Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/n97l29eSMxeN-rqYDq70fmI2IkY.roa
File: n97l29eSMxeN-rqYDq70fmI2IkY.roa (raw, json)
Hash identifier: f4s05CoJIPkRLMtOdu5qgfU+/diwBgHgmxt41WIkNTA=
Subject key identifier: 9F:DE:E5:DB:D7:92:33:17:8D:FA:BA:98:0E:AE:F4:7E:62:36:22:46
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01848AE5A3C987A5AD43BA9DB6A9E02B5414
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/n97l29eSMxeN-rqYDq70fmI2IkY.roa
Signing time: Fri 18 Nov 2022 13:20:15 +0000
ROA not before: Fri 18 Nov 2022 13:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30790
IP address blocks: 195.123.186.0/24 maxlen: 24
195.123.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:e5:a3:c9:87:a5:ad:43:ba:9d:b6:a9:e0:2b:54:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Nov 18 13:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fdee5dbd79233178dfaba980eaef47e62362246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:f9:b4:20:21:c8:3e:c7:bf:f2:09:48:ba:
39:d8:16:c8:3c:4f:9f:fa:14:30:8c:a8:2b:8f:63:
8e:8b:7d:30:81:aa:46:b5:4b:c5:a4:23:3d:bd:a5:
94:e4:b7:26:68:29:dc:8f:4a:b0:14:fc:7c:39:75:
da:43:ea:60:86:83:c9:a5:83:02:d7:b2:85:71:b5:
56:82:e1:47:84:97:b5:b8:82:90:0e:74:0b:63:c2:
db:ee:32:0d:1c:65:50:4f:4e:2d:a0:ea:ca:7b:43:
e9:2a:75:c5:c8:fe:2b:27:15:e4:fc:5d:dd:ec:6a:
8e:6a:36:78:4d:dc:b6:73:42:6b:b6:68:f9:11:17:
15:25:be:ed:27:2a:2e:95:ba:61:d4:6d:f1:0e:bf:
b0:eb:17:90:ca:bf:de:cb:bf:39:6a:07:2a:f0:07:
92:f5:08:c0:15:aa:1b:00:ce:e3:42:28:c9:db:ab:
25:02:16:32:a0:5b:10:f1:84:20:1f:49:d2:3a:61:
1b:e6:24:8c:22:a7:0e:cf:4c:15:9b:79:51:77:04:
c1:fa:94:1c:23:47:6d:6d:95:80:89:ee:34:c1:98:
83:04:11:93:e2:f2:a6:13:df:20:ae:7c:c2:d7:ef:
78:38:17:a4:b9:89:49:8f:a8:ce:15:77:b2:a8:60:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:E5:DB:D7:92:33:17:8D:FA:BA:98:0E:AE:F4:7E:62:36:22:46
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/n97l29eSMxeN-rqYDq70fmI2IkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.185.0-195.123.186.255
Signature Algorithm: sha256WithRSAEncryption
1e:ba:fa:66:00:39:4f:9a:d7:a5:4f:21:56:57:78:e7:9c:78:
57:95:12:22:e8:4a:8d:d5:43:43:b6:e0:13:9c:f4:34:54:11:
a8:0d:22:fb:9e:45:4f:01:16:41:2e:9d:6f:8d:8a:cf:78:3e:
00:bf:f2:7b:c7:cd:25:8a:b0:5a:e2:d6:be:2b:59:ff:15:08:
b4:13:81:ee:6b:c6:2f:d9:23:0c:f1:2c:dd:25:74:c3:8b:61:
db:eb:bc:59:df:d7:2b:85:15:94:7a:f1:94:e4:9d:d0:a8:9d:
f7:7f:53:20:bb:a9:f3:89:ed:11:ff:d7:26:3f:ed:a1:64:c4:
82:58:91:a5:db:78:3a:c7:0f:46:12:b1:59:8b:21:d2:14:28:
85:66:10:63:47:39:bc:f7:fd:e3:d6:3b:46:a8:43:6c:6c:1f:
6f:98:4d:37:c7:9b:37:12:01:0e:4a:62:4c:38:b8:45:44:1f:
88:a7:5c:5f:5f:cf:08:59:65:2f:58:59:4b:ff:29:02:7b:06:
5d:be:a2:ed:63:a5:87:2f:17:f9:70:dc:9e:2a:61:30:3d:b3:
4b:d9:f9:ce:a8:b5:bf:02:06:59:1a:56:71:94:9f:c5:20:c9:
f6:a4:4f:a5:c1:ab:b8:3e:0c:79:d2:03:9a:f7:41:4f:a6:5f:
11:69:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:05 2025 by rpki-client