Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/nmHB9hZStxaAx3mUsDG3N6a2YLc.roa
File: nmHB9hZStxaAx3mUsDG3N6a2YLc.roa (raw, json)
Hash identifier: acJmXnWeWRXP5PLWfkkgn4ZfjP+M94ljvleP1DlomKw=
Subject key identifier: 9E:61:C1:F6:16:52:B7:16:80:C7:79:94:B0:31:B7:37:A6:B6:60:B7
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 08946D6E
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/nmHB9hZStxaAx3mUsDG3N6a2YLc.roa
Signing time: Sat 01 Jan 2022 03:51:03 +0000
ROA not before: Sat 01 Jan 2022 03:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209251
IP address blocks: 195.168.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143945070 (0x8946d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 03:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e61c1f61652b71680c77994b031b737a6b660b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:9d:ba:4c:57:bd:55:0f:65:02:31:49:58:
a8:7d:63:14:40:75:ec:e0:95:9f:3f:1d:d6:2b:6a:
f1:70:fa:3d:dd:04:d9:ac:e9:18:8a:53:97:55:5a:
87:db:1a:f2:17:ed:d8:d9:da:6f:27:b8:58:e6:0e:
28:6c:d4:08:06:6b:6a:94:df:c6:48:0a:a2:c5:4f:
2a:2f:58:78:37:17:c8:f7:62:db:c1:e7:3b:0e:a8:
fc:d1:00:02:e1:23:a5:3d:ef:32:d1:4a:38:49:1a:
f5:3e:0f:c3:a8:c6:fd:32:29:53:87:a5:0e:a2:7e:
03:c3:65:f8:e9:8f:f4:53:78:cc:80:bb:19:27:bd:
01:f1:14:3d:59:66:7d:49:73:eb:2d:d5:f5:af:92:
fd:ef:d1:72:78:d9:65:33:b2:78:4c:50:fd:b6:fa:
d0:34:1c:09:fd:58:73:a5:cd:89:06:50:d7:b6:fe:
db:8e:47:79:bf:9b:72:a7:a0:6b:bd:be:57:fb:a0:
6b:af:f0:41:78:55:4d:77:9a:31:be:ed:2b:84:43:
1d:b0:09:1d:14:2a:ac:82:b8:ad:6a:bc:8f:29:4a:
cf:8c:db:81:b7:66:12:6d:1d:19:56:e5:6a:76:00:
0a:29:3e:1b:c4:1b:9d:eb:c6:fe:d1:fe:90:47:f3:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:C1:F6:16:52:B7:16:80:C7:79:94:B0:31:B7:37:A6:B6:60:B7
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/nmHB9hZStxaAx3mUsDG3N6a2YLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.218.0/24
Signature Algorithm: sha256WithRSAEncryption
82:79:52:cf:b4:4f:ba:c8:36:49:b9:07:4a:61:9a:98:f1:5e:
00:41:d9:43:d9:97:1d:a7:9f:97:d7:a3:9d:9b:04:34:16:27:
03:32:6d:eb:0b:25:e2:34:d9:fe:00:3b:ca:9b:82:53:8a:5b:
b4:64:53:10:66:7b:4c:be:35:85:20:22:ef:6b:57:b5:be:bb:
59:88:3a:24:02:27:88:42:46:b3:5d:34:4f:39:df:26:d6:1e:
ab:3f:85:63:87:ef:8f:bf:07:1b:61:b6:13:91:ee:0e:6d:98:
59:40:f5:5a:20:d6:f0:19:8e:ab:ef:7f:e6:4a:9f:9c:d5:a9:
fd:89:c2:b3:82:23:8e:14:bd:6a:ec:53:a1:c5:d3:f7:8c:40:
9a:f4:c1:29:eb:f2:e9:66:08:27:6d:8f:f8:87:f7:31:fb:6c:
57:4d:54:5e:c7:86:de:1c:8d:5a:00:da:b7:e6:91:f5:75:44:
12:02:46:0c:c8:49:f6:a6:21:8c:5f:20:94:87:fb:44:b1:64:
21:cf:15:50:4a:10:b0:e8:1f:e9:f6:1a:c7:17:96:16:9d:ca:
9f:2f:a5:29:6d:72:93:9d:73:f8:d8:11:23:7d:4a:b9:cb:d1:
9c:bc:5d:8e:1a:66:24:ea:53:a5:da:c4:57:96:0a:05:42:54:
1d:4c:31:30
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECJRtbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2Y4ODE0MDFhYmFjYzg4Yzk0MWZkZjc0MGYxYWIxNTM2ZjA1ZGJhMB4XDTIyMDEw
MTAzNTEwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWU2MWMxZjYxNjUy
YjcxNjgwYzc3OTk0YjAzMWI3MzdhNmI2NjBiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKAAnbpMV71VD2UCMUlYqH1jFEB17OCVnz8d1itq8XD6Pd0E
2azpGIpTl1Vah9sa8hft2Nnabye4WOYOKGzUCAZrapTfxkgKosVPKi9YeDcXyPdi
28HnOw6o/NEAAuEjpT3vMtFKOEka9T4Pw6jG/TIpU4elDqJ+A8Nl+OmP9FN4zIC7
GSe9AfEUPVlmfUlz6y3V9a+S/e/RcnjZZTOyeExQ/bb60DQcCf1Yc6XNiQZQ17b+
245Heb+bcqega72+V/uga6/wQXhVTXeaMb7tK4RDHbAJHRQqrIK4rWq8jylKz4zb
gbdmEm0dGVblanYACik+G8QbnevG/tH+kEfz7HsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSeYcH2FlK3FoDHeZSwMbc3prZgtzAfBgNVHSMEGDAWgBTn+IFAGrrMiMlB
/fdA8asVNvBdujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVfaUJRQnE2eklqSlFmMzNRUEdyRlRid1hiby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvZjU1MzRhLWE2MTMtNDdiZS1iNDJiLWUyZmJjM2E2ODgwMC8x
L25tSEI5aFpTdHhhQXgzbVVzREczTjZhMllMYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
ZjU1MzRhLWE2MTMtNDdiZS1iNDJiLWUyZmJjM2E2ODgwMC8xLzVfaUJRQnE2eklq
SlFmMzNRUEdyRlRid1hiby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOo2jANBgkqhkiG9w0BAQsFAAOC
AQEAgnlSz7RPusg2SbkHSmGamPFeAEHZQ9mXHaefl9ejnZsENBYnAzJt6wsl4jTZ
/gA7ypuCU4pbtGRTEGZ7TL41hSAi72tXtb67WYg6JAIniEJGs100TznfJtYeqz+F
Y4fvj78HG2G2E5HuDm2YWUD1WiDW8BmOq+9/5kqfnNWp/YnCs4IjjhS9auxTocXT
94xAmvTBKevy6WYIJ22P+If3MftsV01UXseG3hyNWgDat+aR9XVEEgJGDMhJ9qYh
jF8glIf7RLFkIc8VUEoQsOgf6fYaxxeWFp3Kny+lKW1yk51z+NgRI31KucvRnLxd
jhpmJOpTpdrEV5YKBUJUHUwxMA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:08:43 2025 by rpki-client