Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/n2iCrHpYslxd-OZv86fOyHWlljk.roa
File: n2iCrHpYslxd-OZv86fOyHWlljk.roa (raw, json)
Hash identifier: 0VQXMOa54EA43kkp+FXCTs3ClixvF61mCaO+lqzpS7U=
Subject key identifier: 9F:68:82:AC:7A:58:B2:5C:5D:F8:E6:6F:F3:A7:CE:C8:75:A5:96:39
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 018572B41FE899C0714969940DE5428374E7
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/n2iCrHpYslxd-OZv86fOyHWlljk.roa
Signing time: Mon 02 Jan 2023 13:38:05 +0000
ROA not before: Mon 02 Jan 2023 13:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.215.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:1f:e8:99:c0:71:49:69:94:0d:e5:42:83:74:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Jan 2 13:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f6882ac7a58b25c5df8e66ff3a7cec875a59639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:e9:40:07:7e:ed:53:c4:04:69:6d:92:0b:
31:e0:12:70:b0:7e:51:c2:1e:5b:9d:b0:a2:6c:da:
e5:0f:f5:51:ff:13:0d:f4:db:9b:b3:c4:b8:26:b7:
48:84:39:2a:22:15:38:22:66:43:3c:f7:6f:6a:8a:
8e:89:0a:ac:b8:8e:2d:3d:33:07:c6:0e:d3:52:04:
45:d8:c4:d0:c3:48:f5:20:dc:75:07:7c:39:8e:f4:
25:12:ce:9f:e8:5c:b8:97:d1:68:46:ed:b2:1a:ed:
06:53:2a:8b:b8:3f:67:9f:0b:4d:e5:f2:7a:b6:57:
e1:54:c9:f0:a5:44:e8:bf:69:96:0b:0e:16:2c:5f:
de:92:a7:8f:db:aa:e9:52:a8:89:ae:c8:52:24:ff:
3f:73:34:e1:80:ac:08:0d:c4:eb:6e:73:57:63:15:
dc:f8:52:02:45:dd:c2:ea:01:65:40:ff:f8:99:90:
e6:e5:b3:04:52:0a:b2:2b:b5:2a:72:dd:23:67:d3:
ff:45:1c:75:f2:8c:cf:9b:c9:ea:13:65:b1:43:ad:
89:e4:8c:a9:b4:c3:24:cf:e9:e3:c0:73:e1:72:a0:
b6:a1:1d:4b:1d:0c:37:c0:9d:03:34:2a:f3:2e:ce:
b7:ed:53:3e:b9:21:84:57:c1:70:d8:5a:7b:ef:e2:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:68:82:AC:7A:58:B2:5C:5D:F8:E6:6F:F3:A7:CE:C8:75:A5:96:39
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/n2iCrHpYslxd-OZv86fOyHWlljk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e0:cd:91:7b:25:b3:eb:c2:fd:c5:2d:93:9a:28:ae:a2:30:
97:54:e4:3c:94:b5:b2:8a:be:ee:83:14:50:c7:de:64:3c:aa:
c2:ac:af:3a:0c:fd:c2:67:7a:2a:0a:e1:37:80:8d:cb:f3:45:
b6:1b:6d:7f:aa:12:d1:a1:28:6c:1f:31:f9:cb:89:72:0f:9f:
f4:93:d6:ef:87:81:ee:e6:5c:a9:9e:6f:bd:cb:d3:54:c6:c5:
83:88:53:97:20:57:8e:0d:a6:06:71:2f:98:7e:19:dd:8c:ce:
95:95:d7:72:0c:46:73:35:71:ed:0b:94:c2:60:79:39:6d:10:
6c:87:6b:57:6e:9f:7b:66:7a:6c:f0:21:d3:d2:11:7a:ac:42:
63:11:a2:1e:14:00:ee:07:5b:1b:93:9f:68:ea:81:75:3b:19:
a4:5f:dd:90:f5:ef:de:ab:0e:39:ee:72:65:5d:af:dd:5b:91:
88:32:04:0c:68:43:43:82:0c:09:0b:2a:3c:74:bc:1d:c2:49:
f8:30:c6:c3:06:5d:21:a7:ec:fc:df:8e:8e:8e:71:c8:76:bd:
25:dc:83:39:63:b3:b3:d5:4e:be:ea:9f:8c:4f:4a:5d:b1:4e:
70:23:58:6d:b3:3e:2d:f6:71:a2:f8:19:73:d5:bf:d4:96:63:
11:3b:ac:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:48:17 2025 by rpki-client