Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/9OfepTkne_OK4-VIWLpVTl6UNqY.roa
File: 9OfepTkne_OK4-VIWLpVTl6UNqY.roa (raw, json)
Hash identifier: 8L0SmVZuEaYuT3JfagM5h7QTxMGDEDOWVggmDOjt4yk=
Subject key identifier: F4:E7:DE:A5:39:27:7B:F3:8A:E3:E5:48:58:BA:55:4E:5E:94:36:A6
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 01856F949A0E490349C95A94DBBF7C28CDDF
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/9OfepTkne_OK4-VIWLpVTl6UNqY.roa
Signing time: Sun 01 Jan 2023 23:04:47 +0000
ROA not before: Sun 01 Jan 2023 23:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 192.109.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:9a:0e:49:03:49:c9:5a:94:db:bf:7c:28:cd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 1 23:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4e7dea539277bf38ae3e54858ba554e5e9436a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:1f:c3:ad:f0:1f:d8:40:a0:b4:71:47:9e:
fa:86:16:dd:c1:11:42:c1:c2:a4:13:a2:05:62:a9:
15:ab:03:f4:f1:ad:99:cc:55:9c:9f:dc:d7:7a:81:
c6:68:f4:c7:e1:42:02:1d:c4:8e:92:71:43:c2:97:
c9:cc:53:65:9f:39:68:f4:c1:54:48:63:1e:7d:8c:
9c:ef:33:6e:6d:d4:3c:07:ca:ab:97:c9:1d:bd:58:
4e:af:18:1f:a5:94:99:dc:a4:23:27:4e:a4:e9:1b:
f4:fa:a3:13:9d:30:9d:15:64:b6:3b:02:b3:70:81:
aa:d2:08:c4:d6:ad:58:05:b3:92:84:6d:e5:47:6d:
c3:22:61:0c:ff:54:cc:e4:50:fa:31:0a:74:59:fb:
f7:71:c3:d1:45:71:65:c5:82:02:7a:ba:87:2b:d5:
6f:98:a5:59:f9:c6:ae:ba:d6:fe:3b:7e:e3:1e:fd:
70:7d:c2:8a:c2:ac:c6:bd:9a:f8:dd:04:5d:d9:08:
b4:01:8d:2e:c3:63:91:ef:0a:24:e5:b4:ff:b2:5c:
1a:80:a5:d9:2a:ec:40:51:35:b0:c5:17:49:4d:43:
5a:b4:a0:92:7c:ea:19:05:5f:ce:7e:1b:39:a8:a1:
8c:a8:07:1a:1a:a2:3d:95:1a:a4:52:37:44:17:a6:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E7:DE:A5:39:27:7B:F3:8A:E3:E5:48:58:BA:55:4E:5E:94:36:A6
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/9OfepTkne_OK4-VIWLpVTl6UNqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.201.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3b:84:11:dd:b7:a0:47:53:90:33:31:e9:c9:ff:13:59:f3:
57:93:4e:6e:ca:79:b8:58:43:65:c7:21:95:4f:14:06:ad:61:
f4:41:a9:20:9b:ab:ea:f7:6d:84:83:97:49:f5:94:0e:e0:fd:
61:41:11:08:b2:8d:e1:20:08:e7:92:1f:77:b7:49:d3:6d:20:
cb:3f:03:c8:42:3a:17:bc:05:93:4d:87:36:36:61:90:b7:a7:
2e:70:39:c9:34:ff:22:4d:63:83:5f:7d:ad:b5:50:da:8e:4c:
cc:fa:e1:49:ca:65:ad:7d:a3:e8:36:08:61:a4:c3:2d:79:89:
44:6b:92:32:4a:20:58:50:02:36:a2:55:56:5d:75:fb:c3:2f:
4b:69:73:be:89:da:93:ab:8a:40:3c:76:66:dc:c1:06:13:5c:
3f:82:bf:51:2c:23:4d:5b:8c:a3:53:5e:8e:74:7a:80:c7:cb:
2e:38:9d:bd:fd:35:13:f9:52:72:7c:7c:b2:d5:59:c8:c6:85:
ff:20:82:8b:91:ad:71:da:f9:9d:aa:74:4b:4a:01:5f:7d:a0:
ad:e7:5e:a7:eb:bd:4b:9d:18:77:5a:87:88:2c:4d:76:13:95:
54:03:b7:37:0c:67:ae:4f:9f:7a:59:48:d1:8c:84:a1:45:27:
6b:bf:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:20:05 2025 by rpki-client