Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nE74C7v4-Wer-5sgFYHE8YomFs4.roa
File: nE74C7v4-Wer-5sgFYHE8YomFs4.roa (raw, json)
Hash identifier: eIKoO5dYwJVCTVzTdL/8TIedif04zdEwh61YrEMGlfE=
Subject key identifier: 9C:4E:F8:0B:BB:F8:F9:67:AB:FB:9B:20:15:81:C4:F1:8A:26:16:CE
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 01857358912BBDE59148EDF89E5CEB72F2F3
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nE74C7v4-Wer-5sgFYHE8YomFs4.roa
Signing time: Mon 02 Jan 2023 16:37:42 +0000
ROA not before: Mon 02 Jan 2023 16:37:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48401
IP address blocks: 89.44.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:58:91:2b:bd:e5:91:48:ed:f8:9e:5c:eb:72:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 16:37:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4ef80bbbf8f967abfb9b201581c4f18a2616ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:6c:fb:5c:20:a6:06:db:0c:04:a1:0b:53:
e3:10:f1:41:0d:51:f1:46:7a:85:c2:e4:6a:c5:8c:
d3:f8:93:58:ca:da:20:5f:97:1c:42:40:c3:a8:62:
4a:18:ee:bd:9c:cb:b5:72:1a:90:15:cd:fe:e3:17:
51:1b:3d:be:b3:e2:f2:3b:79:fe:16:7a:5b:2e:04:
48:71:87:c7:12:0d:f3:de:83:8f:5b:d0:3d:83:9c:
c8:6c:86:6c:ce:a0:14:c5:09:f0:8b:b1:cf:cb:bc:
35:e6:46:21:a7:07:e2:0d:77:c1:34:bf:45:46:32:
03:0f:3b:d1:d1:53:a1:56:98:cf:e0:e8:18:1a:21:
69:8c:26:d6:cd:9c:97:76:b8:48:24:60:2d:11:a0:
8f:b3:ef:60:66:c1:cb:08:86:23:65:c2:0a:ba:16:
50:ab:98:44:25:5f:46:2f:76:3a:39:78:46:3c:d9:
7a:b0:b9:2f:80:f5:bf:b3:fd:af:10:91:ef:1e:dd:
4e:e4:27:c7:6c:e9:b5:47:6f:b3:88:65:88:96:1a:
de:d7:ad:7a:7d:ca:e3:3d:51:ea:4a:fc:31:2e:57:
24:82:71:79:73:26:95:b4:74:fa:28:63:53:94:88:
d1:37:13:b6:6e:52:7f:3d:d7:30:9e:39:91:c7:b2:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4E:F8:0B:BB:F8:F9:67:AB:FB:9B:20:15:81:C4:F1:8A:26:16:CE
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nE74C7v4-Wer-5sgFYHE8YomFs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.246.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ac:2b:90:85:f3:e5:f1:73:4e:47:4f:f4:d6:85:3f:c0:2e:
4c:b7:48:a8:e8:9f:93:f3:9a:32:9c:45:a3:bf:0c:f6:21:d6:
f8:fe:41:e0:a4:22:a3:42:8d:13:75:60:56:67:75:6a:82:6f:
0d:d9:5c:4c:94:fe:c6:2b:4b:01:bb:f9:0b:ab:dc:11:03:67:
d5:35:cd:70:44:6d:a5:6b:82:20:8e:b9:ba:3c:fe:dc:81:67:
46:df:47:0a:dd:9c:fe:b5:51:46:1f:ff:5e:92:36:d7:9c:8f:
87:1c:d3:02:22:eb:6b:20:7c:18:ed:3c:f8:52:9d:6d:22:b2:
42:3d:08:9a:1a:23:11:93:2f:26:44:be:b1:54:82:6a:5c:e3:
fe:e7:cf:a5:45:18:7a:54:c7:40:b2:9a:93:ef:1b:33:37:aa:
60:bf:b7:ec:77:bf:d8:b0:51:0d:c7:5b:d5:43:ec:2d:78:6f:
bd:83:1c:41:0b:8b:91:89:6f:c1:ef:cc:b4:11:12:06:01:cb:
84:4c:f6:82:d9:b8:c0:e9:c7:bf:f8:72:00:eb:cf:58:e8:95:
e3:1f:3d:c3:cc:a2:26:94:0b:4b:7e:2e:23:ab:5e:84:11:10:
0b:a0:76:13:df:5c:1a:f5:ea:6d:66:a1:b6:dc:f7:b4:9d:d9:
09:66:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:07 2025 by rpki-client