Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NWHkl_212pDkJgjQbQEDQbu8sps.roa
File: NWHkl_212pDkJgjQbQEDQbu8sps.roa (raw, json)
Hash identifier: o+RnLwo2K4Dii9wHPoEX/wCI+DcLTK9hTkP2AcGQK2k=
Subject key identifier: 35:61:E4:97:FD:B5:DA:90:E4:26:08:D0:6D:01:03:41:BB:BC:B2:9B
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 094CA0A7
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NWHkl_212pDkJgjQbQEDQbu8sps.roa
Signing time: Sat 01 Jan 2022 12:59:03 +0000
ROA not before: Sat 01 Jan 2022 12:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209303
IP address blocks: 5.3.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156016807 (0x94ca0a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3561e497fdb5da90e42608d06d010341bbbcb29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:fb:dd:0e:15:ba:12:de:e5:8d:9d:f6:48:
58:18:ae:c5:c0:55:7c:29:e8:2f:00:2b:6b:a2:25:
b2:5b:73:49:9a:72:26:a4:03:f9:80:3a:a5:ea:12:
ee:68:7f:3f:44:5c:25:1c:7a:e2:02:3e:e6:1f:15:
f8:60:30:e0:23:7b:3f:26:9c:90:6d:7e:ac:e6:41:
be:4e:e8:cd:85:7e:f4:07:d2:c0:45:c4:ca:c4:1d:
01:2f:b8:a3:19:bc:34:57:fc:27:7c:18:1e:66:5e:
80:c0:37:d8:8c:92:2c:53:0d:a0:74:46:93:46:d2:
e4:ee:8c:17:54:8b:3f:b1:aa:30:14:46:fd:6e:3a:
6b:46:91:50:fb:06:26:fd:d8:80:59:59:4a:e6:aa:
e6:da:1e:51:6b:71:0d:7c:da:ce:df:6c:0a:6f:f0:
85:8a:b7:9b:d5:e3:df:53:e7:43:b8:3f:f5:74:fe:
de:b8:d1:c1:01:d2:e6:86:f6:de:b8:cd:b8:02:92:
9c:95:67:51:ba:cb:cc:27:32:c7:d5:9f:a7:b6:e6:
84:df:c0:34:dd:0e:e7:e0:a7:8e:ba:8b:d1:7d:ab:
eb:21:8e:c9:bc:00:3c:d9:c2:26:bf:40:4e:09:44:
3c:f7:4b:fb:ca:79:a6:60:45:89:16:2a:69:b6:44:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:E4:97:FD:B5:DA:90:E4:26:08:D0:6D:01:03:41:BB:BC:B2:9B
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NWHkl_212pDkJgjQbQEDQbu8sps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.3.90.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8a:62:c1:e5:9a:2d:99:0b:cc:5a:f6:69:33:43:b8:92:cb:
a1:b8:96:67:42:52:8d:c7:cc:ac:b0:f6:5a:a7:99:90:61:26:
f4:34:6f:b9:b7:15:ab:78:dd:1d:b0:fe:9e:82:4f:13:01:af:
2b:f3:7b:d6:25:34:a2:5d:07:b8:ee:57:d6:bb:a7:64:0a:b4:
46:8e:98:d4:0e:fe:cd:37:eb:1e:8f:a5:d8:a3:8d:fa:3d:23:
cf:34:08:72:a7:e2:9a:d2:36:c8:67:ae:e7:61:71:cb:f6:5f:
ac:9d:c7:6a:80:b5:fa:e7:0b:84:ed:0c:13:e7:bc:1c:1a:d3:
fc:01:15:28:5c:77:45:8d:2d:c1:f5:09:83:bc:24:d1:71:84:
c7:01:ad:dc:96:d3:27:17:a3:83:71:fe:8d:c3:7f:0f:31:05:
f0:cc:c7:8b:c5:79:fd:e6:06:ed:35:3a:62:ab:4b:b6:ef:03:
19:28:48:9e:aa:66:d9:42:d2:e5:68:f0:07:a1:e8:53:bb:25:
47:d8:12:5b:64:24:33:d4:91:70:5c:ed:b4:ab:80:01:ce:93:
11:81:19:db:2c:77:8e:c6:78:29:5b:6a:cc:26:17:dc:1e:3e:
95:5c:1e:c0:1e:17:fa:f3:19:08:5b:c2:3b:e4:5b:35:49:15:
b7:bd:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:41 2025 by rpki-client