Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/0RVNEKUsMqLi1retHL4K0rxOsVc.roa
File: 0RVNEKUsMqLi1retHL4K0rxOsVc.roa (raw, json)
Hash identifier: kjCePZhxCp/I3r7YbeEu1BzcQ31sVoxf+9ejNT8KCrg=
Subject key identifier: D1:15:4D:10:A5:2C:32:A2:E2:D6:B7:AD:1C:BE:0A:D2:BC:4E:B1:57
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0398F83B
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/0RVNEKUsMqLi1retHL4K0rxOsVc.roa
Signing time: Sat 01 Jan 2022 00:51:12 +0000
ROA not before: Sat 01 Jan 2022 00:51:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61248
IP address blocks: 195.238.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60356667 (0x398f83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 00:51:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1154d10a52c32a2e2d6b7ad1cbe0ad2bc4eb157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:8f:28:9d:99:3b:c4:13:f0:4e:f4:e2:da:
ba:f2:fa:d4:f0:d5:fc:d4:b7:2f:e1:c6:03:85:cb:
25:a5:46:92:ce:83:a6:00:9b:8d:e3:00:b9:09:ce:
3d:c0:4b:80:46:8a:8f:77:81:51:e8:cc:1e:62:ba:
cd:43:2b:79:c4:f0:80:97:51:49:57:4a:14:50:4b:
9d:1a:b9:77:14:ef:fb:bc:90:30:c2:ac:49:1b:b2:
e6:fd:fa:95:e6:84:c2:ab:59:88:07:1e:0f:10:d1:
81:4f:47:f4:6b:67:35:6d:30:1e:3d:d1:c6:71:8f:
d0:5e:3f:53:04:7f:64:f5:2b:f8:b9:66:74:34:e9:
a2:30:2c:d8:36:8b:11:f4:b6:27:98:52:76:6a:e5:
de:26:f6:b1:5c:45:4a:6e:4e:9b:ec:22:ec:c6:ce:
7d:30:17:34:e4:ec:60:33:09:1e:53:67:0b:ea:a9:
c7:4c:6d:21:31:10:34:95:16:c8:08:05:f3:d3:9e:
8e:57:c0:d8:01:d2:ad:71:3c:ae:f6:2a:f0:64:7e:
5c:34:5e:3d:6f:fb:17:63:fd:32:63:16:0d:f0:e8:
f3:f9:74:12:be:1a:50:7d:b7:f5:2a:fc:a7:2e:8c:
f3:dc:a7:a1:4f:ee:3d:8b:c9:86:0b:b4:b1:3f:8e:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:15:4D:10:A5:2C:32:A2:E2:D6:B7:AD:1C:BE:0A:D2:BC:4E:B1:57
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/0RVNEKUsMqLi1retHL4K0rxOsVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.231.0/24
Signature Algorithm: sha256WithRSAEncryption
28:67:a4:6c:59:9f:20:f0:74:0f:ce:57:ec:3b:3c:40:fb:53:
b4:7f:d9:92:66:fa:ac:8a:f2:86:5e:57:eb:92:91:7b:85:f5:
9b:0e:d2:c2:77:81:38:84:9e:35:73:32:29:68:31:03:7a:05:
de:21:fc:9e:cc:42:6c:50:a6:b9:f3:d3:7f:20:14:7c:d5:00:
11:df:65:43:cc:9b:3f:7c:36:f3:46:fa:01:72:64:27:d0:fa:
9f:9c:3c:86:37:7e:c3:0d:e5:98:2c:95:55:59:c3:cf:d8:3d:
49:7a:c5:db:8f:0f:e2:24:17:06:10:7b:25:bb:b7:ac:05:e8:
fc:e5:bf:63:ec:21:95:c2:ed:12:f7:43:2f:0e:75:7f:01:b9:
23:b7:35:f2:fa:34:0c:ae:20:d9:70:fc:71:a1:b2:4e:b3:f0:
f1:cf:8d:fc:81:14:4a:ea:24:62:ae:35:75:76:0f:bc:12:fc:
50:15:07:a7:52:06:6e:fe:67:0f:0b:67:3f:63:d9:57:d6:34:
38:10:35:9e:b9:40:a4:c8:21:ce:88:46:89:65:0b:19:02:60:
21:b1:27:ca:a7:c5:3c:73:58:05:d6:77:23:fa:cd:9a:5d:a9:
84:f8:45:65:26:e5:f8:39:18:7e:8a:2c:db:2e:c5:58:35:aa:
ec:03:f6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:31 2025 by rpki-client