Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/Nvik0SK6OdDC5-4A8pGc2q6nnkk.roa
File: Nvik0SK6OdDC5-4A8pGc2q6nnkk.roa (raw, json)
Hash identifier: nhIlkDbiPY3goVlagkQIaogo6ab6bELCfcFISu+0Y10=
Subject key identifier: 36:F8:A4:D1:22:BA:39:D0:C2:E7:EE:00:F2:91:9C:DA:AE:A7:9E:49
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 05A58CD9
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/Nvik0SK6OdDC5-4A8pGc2q6nnkk.roa
Signing time: Sat 01 Jan 2022 13:02:36 +0000
ROA not before: Sat 01 Jan 2022 13:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47612
IP address blocks: 195.190.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94735577 (0x5a58cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Jan 1 13:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36f8a4d122ba39d0c2e7ee00f2919cdaaea79e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:e1:36:2a:7c:4a:48:ce:58:78:14:b0:b2:
fc:be:60:c1:b3:2d:73:3b:25:9f:0c:1a:b1:f7:b9:
b4:ef:5f:1a:10:23:67:51:b4:5e:44:a8:2f:f6:7b:
ae:8c:a7:c7:9f:85:5f:f9:b4:14:1d:9b:aa:36:d3:
7a:87:10:89:ce:a8:c2:62:61:f0:6c:b2:13:cd:84:
f1:e5:3d:6a:b9:70:2f:fe:d4:15:46:d8:4a:62:d9:
b2:da:91:42:5c:3c:14:9b:45:93:14:99:34:aa:05:
9a:30:56:65:66:d2:6b:97:60:4b:27:6c:e2:dc:e1:
e4:e4:1d:69:af:98:61:b3:89:c9:72:df:e6:54:8d:
a1:7b:a0:2b:15:d3:c0:4f:ea:b7:68:4b:06:c0:42:
bc:89:3c:30:77:45:8f:8d:24:39:34:da:e2:66:92:
c8:a9:74:89:ff:21:c8:f3:73:c9:f7:56:0a:c0:7a:
22:12:db:c8:69:88:6c:87:2f:23:5f:74:d3:39:cb:
35:7b:37:9a:5c:7d:0d:f7:23:30:e1:1b:fa:54:dd:
0f:3d:1f:b6:40:dd:97:7d:6b:68:8e:c1:61:9d:3c:
ec:3c:2d:cb:80:66:87:a8:e7:e4:58:c6:66:0f:81:
44:31:04:52:d5:ce:ac:42:e4:fa:75:bf:90:b1:2a:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:A4:D1:22:BA:39:D0:C2:E7:EE:00:F2:91:9C:DA:AE:A7:9E:49
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/Nvik0SK6OdDC5-4A8pGc2q6nnkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.3.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cd:5e:03:81:95:fd:91:7b:a2:42:1c:06:c4:c8:e9:6f:b6:
3d:89:9a:b3:b6:0c:43:97:cd:c0:83:f1:d1:00:f0:c2:00:2f:
16:77:a4:0c:10:ed:2e:a5:c5:b7:7e:3e:2c:91:de:c3:e2:c8:
07:c5:02:49:fc:6d:4e:e6:c0:6d:5a:ea:3d:01:f8:14:b9:4f:
c3:98:a5:74:bf:91:f4:ec:d2:df:59:d5:ab:d8:6d:52:88:a1:
73:ff:83:8c:5e:48:76:4a:14:c2:bf:f4:6c:d9:e0:5b:60:2a:
73:37:34:e7:af:13:92:f9:78:b1:37:45:d8:8d:94:a0:44:81:
e6:8f:b7:11:84:8f:03:05:b0:fa:8c:a8:11:90:f2:c5:da:3e:
7e:50:74:a5:70:52:35:4b:47:12:44:ad:8b:0e:96:41:e8:f6:
f6:1c:00:4f:f0:d9:f0:47:ac:b3:41:51:e7:8b:5a:5a:95:62:
ed:c1:7d:03:cb:ba:11:33:40:9c:cd:ef:0e:d9:9e:d0:24:69:
29:cd:2e:05:86:1f:06:b6:d6:1a:7f:54:df:d1:14:d6:12:b6:
24:a1:a6:2f:8a:16:3c:19:be:58:58:78:d9:bf:8c:c8:ec:d1:
ba:7a:fd:a4:01:dc:ab:72:1e:6e:c5:a6:4b:7b:62:84:b4:9e:
92:ae:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:29 2025 by rpki-client