Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/nR1OgOlZNt0wrc4VTcvAHuO0pMY.roa
File: nR1OgOlZNt0wrc4VTcvAHuO0pMY.roa (raw, json)
Hash identifier: e2hdAu06RlRVcG67QlhFt4TYCC6jlUi5cvyhZsQXPWE=
Subject key identifier: 9D:1D:4E:80:E9:59:36:DD:30:AD:CE:15:4D:CB:C0:1E:E3:B4:A4:C6
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 09F089D3
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/nR1OgOlZNt0wrc4VTcvAHuO0pMY.roa
Signing time: Sat 01 Jan 2022 05:52:48 +0000
ROA not before: Sat 01 Jan 2022 05:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41273
IP address blocks: 83.171.216.0/22 maxlen: 24
2a09:2f00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166758867 (0x9f089d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Jan 1 05:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d1d4e80e95936dd30adce154dcbc01ee3b4a4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:8d:98:2e:f3:d0:5f:99:b4:32:96:7c:e5:
e6:a7:a0:07:35:dc:c8:ec:6d:0d:a8:3a:d0:bb:ea:
e5:30:69:c0:2d:7c:57:97:00:97:1f:a9:7a:7e:b6:
03:b9:1f:c7:f6:45:41:0a:48:1f:95:1b:fa:46:eb:
7b:0d:ce:5f:fb:2f:04:f5:df:99:c6:16:4d:26:59:
7f:74:d5:7e:0d:27:41:97:53:fd:f7:23:6c:7c:a2:
39:45:4e:3b:7f:c8:8c:7d:43:35:b4:04:61:06:15:
a8:01:fe:59:68:ac:50:21:0e:b1:6f:88:00:1b:4c:
fb:ed:70:67:c9:d9:b0:9f:f0:8d:33:46:09:fa:b1:
ac:be:9b:8f:7a:22:7d:aa:a8:45:8c:43:b3:98:e2:
17:77:dc:3e:d7:ec:a5:e5:7b:df:e4:7a:b9:1f:12:
48:f4:58:9c:e3:16:6f:7c:9a:17:ba:eb:78:87:d1:
05:88:67:a1:b5:0f:ff:f6:ba:81:ec:f9:f0:71:0d:
dd:3a:f3:8c:52:ac:58:15:4e:5b:59:36:60:1d:03:
34:be:cc:9a:31:4d:5e:a2:68:e7:bb:e2:88:df:ce:
b4:01:9b:3d:56:50:e1:1f:5c:e9:63:75:2f:68:0b:
d0:2e:1d:50:fe:28:a4:83:2b:a8:0f:21:e1:52:9f:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1D:4E:80:E9:59:36:DD:30:AD:CE:15:4D:CB:C0:1E:E3:B4:A4:C6
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/nR1OgOlZNt0wrc4VTcvAHuO0pMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.216.0/22
IPv6:
2a09:2f00::/29
Signature Algorithm: sha256WithRSAEncryption
24:29:6f:98:40:d6:10:64:b2:22:ab:ed:a5:ca:05:c3:b6:2a:
bb:94:6d:e4:ad:5f:4f:bc:cd:fd:41:20:f4:5c:f6:fa:3d:22:
a2:37:26:8a:7c:3c:ad:a8:5d:4d:3e:63:27:03:de:5a:61:03:
aa:de:d0:93:f2:4a:49:95:af:fd:90:ff:30:63:bc:d1:3e:1e:
42:4a:9e:7b:96:b3:4a:e3:28:e3:37:de:d7:d4:b6:be:b4:b3:
88:4e:ae:e8:e0:6b:7b:a1:58:4b:1a:de:ee:f4:c6:f8:18:64:
39:83:60:9d:34:3d:b1:2d:4f:89:ee:e4:13:47:3f:d4:71:17:
e2:80:fc:54:28:f6:c7:58:65:6f:0f:8b:e1:4a:20:df:75:b2:
b8:fd:c5:c3:73:a0:a9:0e:2c:a6:b7:d4:71:eb:b9:14:4a:cb:
74:5c:af:66:38:b4:df:e0:f3:00:3c:0b:0f:7a:92:5c:cb:ec:
f7:12:7c:27:a8:eb:f0:a9:5b:ae:52:82:b0:ea:29:54:66:00:
76:9a:bd:f2:62:ed:fb:c8:8a:16:e2:59:b2:78:90:79:5f:a5:
c0:01:28:4f:e2:ca:b2:01:82:d5:9e:f2:2c:29:2e:73:92:d9:
cb:71:61:30:34:bf:df:a5:eb:8b:6c:86:c8:50:11:8b:27:19:
a6:30:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:11:01 2025 by rpki-client