Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/i9Nele3hNmU6C-qkTwAmxi4bPDc.roa
File: i9Nele3hNmU6C-qkTwAmxi4bPDc.roa (raw, json)
Hash identifier: emd/QCh/YzME/CdkSudQJAGIYQFOy0SZsOvyX2N4y9o=
Subject key identifier: 8B:D3:5E:95:ED:E1:36:65:3A:0B:EA:A4:4F:00:26:C6:2E:1B:3C:37
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01889ABFF7AB49FDEF2B33B35EAC91FA0602
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/i9Nele3hNmU6C-qkTwAmxi4bPDc.roa
Signing time: Thu 08 Jun 2023 11:24:12 +0000
ROA not before: Thu 08 Jun 2023 11:24:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198294
IP address blocks: 84.47.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:bf:f7:ab:49:fd:ef:2b:33:b3:5e:ac:91:fa:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jun 8 11:24:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bd35e95ede136653a0beaa44f0026c62e1b3c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:60:77:f3:9c:b0:1f:54:f6:72:2f:3e:92:
8d:62:7e:f6:c5:33:ae:53:c4:c8:e2:20:55:55:a0:
b1:c0:9d:86:1f:48:6c:a4:a3:50:14:33:99:32:00:
3d:53:bd:92:6f:b1:96:8e:f1:63:5c:a2:58:be:a8:
fc:65:9e:81:92:d7:f3:b5:95:b2:37:6a:ab:d4:74:
89:43:f4:f6:48:69:fa:58:7b:a8:f5:b6:16:ae:5b:
b3:68:07:ec:e1:90:d7:2f:8d:5c:e7:ae:de:fa:4d:
5a:fe:98:55:28:8b:83:9c:7c:21:99:7d:25:16:76:
e0:1d:95:15:49:66:10:16:c8:36:67:a8:d6:74:c3:
3a:ad:03:c0:48:0a:f1:8f:15:20:85:12:fb:83:1e:
31:ee:20:2b:0c:0d:07:88:bd:05:b3:8e:2c:4d:ba:
11:1a:de:f9:92:9b:f7:b1:7d:71:87:8c:b4:eb:e6:
ee:fb:37:59:3e:6e:d0:4e:f4:6e:cf:29:00:e8:d3:
13:93:e5:32:3c:e5:4b:72:44:37:d1:b8:19:22:f9:
5d:10:d5:90:7d:71:31:82:27:9c:5f:a2:5c:7c:a4:
cf:d5:7c:66:90:eb:26:ba:fc:d3:b6:1c:36:a5:c1:
9d:b4:65:aa:ea:3f:4a:b9:c5:82:13:e9:04:bc:27:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:5E:95:ED:E1:36:65:3A:0B:EA:A4:4F:00:26:C6:2E:1B:3C:37
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/i9Nele3hNmU6C-qkTwAmxi4bPDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:45:49:56:ed:77:46:fb:47:c0:eb:e6:59:eb:75:0e:9c:08:
b9:19:55:e1:75:04:27:ca:98:e7:f1:fa:b1:b3:ac:00:de:e0:
b3:9f:3b:7b:d7:1d:51:2f:d6:fd:ef:23:a0:d2:b8:74:5e:43:
09:71:e7:20:7e:2f:52:b3:94:b7:b9:9e:d9:d2:75:14:4d:24:
8d:95:03:2b:88:be:5b:90:37:b5:e7:1b:74:b4:39:b4:29:fe:
ff:4f:73:20:21:32:93:bf:ed:8e:22:b5:4f:68:87:30:0d:3d:
68:8d:f4:aa:ae:4b:70:0e:9f:27:d1:b3:b8:36:81:e3:3a:7e:
65:37:ae:a8:66:f6:6c:06:81:5b:f4:f2:42:43:0f:a0:ba:b4:
e7:7f:7f:f3:37:6e:c7:f9:70:0b:a5:89:b4:14:44:e9:44:bc:
75:0d:e2:97:c3:f0:03:83:35:f4:fa:3b:2c:a7:f1:fb:70:36:
f0:01:ce:20:90:36:8a:11:cf:b6:60:e3:4b:4b:d5:32:88:cf:
2e:66:8d:40:8b:db:63:34:35:00:c1:20:0c:da:e0:21:18:2f:
99:13:fb:a6:15:1e:33:5b:d1:21:00:b8:d8:04:da:e0:f2:58:
44:2a:7e:37:33:c5:f8:e3:c4:73:1e:ee:e7:f2:98:07:c8:3e:
7a:75:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:38 2025 by rpki-client