Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NpFx8Jfx3F3K95ITabxfutfZ9EQ.roa
File: NpFx8Jfx3F3K95ITabxfutfZ9EQ.roa (raw, json)
Hash identifier: PcEAU0MjNH05/tjgdpEL8SRL6sm8nC7sI8Rh4K3Yi3w=
Subject key identifier: 36:91:71:F0:97:F1:DC:5D:CA:F7:92:13:69:BC:5F:BA:D7:D9:F4:44
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 04E89BE3
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NpFx8Jfx3F3K95ITabxfutfZ9EQ.roa
Signing time: Wed 13 Apr 2022 07:25:45 +0000
ROA not before: Wed 13 Apr 2022 07:25:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.239.149.0/24 maxlen: 24
85.239.151.0/24 maxlen: 24
185.95.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82353123 (0x4e89be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 13 07:25:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=369171f097f1dc5dcaf7921369bc5fbad7d9f444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:8a:6d:44:0c:ad:25:dd:8f:17:22:e1:00:
33:70:c6:f6:b1:f3:43:bf:c6:2f:75:d1:3b:b2:e9:
ed:a3:8e:49:df:f0:39:ad:32:7e:35:7c:4f:0a:10:
37:55:1a:65:64:77:b5:79:6e:22:fd:8f:e7:71:0a:
dd:00:eb:16:b8:b2:75:37:a6:c2:3b:f8:42:30:b2:
23:7c:71:8c:af:c2:45:21:a2:b9:af:d4:10:f5:b5:
f4:5a:a5:85:a3:74:c9:e8:c2:e1:06:fa:06:79:5d:
6b:97:f4:b1:7a:91:32:a8:29:c9:2e:6a:9d:d7:88:
4e:ad:20:4a:ec:49:a8:2a:f7:4f:c0:b9:72:ad:e5:
0a:db:13:a1:81:c4:b1:5a:3d:81:8b:89:13:9b:0f:
62:1c:9f:d8:c3:79:a8:a8:83:b8:a1:9f:aa:46:89:
ba:9c:98:88:da:7f:3c:d6:44:a4:d0:da:f3:f7:48:
6d:be:88:6d:b1:9e:38:d3:67:58:99:5b:ba:5a:3b:
d5:8f:35:53:a3:5c:5e:e7:ec:dc:f6:ae:64:fc:32:
dd:91:23:5a:c4:8a:ca:7f:61:be:22:f3:ca:06:e1:
e5:ab:36:08:4e:38:7d:c2:ce:98:33:3e:b5:14:f5:
c7:5c:24:47:04:70:37:0a:87:66:54:6b:3b:d9:ad:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:71:F0:97:F1:DC:5D:CA:F7:92:13:69:BC:5F:BA:D7:D9:F4:44
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NpFx8Jfx3F3K95ITabxfutfZ9EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.149.0/24
85.239.151.0/24
185.95.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:59:1b:6f:ee:95:5c:bd:81:13:c1:2c:b7:fc:c4:01:de:dd:
14:2a:d7:ac:b7:4b:24:6b:d3:a6:e9:3d:e0:2f:62:e3:50:d4:
b7:9c:dd:75:8c:79:ed:1f:71:41:ac:87:96:0d:d4:45:08:b1:
4a:d1:a5:e1:9f:a8:80:23:cd:a6:ae:20:6a:0c:a7:08:f9:ed:
e4:a3:db:51:d7:6f:c3:f0:e7:34:d4:58:95:f8:30:be:dd:80:
81:16:11:4b:23:be:83:64:f8:02:60:3b:de:b8:13:3a:03:31:
ff:e4:56:24:fd:76:f2:d7:eb:8d:71:56:3d:c6:70:75:ee:8f:
57:11:65:e9:f0:74:bb:01:32:1a:68:85:9a:35:de:4a:ac:f4:
a2:de:e0:bf:bb:29:3d:91:e8:1d:84:62:ea:f2:12:d3:79:e5:
1e:be:80:41:cc:e1:8d:b9:83:ca:7c:2a:b6:56:fc:90:77:f7:
2a:0a:22:35:de:69:18:62:d1:f7:29:ad:d6:45:82:49:2a:d2:
a7:a2:f0:92:72:9a:b0:62:e3:1e:5f:4a:fe:6d:c5:06:9f:97:
c3:5c:0a:f4:e9:16:bd:8c:c3:60:b0:bb:85:8e:47:d3:0d:9a:
90:ca:82:06:9d:7b:c5:44:6d:71:6a:c6:e1:8f:6b:d7:69:53:
e4:b7:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:09 2025 by rpki-client