Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nspcJ74jADZ7T_cbV-08Ugb0ybI.roa
File: nspcJ74jADZ7T_cbV-08Ugb0ybI.roa (raw, json)
Hash identifier: Bb5jt+mI/fW74AAK/JUulsZknK6IFvD1KE0WjK/p5Ag=
Subject key identifier: 9E:CA:5C:27:BE:23:00:36:7B:4F:F7:1B:57:ED:3C:52:06:F4:C9:B2
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5BB65D873370C1ADE89AE21DE6306
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nspcJ74jADZ7T_cbV-08Ugb0ybI.roa
Signing time: Sun 01 Jan 2023 05:54:55 +0000
ROA not before: Sun 01 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400536
IP address blocks: 5.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:bb:65:d8:73:37:0c:1a:de:89:ae:21:de:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eca5c27be2300367b4ff71b57ed3c5206f4c9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:d9:63:cc:4d:cd:9a:24:fc:85:aa:df:75:
c2:96:8e:6b:ac:b0:51:51:30:81:d5:2d:13:7a:1f:
40:d1:cd:dd:32:b8:15:0d:16:a5:ec:70:be:cb:e9:
bb:be:e2:db:ea:c3:c0:0b:26:19:de:64:e2:25:48:
9b:04:71:b0:69:02:aa:b5:68:da:bd:f2:8b:83:1d:
0d:98:ab:52:7f:74:a5:75:40:e3:6d:aa:a9:9d:9c:
6d:73:e8:db:2d:f4:05:cb:a1:af:8d:1a:0f:36:17:
ca:c4:fc:08:49:3c:b0:79:18:d3:d2:d8:27:dd:80:
0a:3d:b1:a5:d8:89:76:17:b1:42:87:00:b0:47:4b:
fd:dc:75:b3:90:77:6d:90:e5:81:be:1c:76:47:5c:
d0:b2:d3:06:fe:14:af:61:a6:5a:cd:79:35:0f:26:
b5:c6:be:47:cc:81:f6:b8:cc:42:7e:15:28:19:5d:
cb:cd:66:e2:58:72:ee:3a:b4:39:61:5b:3e:4b:2a:
d6:85:07:0d:87:ff:42:5d:4e:96:41:4b:d6:ab:3b:
32:89:3a:80:a7:08:b3:34:b3:50:05:23:ce:77:b0:
50:ec:62:29:ec:cf:26:80:3c:83:8d:4a:2b:d8:28:
bc:67:03:1d:30:7e:77:43:77:07:86:44:d3:e2:9b:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CA:5C:27:BE:23:00:36:7B:4F:F7:1B:57:ED:3C:52:06:F4:C9:B2
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nspcJ74jADZ7T_cbV-08Ugb0ybI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2a:da:2d:9a:27:94:c2:bf:d5:c4:58:89:53:16:59:6b:ee:
2f:79:65:fb:45:36:e4:aa:d7:0d:b8:9c:61:16:37:0e:a3:44:
34:9d:f5:6b:c9:ea:ad:73:68:83:79:2a:c6:9c:67:10:c8:99:
31:ea:85:da:c3:8b:15:41:2f:97:58:c6:f5:d1:96:dc:a9:02:
79:27:a2:70:c8:61:4a:19:2d:f9:07:8b:db:69:d9:fd:ee:62:
12:5c:44:5b:60:39:e4:f7:40:8a:96:4f:9e:6a:30:11:9e:1a:
c7:e7:c2:17:3c:67:ef:36:cd:c0:89:87:ac:df:fe:fb:86:01:
db:5f:4e:d5:13:32:9c:40:9c:6f:42:e5:ea:6c:64:c8:48:c9:
c1:fa:5b:0c:e6:b4:70:a0:07:79:b1:95:23:95:d7:19:3a:ca:
bd:2d:2d:dd:00:7f:ae:dd:72:2b:bc:e9:85:8e:ee:0c:18:26:
80:29:ea:b3:92:bd:e3:06:60:92:5b:30:c7:82:67:d2:95:62:
6a:2b:da:97:9a:d5:14:76:ea:e4:b9:6a:5b:09:b7:40:f4:90:
50:f9:7b:a2:81:ac:83:d8:08:f2:19:a8:64:d1:3a:3f:b1:cf:
ef:fa:3e:d7:c3:50:de:39:9a:44:bf:dc:94:4b:7b:26:dd:d0:
7a:50:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:59 2025 by rpki-client