Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nvMWy_b88twxoKW7KutWkd9JzW0.roa
File: nvMWy_b88twxoKW7KutWkd9JzW0.roa (raw, json)
Hash identifier: c8wUSlDzYjJzJ9QGbrQL+yuw5zeJ7hheqHpTXl2ztd8=
Subject key identifier: 9E:F3:16:CB:F6:FC:F2:DC:31:A0:A5:BB:2A:EB:56:91:DF:49:CD:6D
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01835503BAABA2CDFA6430E9EEE5388E7326
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nvMWy_b88twxoKW7KutWkd9JzW0.roa
Signing time: Mon 19 Sep 2022 09:10:51 +0000
ROA not before: Mon 19 Sep 2022 09:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.160.0/21 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:03:ba:ab:a2:cd:fa:64:30:e9:ee:e5:38:8e:73:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 19 09:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ef316cbf6fcf2dc31a0a5bb2aeb5691df49cd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:dd:03:4c:be:1d:e0:6c:8e:2d:98:01:67:
04:7a:26:5d:96:a5:f6:a0:09:fd:b5:5e:5d:2b:52:
58:c7:97:e4:68:c7:23:7d:d0:bc:fa:21:95:85:f1:
5b:07:bd:ab:78:fd:fe:02:c2:25:85:c3:b6:2c:d2:
a7:83:11:5b:e8:82:47:6a:e3:b7:ad:1d:92:18:af:
b3:ba:c8:2d:d7:3b:d3:2b:d9:4f:9e:1e:e6:0c:83:
0f:5c:2c:3e:0d:f8:d6:85:61:fd:d2:f6:1c:df:a9:
f3:1d:cd:20:ce:cf:e6:f1:05:fd:18:cd:45:c9:f7:
cb:a9:82:a0:67:6e:29:b2:6d:07:74:b4:84:af:fb:
02:fc:9f:0c:67:67:06:73:a7:05:99:74:81:94:d0:
8d:90:d0:f0:46:df:10:13:ec:18:d2:68:44:56:32:
17:28:e0:17:8c:39:16:16:a9:83:b0:25:d6:3f:65:
2f:0c:13:8a:93:7a:15:5d:aa:7e:4a:3f:25:df:01:
23:62:67:30:b7:ce:2a:37:a3:51:ca:8a:38:2a:dc:
57:fa:70:b8:11:85:47:c3:d8:19:22:d4:8e:f1:40:
14:24:de:85:28:44:7d:30:62:d0:e0:48:6d:57:66:
8a:96:8a:85:97:a0:28:e4:ee:11:29:37:dd:df:b9:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:16:CB:F6:FC:F2:DC:31:A0:A5:BB:2A:EB:56:91:DF:49:CD:6D
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nvMWy_b88twxoKW7KutWkd9JzW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/21
Signature Algorithm: sha256WithRSAEncryption
49:b4:f7:99:49:09:99:19:b1:80:4f:5e:27:79:40:70:d0:bb:
33:b4:7d:a2:8e:bf:3e:96:a4:3d:7b:b1:14:6f:9b:45:a6:ae:
5a:63:37:f8:85:c5:11:35:4f:eb:9f:df:d9:d1:cb:3a:d3:1f:
d3:b8:97:c0:8e:30:2b:57:48:5d:88:fa:cf:3a:66:d6:2c:a8:
8e:67:32:69:51:fc:40:e7:8a:f8:48:30:d3:c4:00:fc:35:89:
f4:e3:bf:f2:3d:98:59:e3:43:32:96:37:3a:6b:79:5c:f0:ee:
d0:4a:98:4e:89:88:4b:ab:dd:d2:a4:a5:68:69:dd:13:95:b1:
f0:13:98:06:19:a6:ce:f3:74:93:f4:98:ff:20:1d:79:87:40:
0f:fc:d2:05:55:a4:18:ce:1f:0f:10:03:81:af:80:cc:09:3b:
57:11:56:15:8b:c1:36:6a:52:fe:a3:68:43:9e:4a:6d:96:01:
56:03:f5:b1:12:71:0a:3a:83:53:00:07:ca:42:06:3b:c8:85:
c0:37:81:9a:ba:6d:00:fc:21:cc:30:d5:df:93:84:82:2b:fa:
1b:36:71:b0:56:5a:d1:29:67:8d:eb:50:d5:51:0e:d4:ad:1b:
58:99:8c:96:b5:a7:67:4a:07:23:e0:d8:95:69:17:48:33:51:
f6:80:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:23 2025 by rpki-client