Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/NQVIl4eH23CvzsmFriogvVDADGg.roa
File: NQVIl4eH23CvzsmFriogvVDADGg.roa (raw, json)
Hash identifier: 1Q8PBTfKLTydGH5aQUk2X1Uan5n1esD1RvSghBoEp5k=
Subject key identifier: 35:05:48:97:87:87:DB:70:AF:CE:C9:85:AE:2A:20:BD:50:C0:0C:68
Certificate issuer: /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Certificate serial: 0D99BE19
Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/NQVIl4eH23CvzsmFriogvVDADGg.roa
Signing time: Sat 01 Jan 2022 12:05:49 +0000
ROA not before: Sat 01 Jan 2022 12:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41038
IP address blocks: 185.187.124.0/22 maxlen: 22
2a0b:a180::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228179481 (0xd99be19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Validity
Not Before: Jan 1 12:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=350548978787db70afcec985ae2a20bd50c00c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:8b:6b:56:b8:62:fe:f8:9a:76:86:67:f2:
3e:0b:b4:c1:8c:e4:23:ca:ee:b5:23:b7:49:cd:ae:
6a:e6:db:13:09:3d:75:71:d0:17:28:89:35:75:44:
5d:59:e1:fb:2b:79:01:5a:fe:4e:37:98:f3:82:f3:
f2:1b:e0:f7:a0:c1:7d:45:1b:da:1d:d8:ee:3d:45:
c2:7d:89:62:f1:9b:83:fb:7a:ae:8b:36:f7:83:c1:
c2:83:ff:3d:b6:9a:7a:30:0f:34:67:1e:c0:f8:b3:
b4:f5:1e:ef:11:a7:e0:96:f1:62:45:8f:6b:c0:2a:
96:79:70:b5:39:c2:f8:fc:07:7a:72:8e:e1:0b:a7:
24:4d:63:36:d3:54:48:eb:84:dd:45:07:54:29:55:
94:44:96:62:2e:bc:68:d3:08:99:15:f7:09:19:b5:
b6:95:66:f5:2b:7f:15:3a:c2:0f:36:31:1c:31:a4:
55:5d:9e:0c:99:14:8d:71:27:76:74:af:bc:4c:fd:
a7:0b:2b:1f:d9:69:68:00:97:e4:07:ca:78:77:99:
f6:30:84:92:2e:37:31:22:2e:d6:86:f3:f7:f3:79:
26:4f:94:0c:ce:14:59:30:e1:23:33:29:69:db:84:
6a:60:a2:ef:2b:53:a5:8e:15:3f:1c:43:f9:a5:00:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:05:48:97:87:87:DB:70:AF:CE:C9:85:AE:2A:20:BD:50:C0:0C:68
X509v3 Authority Key Identifier:
keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/NQVIl4eH23CvzsmFriogvVDADGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.124.0/22
IPv6:
2a0b:a180::/29
Signature Algorithm: sha256WithRSAEncryption
38:3f:9a:2f:d1:59:e7:8f:d3:c1:56:89:f4:1c:11:a6:4a:fb:
dc:35:78:b8:5c:98:82:e5:8d:e7:36:cf:af:13:70:8f:05:85:
e6:ea:cd:c8:aa:7d:76:bc:df:51:f1:a6:be:7d:62:f0:39:b4:
88:fa:3b:7b:4b:33:c6:4b:2f:69:fd:d0:95:a0:39:d5:22:43:
24:59:87:05:82:e8:0f:ee:79:54:6b:4f:2b:90:93:20:57:f2:
87:9e:5a:2b:c1:7b:b4:61:5c:95:db:52:1e:6d:e1:a0:72:4f:
a6:c5:37:9d:74:14:8e:70:c1:49:3e:42:a4:de:8b:30:ea:ed:
bd:fc:04:06:27:3a:59:f2:2c:90:00:dc:fc:8a:fb:7f:06:a0:
76:9e:31:d3:17:83:32:d8:aa:dc:15:32:e6:c5:f2:b8:2b:6e:
09:bc:eb:d1:dc:ce:fb:ac:ae:a3:5f:ed:c0:40:37:f9:9b:78:
d6:e4:95:66:f7:95:05:e4:0b:0a:cb:bc:8d:25:45:8c:e8:fb:
b8:f2:a7:88:3b:86:6c:0c:2c:f5:fa:76:3b:28:21:9f:ee:53:
db:22:cb:db:4d:3c:a0:f1:76:b0:8f:0a:56:ba:d3:8e:1d:63:
c4:24:e3:c5:ea:f8:42:2b:74:a7:f5:ed:d3:e0:a1:43:eb:80:
ba:36:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:55 2025 by rpki-client