Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/4dIeA-ACycm8F4F4LABhtLaeTvY.roa
File: 4dIeA-ACycm8F4F4LABhtLaeTvY.roa (raw, json)
Hash identifier: ZRxeytOHSrh2XIUECtCV3yvFpL8GyHYxpAPUVe5I3k8=
Subject key identifier: E1:D2:1E:03:E0:02:C9:C9:BC:17:81:78:2C:00:61:B4:B6:9E:4E:F6
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 01856D7890FB88F1103FE31664DE1BDB81B7
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/4dIeA-ACycm8F4F4LABhtLaeTvY.roa
Signing time: Sun 01 Jan 2023 13:14:56 +0000
ROA not before: Sun 01 Jan 2023 13:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34271
IP address blocks: 185.98.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:90:fb:88:f1:10:3f:e3:16:64:de:1b:db:81:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Jan 1 13:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1d21e03e002c9c9bc1781782c0061b4b69e4ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:d5:a7:38:1d:e2:77:0e:05:3e:a7:63:6c:
98:fb:fb:91:79:4d:b0:d6:ec:08:20:f7:69:07:91:
fb:56:b8:e9:eb:c7:5b:98:87:9f:d4:06:c1:30:d5:
2e:e4:1f:1c:47:2d:8d:a4:c0:f7:3e:34:55:80:31:
13:31:8a:75:d4:9a:6d:58:45:67:8d:36:b0:19:dd:
af:9c:cf:f3:69:67:80:37:0a:d8:51:d0:9f:e0:98:
e2:0c:05:6c:8b:b7:2f:7f:e0:3f:9e:97:ee:5d:c7:
c5:be:91:2f:fa:26:27:43:43:27:36:76:35:c1:01:
0b:c7:f6:d5:f6:94:fa:dd:e1:ae:7b:7f:46:fc:77:
5c:31:b1:07:f9:1c:88:95:94:c6:da:a0:f1:a8:41:
22:af:4d:b4:e0:58:a0:5b:1e:5f:96:3b:be:3c:34:
0b:81:c1:f0:92:c5:80:39:69:75:0a:c8:79:f5:33:
d6:9f:d6:75:ed:30:52:62:99:34:7e:5e:a4:7d:15:
31:92:28:a5:4e:b7:e5:a6:5e:ee:31:6c:8c:41:0e:
ea:f7:fe:dc:04:e0:f7:c1:2d:11:15:90:e7:65:00:
a9:a2:76:6c:18:1d:63:eb:b1:0a:36:0e:01:5d:f0:
0e:b8:39:0d:f8:43:15:e3:27:b5:2a:5e:ad:29:f2:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:1E:03:E0:02:C9:C9:BC:17:81:78:2C:00:61:B4:B6:9E:4E:F6
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/4dIeA-ACycm8F4F4LABhtLaeTvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.28.0/22
Signature Algorithm: sha256WithRSAEncryption
07:f0:a6:0c:3c:27:66:ea:48:bd:bf:13:69:95:95:04:ec:fd:
72:10:ef:8b:cf:74:0f:09:d8:dc:f9:f7:90:cb:8a:da:11:42:
e7:66:c0:de:e5:30:94:49:4e:7e:2e:bc:7f:24:50:b6:30:ac:
dc:7e:1f:b8:1c:79:73:54:af:e9:cf:49:8c:c8:b9:10:1c:16:
e1:2a:18:13:51:66:3f:61:f0:fb:57:85:59:88:c0:61:c7:02:
39:45:c9:03:8e:3d:7f:e3:8d:e9:bf:30:61:c8:da:07:35:d6:
1b:13:ab:3b:1b:8e:c1:ba:b0:85:dc:04:39:4f:a3:24:7a:88:
c1:64:d2:0d:8d:b7:3b:79:a0:4a:ee:33:3a:9e:8c:be:9e:81:
ae:da:4a:58:7b:a9:a0:b8:a7:b6:8a:fc:c7:31:5f:b0:f7:f3:
7e:77:ab:3f:04:bc:1d:27:51:b5:17:0e:66:e3:73:af:9e:39:
af:5b:80:d0:bd:8b:15:29:f4:d4:e8:5b:d4:57:ef:90:03:ef:
1d:14:0f:80:e4:b8:d6:d7:2d:80:24:f6:95:c4:25:9c:8b:aa:
32:ca:fa:15:6f:ea:5b:11:18:a1:2d:ee:75:c0:b1:f4:54:d1:
b0:1a:69:01:a0:cd:de:d5:19:36:3d:55:5a:38:14:75:27:7e:
a3:7d:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:16:53 2025 by rpki-client