Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/nfMlodkSFOUVLm0j2QmjH0oTBl8.roa
File: nfMlodkSFOUVLm0j2QmjH0oTBl8.roa (raw, json)
Hash identifier: PKJXG4q65+HmYaQA2EfHZKqtI1r5TzY3y38ccpcpkvo=
Subject key identifier: 9D:F3:25:A1:D9:12:14:E5:15:2E:6D:23:D9:09:A3:1F:4A:13:06:5F
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0FE13CCB
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/nfMlodkSFOUVLm0j2QmjH0oTBl8.roa
Signing time: Sat 01 Jan 2022 12:59:41 +0000
ROA not before: Sat 01 Jan 2022 12:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50956
IP address blocks: 194.28.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266419403 (0xfe13ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 12:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9df325a1d91214e5152e6d23d909a31f4a13065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:e2:9a:37:d2:db:8b:96:32:5f:06:a1:ed:
e0:14:12:49:08:ac:47:ad:22:a2:21:2a:40:81:da:
50:b7:b1:9a:aa:fb:ee:49:17:4a:c0:97:6c:c3:d3:
41:a7:84:8c:f3:bb:fa:3a:fe:d3:62:46:4c:4a:24:
1f:7b:c9:70:2d:7a:24:41:3e:41:87:be:09:06:59:
8b:42:5e:48:ad:b3:96:72:c0:c5:bd:fa:b4:29:b6:
b0:c7:6b:50:f0:72:3e:8b:62:79:71:ea:2e:e6:3b:
21:96:06:71:86:f0:1e:79:d5:07:e6:62:3c:8b:f6:
58:6f:b8:ff:d7:85:df:8d:72:18:ef:11:60:c1:cb:
88:db:e8:b4:84:d1:4c:83:b3:8b:7c:a8:7e:85:24:
25:e4:95:88:ac:ad:54:ba:8f:bd:e9:fb:5f:04:dc:
e0:bf:a6:27:25:4b:60:74:98:80:89:b0:19:ef:95:
8a:a8:44:07:fa:4e:46:e2:a8:a0:94:30:9b:9b:76:
a3:dc:3c:2c:28:7c:c2:63:fc:73:6b:0b:a3:b1:fe:
a4:52:ac:ca:26:56:8d:a8:bc:e6:97:65:73:36:b0:
7c:ca:59:a8:b1:64:90:36:6a:cf:2d:3e:26:4d:20:
e2:3f:14:ac:fa:d3:68:1b:b4:01:cd:15:07:f3:43:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:25:A1:D9:12:14:E5:15:2E:6D:23:D9:09:A3:1F:4A:13:06:5F
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/nfMlodkSFOUVLm0j2QmjH0oTBl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.103.0/24
Signature Algorithm: sha256WithRSAEncryption
39:dc:87:da:f4:6f:f0:b0:13:78:a2:cb:f1:e8:ce:80:14:45:
17:de:35:77:99:21:83:3e:ce:22:32:55:d8:86:1a:5d:b9:88:
ca:69:86:9e:8f:f5:01:10:be:e7:5f:3d:e3:82:03:c5:55:ac:
a8:cd:15:ea:7e:aa:9f:63:cb:77:fe:6a:82:33:32:84:4e:86:
65:48:df:44:9e:d8:0a:ae:e6:28:13:21:e5:c3:c1:64:8f:da:
7a:bb:6b:ce:6b:b8:13:7b:da:c0:83:c5:05:6c:d6:d1:7f:cc:
65:45:c5:0e:ff:1c:db:80:72:a2:db:71:eb:62:80:b8:3e:bf:
0a:c3:da:ae:e7:00:3b:81:7f:1f:42:be:c7:a2:9e:fb:9f:ac:
12:68:85:12:56:48:4d:43:f2:68:41:40:d2:57:fe:ae:1c:5d:
5d:78:e7:ad:7e:57:32:f7:02:e4:66:79:d7:94:05:fc:4a:4d:
75:76:4a:85:b5:92:23:be:7d:70:2d:88:1b:9e:1d:44:03:90:
d2:b5:95:94:a1:91:4a:f9:b6:c9:bc:8b:87:91:cd:3f:66:59:
70:b4:34:92:3c:85:53:d1:4f:6e:b0:40:63:f6:7f:57:bb:23:
18:86:1d:74:6d:eb:ec:30:30:da:83:a8:82:50:51:11:ee:bf:
cb:ab:04:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:05:06 2025 by rpki-client