8E:4C:0D:B5:AC:D4:C5:51:43:13:86:06:B9:F0:19:A7
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B1C57F2D12C00B46CA2D240FB204E
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nbuIQY5MDbWs1MVRQxOGBrnwGac.roa
Signing time: Sun 01 Jan 2023 13:35:11 +0000
ROA not before: Sun 01 Jan 2023 13:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210998
IP address blocks: 194.6.177.0/24 maxlen: 24
217.193.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:1c:57:f2:d1:2c:00:b4:6c:a2:d2:40:fb:20:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dbb88418e4c0db5acd4c55143138606b9f019a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:df:7b:96:e3:76:de:4a:8f:ac:4a:35:0a:
a9:a6:91:c8:c1:6f:3e:fd:eb:84:f8:18:47:64:53:
8b:3a:dd:be:0f:73:a0:a4:14:44:c1:c6:04:61:c8:
7e:f6:e9:24:47:fa:d4:5b:fa:1c:38:39:83:92:91:
36:92:ca:4e:72:6f:04:fa:c8:a1:34:a8:22:4b:78:
27:46:0c:0e:84:c3:50:3f:cd:d7:94:73:e2:75:f1:
60:a4:c7:c1:3a:54:32:53:c9:ab:6a:98:33:de:84:
1a:a2:53:86:d2:3e:73:17:b5:72:1f:4f:63:42:a1:
c8:bc:10:21:0a:e7:c0:34:89:bd:0c:4e:15:c9:cc:
51:dd:df:08:82:90:40:f3:4f:44:eb:a0:3a:c1:a3:
16:ff:fa:87:33:54:06:2e:20:48:fe:64:98:a4:39:
c7:7b:55:20:d7:ab:e9:24:d7:70:2a:c5:32:68:cf:
c5:e7:46:51:29:bc:d9:89:b4:5e:d3:3b:35:e7:82:
3b:aa:3c:e7:d4:89:44:dc:88:c7:ee:7c:b1:58:5f:
c0:43:17:3c:9f:85:ef:56:78:95:c9:5a:dd:44:30:
9c:d3:6b:c8:17:39:5d:64:8e:33:6c:eb:12:75:72:
be:20:20:8e:97:2f:ca:f1:c6:6c:c0:00:be:73:e0:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:88:41:8E:4C:0D:B5:AC:D4:C5:51:43:13:86:06:B9:F0:19:A7
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nbuIQY5MDbWs1MVRQxOGBrnwGac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.177.0/24
217.193.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e8:0a:43:52:15:3e:63:e2:54:21:6a:ce:81:65:b8:8b:a6:
96:d0:4a:2b:13:cd:b3:f3:d2:f0:4b:f8:9e:87:01:86:3e:c5:
32:d9:2e:db:53:77:f8:2a:d9:19:c9:97:18:65:64:0c:17:92:
2c:a0:15:ad:12:92:43:d4:c6:c5:cb:64:68:d0:dc:c2:f5:f0:
eb:80:49:7a:4a:a5:5b:84:5a:33:69:3d:03:fd:a2:fd:78:dc:
20:c1:52:18:bb:03:e1:e2:6b:91:82:e7:82:7d:52:bf:89:f7:
1d:71:b1:b2:3d:d9:28:2c:18:78:73:f2:f7:16:de:b5:5c:86:
24:f4:3f:ce:59:cf:6f:6d:23:c5:64:a9:07:ed:3d:82:8e:a6:
90:59:83:9a:dd:88:0a:7e:91:1a:2d:2f:28:bc:40:31:61:d8:
ee:d5:cb:94:5e:47:3d:31:39:0f:1f:ba:d3:81:26:e1:30:fb:
77:d3:31:3f:30:d3:90:f7:6b:d3:9c:bd:e0:9a:67:48:37:79:
7b:47:8a:08:17:ea:90:93:74:7a:80:63:6e:1d:b5:c2:b1:42:
69:13:e5:b3:2b:90:5b:ad:7f:e1:1e:2e:58:47:05:20:61:b9:
44:d1:90:9b:c0:86:7f:36:88:38:4d:bc:fc:88:75:cd:58:bd:
c0:12:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:43:59 2025 by rpki-client