Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/16Rih9pRV9sgAmMp-e79V9Rwbfk.roa
File: 16Rih9pRV9sgAmMp-e79V9Rwbfk.roa (raw, json)
Hash identifier: TFSsLrEAujlBbIdWsGe2inWEf3UDjOvS4zKw9CZwBNI=
Subject key identifier: D7:A4:62:87:DA:51:57:DB:20:02:63:29:F9:EE:FD:57:D4:70:6D:F9
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 01887BD53B7C3420CB8FAD0F61CA54EFA893
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/16Rih9pRV9sgAmMp-e79V9Rwbfk.roa
Signing time: Fri 02 Jun 2023 11:19:11 +0000
ROA not before: Fri 02 Jun 2023 11:19:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47376
IP address blocks: 195.238.247.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:d5:3b:7c:34:20:cb:8f:ad:0f:61:ca:54:ef:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jun 2 11:19:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7a46287da5157db20026329f9eefd57d4706df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:3a:91:12:d2:76:2b:9e:13:16:7d:34:ac:
e5:a6:b5:e1:a1:c0:af:eb:61:79:46:cf:b6:bd:c6:
f5:ff:43:61:59:4c:13:f3:97:02:d1:70:3d:7b:df:
52:da:ab:3c:f5:51:97:91:76:f6:14:c6:e3:b6:30:
9c:f8:4b:c9:26:b9:68:c1:91:9f:92:5d:20:19:3e:
c9:e3:b1:3f:58:7f:1b:b8:b9:bb:c6:2f:03:1c:bf:
24:3b:9f:34:e0:43:7e:2c:45:b6:71:e1:44:5c:67:
ca:7d:c9:10:d3:03:38:fb:81:de:93:c5:e1:9a:7f:
a9:38:58:89:81:19:c5:d9:6b:d3:ed:dd:30:55:61:
81:a9:64:1f:af:2d:ca:59:c8:45:65:36:0e:60:1b:
3d:0e:0a:48:40:6e:5f:21:38:69:66:5b:a5:f4:56:
1b:3d:01:ce:5d:d6:53:34:49:48:00:b3:37:c7:d3:
90:70:84:3e:38:a0:9e:28:d2:78:09:2d:5a:10:56:
93:92:b7:4d:d4:13:cb:67:84:bc:e3:8d:9e:29:99:
fb:5a:58:1c:99:b1:74:51:7b:23:01:15:9b:57:21:
1a:ce:93:4e:f4:40:bb:71:96:59:70:8a:9c:30:43:
b2:5a:26:12:a0:aa:f7:2e:b7:63:4e:61:60:cd:49:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A4:62:87:DA:51:57:DB:20:02:63:29:F9:EE:FD:57:D4:70:6D:F9
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/16Rih9pRV9sgAmMp-e79V9Rwbfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.231.0/24
195.238.247.0/24
Signature Algorithm: sha256WithRSAEncryption
11:46:b0:76:e4:aa:92:79:fb:a6:26:c3:03:32:34:25:d7:cb:
95:28:95:1a:3d:39:42:fe:56:14:83:e3:c4:fc:4d:7c:dc:f4:
c2:85:10:e2:74:21:37:99:e5:e2:04:e2:fc:99:40:52:14:ca:
05:1c:27:7a:ff:8a:cd:9a:0f:4e:d6:3e:c8:f3:eb:81:e1:1c:
21:c5:5c:d1:18:5c:03:75:1f:9f:50:95:b7:c1:20:5e:a8:73:
70:b2:ad:70:0c:9d:e0:df:97:91:60:cb:66:e5:c1:7d:81:56:
ae:66:08:d6:d3:8a:71:7e:8c:32:36:ce:fb:45:0c:2e:7f:0a:
00:c7:68:77:2a:d9:78:23:70:99:4e:9f:06:78:a8:a3:2e:21:
38:41:ec:d6:63:32:f7:bd:00:da:77:ad:e6:42:6b:eb:f0:c8:
ec:14:8d:cf:e1:d3:11:cc:9e:9f:d1:0d:c5:cf:fd:e5:7f:e4:
2b:53:b8:d3:26:95:8a:b2:96:0a:40:63:71:6a:79:56:07:74:
5f:7f:88:85:ac:ac:79:1c:f3:6a:62:4a:45:1c:a0:83:a2:41:
fa:60:6c:02:81:3b:31:f1:72:85:ea:a9:e0:82:f9:c9:ea:f5:
0e:dd:e2:29:34:20:ce:89:6e:87:84:a1:03:00:c8:b8:ce:06:
b3:d6:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:28 2025 by rpki-client