Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/nOZPQla4hBGPATFsfmNQq_-5FFM.roa
File: nOZPQla4hBGPATFsfmNQq_-5FFM.roa (raw, json)
Hash identifier: RHSBUt8p4Idl08k1u+K1ZZI9JpMHIKoU0G9y3gKCEQI=
Subject key identifier: 9C:E6:4F:42:56:B8:84:11:8F:01:31:6C:7E:63:50:AB:FF:B9:14:53
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0271590D
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/nOZPQla4hBGPATFsfmNQq_-5FFM.roa
Signing time: Thu 12 May 2022 09:10:38 +0000
ROA not before: Thu 12 May 2022 09:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 80.94.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40982797 (0x271590d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: May 12 09:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce64f4256b884118f01316c7e6350abffb91453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:25:3d:b0:7a:20:ea:2b:57:72:2b:45:7d:
fc:05:da:a1:ed:dc:2e:54:ca:43:28:2d:ff:72:f9:
e6:87:37:94:3d:a3:55:5f:98:1d:2c:8e:b5:a2:c4:
b5:7d:63:55:8b:e2:f3:91:63:73:1a:b2:88:d4:dc:
1a:25:3c:2f:f9:ae:a8:3b:fc:d7:1d:57:7c:f2:7a:
36:79:e7:84:01:a5:0d:65:8f:d0:25:68:f4:e2:e7:
41:56:a5:0a:f6:9a:f5:47:50:cf:33:33:a0:60:72:
2e:a8:1d:c4:61:6a:91:d1:6b:42:72:9a:de:d1:03:
cc:97:45:d4:e5:e3:39:c9:ec:f5:03:99:c9:a1:ce:
4d:dc:11:66:96:a9:58:2c:ea:9d:2b:7e:b0:63:31:
6b:32:83:c0:95:b2:02:33:26:3f:8c:d9:a2:2d:d4:
bc:ae:72:a5:f0:bd:17:ad:23:71:d8:26:79:ed:b1:
40:91:a5:23:dd:ac:22:5d:61:fc:89:14:81:57:b5:
dd:20:df:95:b5:b0:45:ca:28:65:8a:19:8f:5f:2f:
c1:95:87:32:11:32:d5:c9:65:5c:69:09:30:50:67:
73:2d:b7:51:18:cd:63:76:ca:b0:39:0e:5c:28:a9:
dd:ef:9a:95:14:a8:a2:ed:bc:ee:78:f7:b8:6c:0b:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E6:4F:42:56:B8:84:11:8F:01:31:6C:7E:63:50:AB:FF:B9:14:53
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/nOZPQla4hBGPATFsfmNQq_-5FFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2e:55:d0:4c:17:c0:0f:a3:73:fa:aa:b1:f6:bd:20:b4:b2:
bf:5e:b9:55:db:06:86:cd:23:ff:10:a2:dd:cf:66:b0:59:2e:
59:24:cd:b0:84:9e:9b:46:8d:55:81:5a:ca:5b:a3:57:ae:c7:
d3:18:2d:c0:12:53:b1:b5:b7:53:ea:ed:ba:03:e6:99:a3:e3:
8a:bc:a0:ea:9e:83:0d:f7:ff:86:c9:cb:26:d2:04:c1:ed:98:
ec:6f:e9:40:f2:69:e6:1c:8b:d9:6b:9e:65:a9:7d:06:f3:70:
7f:ad:ea:60:9a:23:8d:fc:5c:d4:13:2b:ab:1e:31:50:10:09:
a3:de:34:1e:38:22:3c:3b:ee:2e:c4:04:b0:0f:1a:c3:3d:b0:
9d:41:3b:c9:53:b6:f3:c2:46:19:aa:75:0d:9a:10:8f:16:51:
cc:97:21:c1:12:38:cc:cc:19:09:aa:b6:b9:f2:1b:f6:c3:4c:
cd:f2:3c:b7:b5:50:fd:0f:2e:64:88:eb:85:4a:59:77:42:31:
b8:6c:f2:80:43:ee:5c:8e:d7:b5:e8:b5:7a:a1:b7:f4:47:48:
29:67:93:70:b1:d4:a0:19:f2:86:a9:17:99:65:13:9e:d0:17:
6e:61:22:c5:35:2b:5e:4e:c5:3d:63:ef:a5:a5:44:9d:e5:d4:
c3:38:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:23 2025 by rpki-client