Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/NbQDKDHW4OCzK0atSCgLUlG9SG0.roa
File: NbQDKDHW4OCzK0atSCgLUlG9SG0.roa (raw, json)
Hash identifier: kjuiQumRCU68NNu1F06HzE/ccoGbC2nzap11Wz3JJQI=
Subject key identifier: 35:B4:03:28:31:D6:E0:E0:B3:2B:46:AD:48:28:0B:52:51:BD:48:6D
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 0198F621
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/NbQDKDHW4OCzK0atSCgLUlG9SG0.roa
Signing time: Sat 01 Jan 2022 12:57:29 +0000
ROA not before: Sat 01 Jan 2022 12:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1257
IP address blocks: 94.126.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26801697 (0x198f621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Jan 1 12:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35b4032831d6e0e0b32b46ad48280b5251bd486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:f4:73:fb:86:b4:70:cb:6b:6b:f4:22:12:
57:c5:35:d4:0e:a3:be:35:ab:ce:9b:9e:f9:b4:f1:
34:a8:22:dc:f5:e9:65:c2:5c:c8:f4:0b:cb:2f:1a:
ff:63:eb:23:e9:d1:61:32:6c:c7:32:a1:6f:78:b5:
67:1d:55:4d:14:22:3d:1e:a4:ac:55:b2:a8:ab:df:
75:88:5d:4c:25:19:dc:6e:00:8a:dd:42:bc:03:3b:
e2:f0:07:5c:e3:7b:7f:cd:e6:17:4e:8d:69:0d:a3:
d1:f2:8f:2d:0f:93:72:cf:00:11:2a:0f:6e:e8:db:
f3:7b:86:2c:1a:91:26:fd:60:85:1a:13:af:8a:64:
11:f7:bc:d5:a1:2c:9c:b4:d4:21:77:d3:8f:6b:d4:
b7:ec:4d:37:a6:77:eb:68:66:d4:57:aa:76:fa:06:
b8:44:9c:f9:1c:a4:0b:5f:ed:52:40:63:05:e6:69:
12:5e:96:c4:2e:9b:58:0c:35:c5:2f:c8:8e:c1:a3:
4d:b6:eb:87:ee:2d:28:23:2d:79:9f:b9:89:1b:b5:
6b:bc:4f:4f:27:06:68:4f:0b:ce:03:cf:cd:d3:39:
a1:13:6f:d8:a0:ee:2c:76:77:e3:b9:9a:6d:95:9d:
89:1a:50:50:2b:53:a5:3b:78:25:65:44:e9:98:2b:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:03:28:31:D6:E0:E0:B3:2B:46:AD:48:28:0B:52:51:BD:48:6D
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/NbQDKDHW4OCzK0atSCgLUlG9SG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.224.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:a1:c2:51:10:e3:84:39:4a:7d:98:cf:0d:21:af:d3:de:2d:
3b:e5:a9:8a:99:eb:47:6c:2f:78:11:a1:c3:ae:54:91:b7:6d:
92:cc:7f:36:3f:4a:11:1c:e1:14:b1:b7:49:e5:03:3f:de:03:
a0:d8:a8:99:97:03:d9:05:9b:c9:c8:61:9c:5f:af:4d:48:3a:
7b:80:20:cd:c5:12:92:a0:c6:3a:62:bb:60:63:d4:18:8e:c7:
15:e4:3c:42:40:b9:e1:26:dd:2d:09:21:82:7d:0b:37:bb:06:
85:b0:57:96:fa:30:a1:76:53:56:9d:04:1e:8e:16:51:d7:c9:
58:d1:09:e6:f8:cb:2a:8c:f2:39:87:cd:b3:11:64:f8:93:3b:
f9:fa:70:7f:2f:de:89:27:a4:7c:bf:44:69:9f:6e:ef:c1:c6:
77:cf:ba:0b:48:9c:47:fc:fa:ab:20:c3:62:25:31:24:e1:42:
9b:be:e6:20:aa:07:94:72:33:60:ce:77:48:ef:51:75:ce:19:
61:62:97:f2:bc:06:b8:04:ae:92:d6:71:b7:f2:b6:66:d3:d9:
03:76:5c:17:d7:3d:58:76:c7:13:6c:da:9c:23:af:89:92:c4:
10:2f:f2:b1:25:2f:48:e4:64:14:16:ee:85:ec:ee:f8:19:70:
28:2b:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:09 2025 by rpki-client