Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/D48Nnb4m56jNEE9mADnsZIMqgdw.roa
File: D48Nnb4m56jNEE9mADnsZIMqgdw.roa (raw, json)
Hash identifier: YCzCpOu+Jw0YjlUWWM2kmwQ8gUOtFPuLk9nWRz5CBAE=
Subject key identifier: 0F:8F:0D:9D:BE:26:E7:A8:CD:10:4F:66:00:39:EC:64:83:2A:81:DC
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 018C1BDE4F2C373F8084F2A40ECA7DBCB0CB
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/D48Nnb4m56jNEE9mADnsZIMqgdw.roa
Signing time: Wed 29 Nov 2023 16:16:43 +0000
ROA not before: Wed 29 Nov 2023 16:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208368
IP address blocks: 185.229.22.0/23 maxlen: 24
2a0d:5e00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:de:4f:2c:37:3f:80:84:f2:a4:0e:ca:7d:bc:b0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Nov 29 16:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f8f0d9dbe26e7a8cd104f660039ec64832a81dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:2a:77:8b:4e:ef:84:0c:0d:19:2e:ab:d9:
53:f1:e4:1c:b1:6c:c7:5a:2b:08:05:01:70:d5:f1:
0d:f4:2f:9e:20:71:ab:11:c4:5a:e7:d0:e7:18:73:
54:d9:94:87:3d:40:6a:ea:2c:d6:a6:d2:55:84:7b:
5a:b4:1a:86:af:80:f8:d1:6e:75:b5:23:eb:fe:9e:
45:7d:2d:7a:5e:f1:3a:ed:50:e2:5f:49:f0:5b:76:
1f:38:fa:d1:a1:a5:60:d4:c0:79:67:da:83:7d:d3:
e0:ae:57:9e:4d:e6:6b:48:1b:f0:6c:9c:9a:d3:28:
c7:51:0c:66:48:47:35:ce:d1:53:33:6a:1c:3c:37:
07:30:ad:13:26:30:4b:ca:c4:bc:e1:b5:9a:51:a5:
9d:af:8e:a8:32:d4:6e:52:f1:ae:bd:d2:59:04:45:
46:bf:8f:62:f2:17:f9:15:e8:71:b1:7e:9d:5f:cb:
79:8d:b1:8a:5d:a5:a6:4d:84:de:a6:a8:f1:3f:3d:
1a:0f:43:97:1b:12:07:6a:f2:c0:df:ae:ae:1c:af:
1e:91:3d:7f:19:bd:b3:4e:5c:ab:d9:e0:18:cd:96:
81:39:70:15:ec:29:96:06:45:f3:84:39:94:47:ba:
93:49:40:ce:e9:85:c8:77:fe:ae:27:5a:0c:c0:34:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:0D:9D:BE:26:E7:A8:CD:10:4F:66:00:39:EC:64:83:2A:81:DC
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/D48Nnb4m56jNEE9mADnsZIMqgdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.22.0/23
IPv6:
2a0d:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
38:67:e8:d4:b8:28:51:3f:de:cd:33:d2:1b:7d:9d:27:78:15:
45:1b:42:5f:09:8a:6d:5e:f8:ae:6e:dc:30:f5:75:8f:3d:73:
5c:b9:73:10:53:93:53:e8:dc:d9:65:6a:9b:d5:b1:bf:7a:ea:
b6:dc:f3:1f:2a:fe:51:f6:55:dd:64:b9:cf:36:55:4a:70:dd:
41:98:da:7b:71:05:c0:d4:50:e7:86:e6:cd:37:38:54:d2:d4:
84:ed:94:87:ba:72:2c:8c:77:36:a6:0b:c8:f3:ff:d0:15:97:
2c:37:fc:b2:92:43:c8:34:80:03:98:41:d0:41:a3:00:0c:5a:
16:42:0f:1c:d2:2c:b9:21:db:4b:de:4f:d8:27:4a:bb:93:66:
a7:41:03:58:e8:80:7b:97:f9:85:f3:37:31:6a:ea:cd:dd:4c:
bd:cc:41:70:ab:02:ac:37:25:af:0c:2a:f3:42:b9:29:02:69:
21:8d:45:ce:ea:9e:96:1d:1b:d8:de:29:6d:28:06:52:8d:c5:
bb:77:96:b3:2c:a0:15:c5:cc:50:65:2b:c0:f7:a1:51:29:b2:
e6:c1:df:96:53:b7:f9:fe:aa:57:e4:1b:f6:1b:1a:77:24:3a:
41:ce:d1:40:90:38:bf:79:66:9d:0e:a9:55:46:dd:88:97:8f:
fd:d1:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:50:52 2025 by rpki-client