Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/nIa6WqjEsndJ8f4cDpjRu_WkjcU.roa
File: nIa6WqjEsndJ8f4cDpjRu_WkjcU.roa (raw, json)
Hash identifier: DI6+eCSrPaqD/SKID9Z6/Nz4DLKuOocmqtMULfq/2kc=
Subject key identifier: 9C:86:BA:5A:A8:C4:B2:77:49:F1:FE:1C:0E:98:D1:BB:F5:A4:8D:C5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 1740F9D8
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/nIa6WqjEsndJ8f4cDpjRu_WkjcU.roa
Signing time: Mon 27 Jun 2022 10:03:51 +0000
ROA not before: Mon 27 Jun 2022 10:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 37.143.0.0/22 maxlen: 22
37.143.4.0/22 maxlen: 22
46.28.40.0/22 maxlen: 22
46.28.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390134232 (0x1740f9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jun 27 10:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c86ba5aa8c4b27749f1fe1c0e98d1bbf5a48dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:16:09:2c:3f:73:98:28:94:e5:4b:6c:9c:
17:30:3f:54:55:37:44:db:ed:3d:32:1c:ef:c1:3f:
c1:87:35:dd:7d:f2:44:50:90:48:c4:fc:3e:70:d3:
c5:5c:84:00:2d:e5:00:f7:51:77:9f:57:d9:27:ee:
92:51:87:42:29:64:95:b1:64:0c:42:82:a1:1a:ce:
a5:6f:fd:d1:38:a1:6f:54:5a:56:ab:75:f9:d1:db:
c9:d1:24:9e:21:c2:2d:78:dd:60:0e:e3:39:32:1e:
92:14:4e:3c:1e:d3:7b:9a:0b:de:f1:b5:6d:24:c4:
35:2c:5a:06:16:01:04:4c:2d:59:31:4f:13:1f:86:
ca:b9:5e:c9:d4:44:50:28:fa:71:8a:5a:4d:96:30:
0d:9a:df:12:9b:40:a8:69:f5:3e:8c:c2:ed:0b:32:
bf:f7:d1:9a:05:5c:d6:28:a4:8e:42:6a:7e:2a:39:
96:1d:2a:62:02:f8:1b:3b:af:9a:a8:6e:80:0f:c8:
a5:f9:6d:4d:f6:e8:b8:0f:2e:fc:53:59:bc:b1:94:
fa:7f:47:7f:2b:e0:5d:91:be:d0:24:1d:20:a0:05:
c2:07:c3:8d:56:e3:d9:14:31:69:56:11:16:5f:b7:
08:52:8a:7f:e4:33:8b:d3:c6:1b:c8:89:75:5f:6c:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:BA:5A:A8:C4:B2:77:49:F1:FE:1C:0E:98:D1:BB:F5:A4:8D:C5
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/nIa6WqjEsndJ8f4cDpjRu_WkjcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/21
46.28.40.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:d4:33:db:d0:31:8c:34:c4:e2:ff:9c:6b:c7:f5:76:f2:76:
3a:b2:b5:86:f2:9a:5c:2e:00:57:15:b9:6e:ab:3e:62:2a:55:
c7:67:27:0e:5d:a2:64:b5:a6:62:83:7e:8b:bb:3f:f7:ab:f8:
9a:c0:da:d6:82:c9:be:ad:84:d6:c3:04:e3:40:44:7f:0a:6c:
35:a6:0a:5b:3e:8e:23:1f:e0:6a:e9:c9:32:d1:49:bf:5d:67:
42:6d:b6:e0:2d:bf:15:b4:7b:f8:b0:25:a0:36:ce:da:73:3b:
38:bb:5c:a7:3b:71:22:92:39:6c:0e:e5:8a:af:b0:26:a4:ca:
38:e9:f9:20:96:13:ac:03:36:6b:f5:85:a9:37:00:c3:3d:60:
c1:83:99:be:9a:83:9a:93:74:64:7c:20:8f:7a:a6:b0:51:01:
98:fa:c0:b6:f3:fb:ad:a9:a1:be:52:e0:63:bb:78:82:73:f6:
85:ac:86:7b:26:40:a8:c6:b3:38:5b:fa:75:d1:49:92:02:12:
23:24:9f:fb:03:48:63:fd:a5:1d:d0:0a:1d:72:a9:70:ca:00:
1a:5e:5f:60:65:b9:01:f5:b2:5f:8c:f3:8e:58:0d:33:89:f9:
0e:90:c0:85:a4:ef:fd:e0:67:55:33:af:e8:54:8b:9d:1f:31:
b8:69:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:51 2025 by rpki-client