Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/k4G1Fh9z5vIJn54q6xfiqnFH7zw.roa
File: k4G1Fh9z5vIJn54q6xfiqnFH7zw.roa (raw, json)
Hash identifier: h/bL6EMCUmaQ3W4/G0geENBj/4bJXeX6MeyLjluTA+4=
Subject key identifier: 93:81:B5:16:1F:73:E6:F2:09:9F:9E:2A:EB:17:E2:AA:71:47:EF:3C
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 01856F42DC86C8E4BF62F176B83514E06EDF
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/k4G1Fh9z5vIJn54q6xfiqnFH7zw.roa
Signing time: Sun 01 Jan 2023 21:35:30 +0000
ROA not before: Sun 01 Jan 2023 21:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212847
IP address blocks: 195.234.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:dc:86:c8:e4:bf:62:f1:76:b8:35:14:e0:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 21:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9381b5161f73e6f2099f9e2aeb17e2aa7147ef3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:7e:66:02:08:72:88:4b:6b:08:a1:81:d4:
97:c0:dc:11:88:2e:e4:16:c4:9b:b2:19:32:19:01:
a8:d2:7f:08:e6:cc:ab:d0:e7:fb:49:38:10:b6:8b:
8c:2a:20:3d:d1:2b:bd:f6:6a:ca:93:3d:39:c7:4e:
b1:a7:fd:5d:07:3c:7c:40:14:b7:a9:66:5a:c8:ae:
2b:18:65:f1:f5:3e:e0:a8:c1:61:32:e6:45:3d:25:
27:e0:9b:5f:1e:31:73:c5:cf:76:22:d1:0e:f7:26:
c1:7b:46:df:84:61:95:dc:6a:7a:c7:e0:af:cd:61:
7d:38:59:46:d6:2c:97:a1:4d:da:ce:44:c2:90:b2:
97:43:08:05:78:d1:f8:ac:8e:d5:77:11:89:7c:38:
e8:87:c9:be:ec:0f:5f:23:c7:00:e0:fe:31:a5:b9:
82:4b:ad:cf:f3:74:7c:de:2e:72:c7:3e:ff:b5:86:
e7:ef:b9:4b:c5:41:10:e7:5d:28:62:0d:97:9a:b7:
a6:2a:a9:6b:18:25:e5:32:b2:8f:20:ed:8f:ee:2f:
c8:8d:bc:0b:b8:16:50:23:ad:8b:2f:99:a2:06:15:
2b:0b:6d:35:d6:22:df:d2:2a:3c:dd:6b:c7:69:78:
78:7c:86:b2:28:49:7b:31:17:e1:9d:8f:95:8f:1e:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:B5:16:1F:73:E6:F2:09:9F:9E:2A:EB:17:E2:AA:71:47:EF:3C
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/k4G1Fh9z5vIJn54q6xfiqnFH7zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a9:7a:88:5f:99:dd:8d:8b:10:03:cb:e1:8f:ec:19:52:80:
dd:a7:40:fb:52:39:71:27:02:a3:87:dd:d8:15:4a:7f:d8:08:
92:93:21:8b:09:87:08:22:71:f6:3e:6a:6b:75:2c:46:fe:9d:
9f:30:e1:29:d8:86:33:4b:e2:df:d5:ce:da:35:1e:58:5d:ca:
4a:32:f6:06:fa:b2:d3:5d:3c:c7:54:bf:1d:b4:39:ac:2d:ad:
d5:dd:69:6f:77:b4:40:bd:9b:67:b9:b5:e6:b1:34:86:fc:4b:
52:dc:04:26:14:04:41:28:0b:b2:16:cc:c0:66:16:74:a7:51:
ab:26:e5:57:10:0c:77:17:00:7c:81:f6:6d:30:76:f4:19:12:
8a:a0:f3:e1:27:79:bc:e6:ae:93:b1:cc:f3:39:94:97:b2:42:
30:9c:31:f4:3d:75:da:85:a6:81:7d:14:ed:09:ad:59:65:4d:
41:cf:16:e6:b0:2f:65:e2:05:34:61:c3:77:fa:36:43:78:b6:
8e:c7:49:bb:76:97:9c:d4:41:e7:e9:69:87:11:90:08:cf:aa:
32:3d:95:b5:c5:60:9a:ab:be:f3:1c:ca:de:04:78:92:86:28:
cd:14:cf:5f:50:d9:73:08:05:b5:23:5e:1e:bd:94:54:eb:4b:
3f:8f:e5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:17 2025 by rpki-client