Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/nwC_9l5QH-N5uafhoSoS3ADDsgE.roa
File: nwC_9l5QH-N5uafhoSoS3ADDsgE.roa (raw, json)
Hash identifier: SIuY2rGHuFIeGW+eEzKjJRyaa0A5g9oRhzfsu6Qwhuc=
Subject key identifier: 9F:00:BF:F6:5E:50:1F:E3:79:B9:A7:E1:A1:2A:12:DC:00:C3:B2:01
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018972106E2239024CEEAC54FE9BF427F2BB
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/nwC_9l5QH-N5uafhoSoS3ADDsgE.roa
Signing time: Thu 20 Jul 2023 06:50:26 +0000
ROA not before: Thu 20 Jul 2023 06:50:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 192.109.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:10:6e:22:39:02:4c:ee:ac:54:fe:9b:f4:27:f2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jul 20 06:50:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f00bff65e501fe379b9a7e1a12a12dc00c3b201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:e1:bd:e6:e5:06:9f:f8:0f:26:5f:15:1a:
23:ba:fa:f0:8a:81:67:79:d6:f5:6f:bb:7f:e2:b0:
00:33:f9:b2:c1:09:05:74:e8:87:d7:b7:2b:09:f8:
8b:33:35:e9:a4:cd:03:69:3e:4d:55:9b:f7:ed:12:
32:e6:52:f9:52:c1:3a:38:17:6b:2d:48:71:5a:6c:
ea:a7:84:55:63:48:b1:fc:5b:54:64:e8:eb:fd:50:
ac:7c:39:a2:d0:ef:4e:fb:d4:95:61:4c:86:0b:04:
0f:b1:a2:97:9b:d2:33:7d:ea:9a:16:da:ae:70:2a:
06:ba:8a:f3:57:0d:bd:85:54:0e:ee:d4:3c:b8:3b:
73:ea:a3:c4:85:bb:bc:00:00:82:13:19:28:9b:cb:
0b:b9:59:c6:1b:6f:f6:46:57:3f:e6:d8:f6:2e:10:
b9:33:df:b4:13:4b:29:53:f9:12:61:4d:36:8a:72:
63:ac:c6:ae:71:20:e8:db:00:28:1e:2a:61:37:5c:
56:5e:19:c7:9d:54:fe:8a:d3:77:86:a3:2b:c4:78:
bb:a6:d4:76:3c:03:29:41:48:fe:ae:43:8c:2e:7d:
94:8e:85:be:0f:7e:97:2e:86:51:41:c2:87:90:fb:
7e:cf:9c:e9:c0:f6:64:2f:c4:7f:b3:10:70:04:13:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:00:BF:F6:5E:50:1F:E3:79:B9:A7:E1:A1:2A:12:DC:00:C3:B2:01
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/nwC_9l5QH-N5uafhoSoS3ADDsgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.201.0/24
Signature Algorithm: sha256WithRSAEncryption
15:31:70:d1:2c:79:1e:d7:87:f0:bc:d1:ed:e6:a2:bd:1e:8d:
91:55:2a:c9:ce:94:fd:72:af:7a:6c:31:a3:a5:4d:1e:b4:4b:
19:e6:53:cb:30:51:a1:73:bc:ac:b1:62:f2:ea:e9:ca:6e:95:
6f:d6:18:7e:38:08:52:a2:99:65:f7:ce:23:9e:23:06:3a:d6:
54:3d:a5:07:d4:52:0e:6c:5a:79:c8:4e:e4:89:aa:2f:a6:bc:
8a:9a:60:06:79:f6:93:9f:85:b2:c9:c2:29:91:90:55:88:bd:
d3:41:aa:2c:52:63:95:71:f8:9a:c9:c7:c4:65:5a:a2:19:8d:
b2:53:1e:fc:b6:87:d5:d7:dc:00:5c:97:82:97:8b:12:9c:55:
6d:42:61:d6:bb:02:ae:e8:03:52:00:73:c7:46:53:e6:86:a3:
d6:73:92:c6:6f:9a:64:48:52:2b:06:93:9f:c2:d7:a1:ea:66:
59:ac:03:1c:0c:8e:90:13:5b:61:2a:e1:79:e9:ef:38:3a:47:
9e:9b:8d:3f:d3:64:7c:3b:b6:9c:8b:26:f9:ce:9d:81:ad:67:
46:62:f1:27:63:7c:d6:be:b9:18:21:6c:1c:e9:ba:c4:6c:4c:
79:55:0c:d1:80:e6:cc:3d:20:9c:96:5e:46:fb:d6:df:69:e0:
26:2a:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:40:50 2025 by rpki-client