Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/9wNFTYB6TaHocoCIq0bBA3MlRms.roa
File: 9wNFTYB6TaHocoCIq0bBA3MlRms.roa (raw, json)
Hash identifier: t3WxktU6dzRh56bLdBo4t0lKj9qJP9lyLDhqplQxWUI=
Subject key identifier: F7:03:45:4D:80:7A:4D:A1:E8:72:80:88:AB:46:C1:03:73:25:46:6B
Certificate issuer: /CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Certificate serial: 01880AB70FCA0CF67DB71B3599C1EB334BFB
Authority key identifier: 0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/9wNFTYB6TaHocoCIq0bBA3MlRms.roa
Signing time: Thu 11 May 2023 12:09:09 +0000
ROA not before: Thu 11 May 2023 12:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20900
IP address blocks: 91.238.150.0/23 maxlen: 24
195.78.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:b7:0f:ca:0c:f6:7d:b7:1b:35:99:c1:eb:33:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Validity
Not Before: May 11 12:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f703454d807a4da1e8728088ab46c1037325466b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:fd:9f:fe:4a:21:7d:0d:1e:bb:48:19:8a:
05:97:8b:3c:62:a3:bf:80:bb:d1:6a:84:5a:5c:b9:
7f:b4:33:fe:3c:af:4c:e1:5f:b7:fa:42:f5:89:69:
72:10:65:60:09:cb:32:4b:d9:04:f5:b6:0f:1f:4f:
f4:04:ae:bf:1c:4c:f6:7c:87:26:3f:11:2b:09:2f:
3b:ae:86:cc:1f:b7:1a:73:a7:9e:61:f1:61:f4:15:
90:94:22:29:ba:42:57:e2:bd:3f:75:ad:8a:c5:15:
5f:51:30:c7:56:7d:9d:52:50:fd:d0:7c:ac:3e:52:
9a:d2:bf:3d:bd:50:e0:0c:5b:ce:6f:4b:16:f7:49:
7d:10:87:f2:b9:33:37:fc:7a:f1:87:07:73:e7:51:
64:aa:c4:d8:b8:a4:b6:1a:c9:94:fb:76:d2:11:ac:
0d:68:11:47:22:04:a3:ee:64:4d:b7:06:4e:1a:c6:
66:22:2e:2c:01:2d:00:bb:a3:54:9a:d6:ab:bf:2b:
db:36:f0:b0:56:e4:a0:d1:27:09:21:b4:37:31:5a:
95:16:a2:43:47:f1:6b:6e:74:52:7a:1c:c4:d8:4e:
93:a3:a0:9f:00:d9:81:89:f5:02:7f:b9:37:3d:bf:
08:01:ee:30:7f:6e:04:40:f0:0d:4a:3e:b8:b6:a8:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:03:45:4D:80:7A:4D:A1:E8:72:80:88:AB:46:C1:03:73:25:46:6B
X509v3 Authority Key Identifier:
keyid:0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/9wNFTYB6TaHocoCIq0bBA3MlRms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.150.0/23
195.78.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:19:87:51:d5:6f:8a:18:88:a8:32:7e:88:37:e5:38:25:80:
2b:e3:89:91:77:1f:c1:14:5b:35:18:f2:c3:0c:40:3b:56:aa:
e8:9f:26:11:8a:2c:3a:28:17:f3:dc:0c:57:0e:d9:2e:b5:60:
4e:b6:59:27:1b:92:ba:7f:46:47:4d:9f:dd:1b:95:16:b5:f5:
6e:9b:1d:f4:c0:44:54:49:28:d2:8b:cd:99:4e:19:89:2b:25:
f3:a9:c4:f1:7f:8f:3a:5d:5e:35:30:0b:f8:01:39:30:bc:a2:
02:13:b3:a3:a1:99:18:ee:1c:54:c2:5b:a2:e5:e6:1c:06:cd:
7b:3c:1e:7b:62:62:b3:cb:ff:45:0f:ca:5d:80:3d:98:4a:74:
93:77:59:6c:5c:d4:11:fd:69:fa:e8:97:ff:e6:b7:1d:fb:d4:
a9:e9:fc:14:5f:82:c9:65:30:e3:c5:8b:3d:ce:25:eb:25:f8:
47:b1:28:54:29:92:01:b1:53:1a:e8:f4:4f:e8:72:7c:92:02:
0b:8b:52:d2:34:82:50:ba:38:5f:76:cc:ff:d1:af:32:b5:58:
7f:14:10:8d:e8:63:1a:a3:d8:f6:db:15:ea:c0:5d:bf:ec:0e:
62:cc:a8:44:61:fe:20:55:fd:33:d9:3f:3e:7b:5e:dc:f2:36:
96:d9:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:48 2025 by rpki-client