Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/nCEROwBHGAqbjhuzFBxZJLgXyRs.roa
File: nCEROwBHGAqbjhuzFBxZJLgXyRs.roa (raw, json)
Hash identifier: F6w1EFJS6v4WFPAW7ideW9orVnpUWY+0XLn9aIbgsAc=
Subject key identifier: 9C:21:11:3B:00:47:18:0A:9B:8E:1B:B3:14:1C:59:24:B8:17:C9:1B
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 066ADD54
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/nCEROwBHGAqbjhuzFBxZJLgXyRs.roa
Signing time: Sat 01 Jan 2022 07:00:43 +0000
ROA not before: Sat 01 Jan 2022 07:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207799
IP address blocks: 194.49.71.0/24 maxlen: 24
194.49.76.0/24 maxlen: 24
194.49.84.0/24 maxlen: 24
194.49.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107666772 (0x66add54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Jan 1 07:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c21113b0047180a9b8e1bb3141c5924b817c91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:cf:97:40:d8:61:18:a0:72:10:82:ef:bd:
cf:4a:8b:e4:d7:a6:7a:a0:41:c5:f6:ac:2a:05:70:
18:1e:29:2a:b2:e2:5a:ae:2d:5b:22:55:da:9a:bd:
e1:b4:5b:3c:7e:c6:14:cd:b8:95:0c:76:fe:a3:c7:
35:c9:eb:77:6b:d7:02:e8:84:79:62:c5:2a:27:ff:
6b:01:41:a4:e6:6c:72:e7:7f:5c:90:ee:12:28:9a:
28:df:f8:83:56:19:9c:d1:2d:82:09:56:46:3f:80:
db:a6:83:61:7c:45:f5:42:13:c6:69:2a:8d:ac:84:
88:97:ba:50:17:d4:89:14:70:d3:f2:34:c9:97:a7:
68:6a:bc:70:85:ae:0e:15:2c:d3:8d:39:e0:66:4e:
43:71:34:cd:b0:dd:0c:c6:e3:a6:e7:1c:fe:d2:87:
6a:77:43:68:87:c3:b5:fe:a3:a7:05:6f:37:e2:b6:
ab:cf:0d:84:75:46:83:e6:3c:a6:7d:dc:c1:76:3d:
8f:c9:20:79:b1:19:0d:b7:aa:34:a5:6c:1a:62:82:
5d:0c:f3:76:f2:2a:d4:96:4f:e8:d8:90:f5:ae:2e:
00:a6:15:d4:14:32:e0:37:a8:e0:ff:1a:2a:b2:93:
11:2f:a0:3e:87:50:b9:e8:48:d0:12:cf:4a:68:06:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:21:11:3B:00:47:18:0A:9B:8E:1B:B3:14:1C:59:24:B8:17:C9:1B
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/nCEROwBHGAqbjhuzFBxZJLgXyRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.71.0/24
194.49.76.0/24
194.49.84.0/24
194.49.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:86:16:bc:d1:9b:5e:41:c5:fc:ee:75:ac:7c:ab:67:4d:b7:
40:12:d9:ca:96:f6:14:81:11:07:2a:e9:a8:28:2c:67:72:d8:
cc:f0:0e:0f:dd:23:58:30:a1:9f:c1:ec:53:c3:0b:20:73:c9:
66:a3:41:af:d5:dc:46:4c:17:b9:d2:02:76:49:53:d1:8b:f7:
46:5b:6c:e3:4d:9d:e4:e6:5c:93:e3:ec:0b:e0:3a:c3:9c:00:
5c:c6:ee:40:7d:ef:47:4b:27:76:99:0f:17:ae:62:17:e7:3c:
de:04:ca:e3:7f:16:09:96:a3:17:20:a6:f4:ba:df:ad:bf:3f:
f0:b2:84:5a:31:2a:7a:90:76:c3:80:6e:79:93:3b:94:ce:02:
cf:20:50:67:96:5f:49:9b:7b:cf:6f:83:37:3e:dd:93:40:f0:
86:53:5b:35:f5:81:82:1c:eb:df:7d:69:0e:aa:29:35:e6:8d:
40:76:af:1b:49:20:10:74:4f:c3:68:f8:f9:58:e7:f9:86:a8:
c7:23:50:13:14:34:4a:32:0b:c5:32:8c:52:09:98:d6:ca:f8:
13:b9:8b:85:01:12:e7:cb:20:39:c8:c9:9b:0a:15:49:f7:35:
1b:0a:b6:47:d1:59:8e:f3:ec:01:59:84:30:ab:54:65:bd:22:
85:fd:37:ad
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBmrdVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Nzg5MDFjMDYxYTM1NWEzZmRhYWNlMGM4MGI5NjdhZDFjZDM3MTdhMB4XDTIyMDEw
MTA3MDA0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWMyMTExM2IwMDQ3
MTgwYTliOGUxYmIzMTQxYzU5MjRiODE3YzkxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJMUz5dA2GEYoHIQgu+9z0qL5NemeqBBxfasKgVwGB4pKrLi
Wq4tWyJV2pq94bRbPH7GFM24lQx2/qPHNcnrd2vXAuiEeWLFKif/awFBpOZscud/
XJDuEiiaKN/4g1YZnNEtgglWRj+A26aDYXxF9UITxmkqjayEiJe6UBfUiRRw0/I0
yZenaGq8cIWuDhUs04054GZOQ3E0zbDdDMbjpucc/tKHandDaIfDtf6jpwVvN+K2
q88NhHVGg+Y8pn3cwXY9j8kgebEZDbeqNKVsGmKCXQzzdvIq1JZP6NiQ9a4uAKYV
1BQy4Deo4P8aKrKTES+gPodQuehI0BLPSmgG/G0CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBScIRE7AEcYCpuOG7MUHFkkuBfJGzAfBgNVHSMEGDAWgBQniQHAYaNVo/2q
zgyAuWetHNNxejAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0o0a0J3R0dqVmFQOXFzNE1nTGxuclJ6VGNYby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvOTAyNTk5LTQ4ZDYtNGE4OS04NzI0LTljN2E3YmNhYWYzNi8x
L25DRVJPd0JIR0FxYmpodXpGQnhaSkxnWHlScy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
OTAyNTk5LTQ4ZDYtNGE4OS04NzI0LTljN2E3YmNhYWYzNi8xL0o0a0J3R0dqVmFQ
OXFzNE1nTGxuclJ6VGNYby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAMIxRwMEAMIxTAMEAMIxVAMEAMIx
XTANBgkqhkiG9w0BAQsFAAOCAQEAToYWvNGbXkHF/O51rHyrZ023QBLZypb2FIER
ByrpqCgsZ3LYzPAOD90jWDChn8HsU8MLIHPJZqNBr9XcRkwXudICdklT0Yv3Rlts
402d5OZck+PsC+A6w5wAXMbuQH3vR0sndpkPF65iF+c83gTK438WCZajFyCm9Lrf
rb8/8LKEWjEqepB2w4BueZM7lM4CzyBQZ5ZfSZt7z2+DNz7dk0DwhlNbNfWBghzr
331pDqopNeaNQHavG0kgEHRPw2j4+Vjn+YaoxyNQExQ0SjILxTKMUgmY1sr4E7mL
hQES58sgOcjJmwoVSfc1Gwq2R9FZjvPsAVmEMKtUZb0ihf03rQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:32 2025 by rpki-client