Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/NyjEF9FzSa7dITNpHdzMwp4IQw4.roa
File: NyjEF9FzSa7dITNpHdzMwp4IQw4.roa (raw, json)
Hash identifier: HPBBrteA/fy9QA8Irwwj/1n0ceMu3A+HtwC0sSkRSKc=
Subject key identifier: 37:28:C4:17:D1:73:49:AE:DD:21:33:69:1D:DC:CC:C2:9E:08:43:0E
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 02C9BF76
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/NyjEF9FzSa7dITNpHdzMwp4IQw4.roa
Signing time: Wed 15 Jun 2022 11:52:44 +0000
ROA not before: Wed 15 Jun 2022 11:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13237
IP address blocks: 185.160.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46776182 (0x2c9bf76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Jun 15 11:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3728c417d17349aedd2133691ddcccc29e08430e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:b7:18:ae:5b:2b:55:1e:45:f5:66:f7:78:
46:be:fe:90:92:08:2a:75:8d:44:30:38:4d:c2:96:
1e:be:46:96:56:45:e5:00:ef:73:9b:b6:e0:ba:90:
c8:10:29:53:67:90:17:3b:2f:3f:0f:6b:37:dc:b1:
81:14:53:1d:8c:b5:2d:aa:8b:ef:52:a5:13:24:f9:
09:a3:4a:36:36:6d:54:8d:6b:3a:33:66:1a:62:8b:
74:50:2b:28:02:85:fc:d0:e5:a9:3f:8f:60:43:38:
d7:aa:e4:60:14:80:60:f0:62:6f:5a:6c:e9:02:8d:
d0:4b:be:8b:70:3f:cf:22:3f:5d:b4:de:b8:0d:f2:
00:6b:05:cd:b6:1b:df:ad:47:44:e7:02:53:c1:f0:
a8:38:c5:b8:55:bb:e2:54:f0:37:28:0f:fb:25:42:
4e:4c:ca:05:de:f0:a3:ec:90:b4:40:ed:69:a5:c4:
7b:81:82:26:9d:5e:01:6f:f8:eb:67:49:0b:e0:55:
c4:06:eb:71:3d:6b:d2:4a:9b:8d:3e:e4:d9:65:5b:
9b:bc:9f:03:ff:b5:eb:4f:43:d0:aa:15:ef:92:ac:
31:46:0e:d0:40:22:99:fa:fb:9b:83:25:12:0b:73:
de:a5:cd:13:75:0a:ef:2d:6b:70:9c:8a:7b:6d:a9:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:28:C4:17:D1:73:49:AE:DD:21:33:69:1D:DC:CC:C2:9E:08:43:0E
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/NyjEF9FzSa7dITNpHdzMwp4IQw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
54:2e:e9:a0:d1:bd:f2:03:17:71:8c:8d:a9:dd:fc:51:4d:7a:
ba:5a:0f:80:56:69:03:f5:79:a2:96:b5:84:e1:67:67:26:9e:
a1:f6:5e:0b:47:3e:52:f0:12:3b:5e:0d:5a:a3:b2:1e:ba:e5:
b9:28:59:f8:4a:ce:1f:cd:be:29:51:27:ca:c2:33:9b:1d:4f:
fb:61:cd:a1:1f:90:3b:b3:ee:6b:65:15:79:13:4f:6b:8f:d4:
ac:f0:0e:40:bf:21:ea:ab:3c:97:5b:02:1b:a7:9c:f5:21:57:
ef:5c:00:69:10:94:4d:6c:f9:e4:c8:ce:db:03:8e:e5:60:b1:
05:18:5d:c2:6a:16:e1:b5:9e:01:24:ff:d8:30:20:b7:7f:25:
3d:ad:42:53:10:10:1d:06:f2:49:95:94:b2:4b:36:a4:6c:33:
a1:f1:6f:d4:f2:ab:8d:e8:87:dd:52:d5:47:b7:17:43:f5:12:
44:05:10:c5:c0:08:7e:1c:0f:55:3a:7a:93:bf:ce:17:ea:7c:
6b:74:45:ef:90:97:35:07:80:3c:4b:85:ac:fd:36:59:28:22:
82:e1:92:ca:7d:19:40:37:b1:85:d2:d3:46:48:ac:f5:40:d3:
b5:ea:09:ad:24:7f:7f:33:b9:b7:fe:27:ee:8c:4f:c1:6d:0c:
c7:4d:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:04:57 2025 by rpki-client