Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/6Nsi7eLXmx2WvLXwoVPOuAleGvk.roa
File: 6Nsi7eLXmx2WvLXwoVPOuAleGvk.roa (raw, json)
Hash identifier: oRkGMkRdEeYkWlCffaXURrDX1OcM4SnlT53D+vQLShQ=
Subject key identifier: E8:DB:22:ED:E2:D7:9B:1D:96:BC:B5:F0:A1:53:CE:B8:09:5E:1A:F9
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 018AFEF18E679CEF50A477BBD9CFA6455754
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/6Nsi7eLXmx2WvLXwoVPOuAleGvk.roa
Signing time: Thu 05 Oct 2023 08:25:57 +0000
ROA not before: Thu 05 Oct 2023 08:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59639
IP address blocks: 193.200.89.0/24 maxlen: 24
91.199.199.0/24 maxlen: 24
2a11:1bc0::/29 maxlen: 29
2a11:1bc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:f1:8e:67:9c:ef:50:a4:77:bb:d9:cf:a6:45:57:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Oct 5 08:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8db22ede2d79b1d96bcb5f0a153ceb8095e1af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:86:4f:b4:b5:cf:7c:9f:99:9b:4a:e5:a4:
6b:74:a5:70:08:09:7d:cc:f8:00:a8:4b:07:e1:23:
3d:2c:7a:1d:1c:a9:aa:ec:99:d5:9f:71:eb:fc:1c:
67:9a:4f:a5:b4:56:bc:59:9a:57:11:e6:a9:c1:c0:
0a:9e:e3:2b:d5:0f:42:89:7a:c1:7e:80:94:a6:5d:
15:38:e6:43:0a:e8:19:23:89:d4:e4:8a:56:c7:b6:
be:d2:d4:69:93:c0:b0:95:1b:9e:29:3d:fd:42:67:
f7:d1:75:f2:4e:2a:4b:d6:84:fa:6c:c0:74:36:ba:
eb:eb:13:48:ed:a2:bf:56:53:22:4a:3b:07:f5:0f:
a4:ff:6e:41:70:9d:85:44:50:05:5a:8a:97:c5:59:
7d:39:59:06:c6:66:28:3d:c0:c4:aa:d2:66:52:d9:
2a:30:67:ae:23:c9:65:0c:d1:11:6f:3c:7f:18:88:
28:0c:ad:6a:2e:77:cc:d1:38:73:06:15:3b:96:be:
53:98:6f:64:67:7a:00:fc:b6:0f:af:29:57:3d:d6:
4d:82:35:4c:3a:26:d5:e5:23:8c:0e:02:1f:8c:84:
50:6c:73:96:76:c8:f8:83:f9:c3:2f:09:d3:0b:8e:
77:9c:43:14:fd:14:6f:61:ff:a0:02:cd:06:6f:89:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:22:ED:E2:D7:9B:1D:96:BC:B5:F0:A1:53:CE:B8:09:5E:1A:F9
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/6Nsi7eLXmx2WvLXwoVPOuAleGvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.199.0/24
193.200.89.0/24
IPv6:
2a11:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:1e:de:2c:9d:5d:18:8f:2c:53:d4:ef:ca:3d:d4:68:ba:94:
a1:6a:36:d6:c8:3b:41:7f:25:fb:18:e2:3a:84:ad:09:6f:c2:
07:f1:98:9f:09:59:9d:9d:c2:db:e6:1f:24:ab:b4:b9:df:37:
cd:56:ce:5d:04:87:0d:b9:52:39:66:94:8a:e8:bc:37:15:30:
83:39:3c:5a:86:24:6a:a0:3d:e7:b8:57:e2:c9:41:66:d8:69:
58:cf:4e:43:69:34:23:4c:ef:7c:02:fc:d0:bd:6b:ed:7c:cc:
9b:8e:97:a7:12:ea:89:c0:41:24:f6:3a:83:37:17:8e:42:f6:
fc:8c:76:63:09:02:de:e5:16:ec:4c:d1:f8:0f:ce:7f:66:7a:
e7:52:ae:60:3c:7c:6c:d0:97:0e:20:25:6e:35:2f:4d:e9:1b:
6c:5e:a0:5f:8e:79:a9:af:8a:ac:f1:37:6d:7e:2f:d5:21:51:
6b:29:8d:f8:be:46:d0:d6:dc:3a:a2:8b:09:39:ee:71:c9:b3:
4d:d2:c0:30:4d:f8:ed:dc:07:7e:f4:a9:7e:84:a6:62:0f:7e:
e1:f2:26:95:7d:57:e7:db:69:24:dd:a1:9b:e4:cd:a3:8c:2b:
52:90:f6:94:79:42:5a:44:3b:90:68:78:4a:36:56:ee:36:f3:
c9:27:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:02 2025 by rpki-client