Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/nAY7RNv3Whbv7nDp00AOSYVA9ic.roa
File: nAY7RNv3Whbv7nDp00AOSYVA9ic.roa (raw, json)
Hash identifier: Kx8N3HNQtCsqM/xlJzC0VkonmbGcx0eZmozhSz7gVjU=
Subject key identifier: 9C:06:3B:44:DB:F7:5A:16:EF:EE:70:E9:D3:40:0E:49:85:40:F6:27
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 098A14C6
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/nAY7RNv3Whbv7nDp00AOSYVA9ic.roa
Signing time: Sat 01 Jan 2022 04:03:19 +0000
ROA not before: Sat 01 Jan 2022 04:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9063
IP address blocks: 153.96.57.0/24 maxlen: 24
153.96.183.0/24 maxlen: 24
153.96.139.0/24 maxlen: 24
153.96.137.0/24 maxlen: 24
153.96.136.0/24 maxlen: 24
153.96.138.0/24 maxlen: 24
129.233.211.0/24 maxlen: 24
153.96.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160044230 (0x98a14c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 04:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c063b44dbf75a16efee70e9d3400e498540f627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:a4:1b:b2:13:00:48:67:19:3a:9a:47:65:
bf:3b:1b:7a:71:cf:28:9a:52:d8:51:86:12:d2:46:
61:95:a7:ae:af:d1:2b:5e:d9:72:f1:1b:2c:a8:f9:
6a:d0:b0:b6:ae:d4:4b:44:0f:89:70:5e:bb:f1:9d:
84:2b:2b:78:ed:d3:1b:b7:5a:aa:13:a3:90:14:b2:
b2:85:20:c8:b6:c0:5d:2e:3b:c9:d6:19:e8:ed:ec:
ec:b3:5f:35:a0:c4:f7:6e:49:29:ab:35:a2:b8:9c:
8d:4e:16:28:fa:3c:55:54:0a:02:56:b7:c4:9f:44:
52:f5:4f:4d:e4:0a:6f:bd:bb:18:4b:e3:c7:5d:eb:
56:42:9c:a0:55:f1:4b:d8:aa:31:11:00:5e:27:d9:
a0:20:a2:5a:a0:53:eb:66:b6:4c:e8:b2:06:d3:e5:
f1:dc:b8:91:e6:ca:57:20:fc:10:4a:ba:c4:bf:fc:
88:95:b4:5c:00:c7:96:e2:ea:20:39:f1:77:95:48:
ba:73:12:32:f6:7e:8a:ce:11:eb:40:33:d4:f3:c6:
bb:8f:c7:5a:9c:83:d4:90:fb:0e:c4:84:26:e1:18:
59:13:36:cd:5e:3c:43:2c:fc:7c:6a:0c:83:76:a6:
58:da:ca:3d:5b:03:1d:9b:0c:67:09:0c:50:82:b6:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:06:3B:44:DB:F7:5A:16:EF:EE:70:E9:D3:40:0E:49:85:40:F6:27
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/nAY7RNv3Whbv7nDp00AOSYVA9ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.211.0/24
153.96.50.0/24
153.96.57.0/24
153.96.136.0/22
153.96.183.0/24
Signature Algorithm: sha256WithRSAEncryption
60:72:59:36:27:f7:0c:3d:6d:64:c8:a2:a2:eb:9e:e2:90:fb:
e1:3d:16:3b:d8:3a:31:76:7d:47:1c:86:e4:c5:ca:2e:05:c3:
7f:33:2c:9a:2d:64:e9:c9:70:4a:05:cf:92:f8:11:a8:cf:19:
f8:25:85:aa:dc:68:38:63:13:c2:17:bd:55:e5:e2:14:de:3d:
8b:3d:77:83:14:1e:7e:0c:39:32:82:3f:91:a9:07:fb:ea:31:
50:81:6a:5c:03:b1:ca:3e:19:fe:0e:0c:74:9c:e1:62:6b:63:
ae:e9:7b:3d:f0:ad:88:89:ab:8f:20:e3:25:1f:e5:88:23:10:
72:d9:89:4f:a9:0b:61:49:3a:de:51:56:85:39:24:1d:05:83:
15:e2:bb:84:96:07:9e:e2:6e:54:a7:18:58:a2:32:98:2c:73:
16:88:ba:48:49:65:6e:4f:2e:27:15:80:49:f7:f1:90:d4:75:
07:c3:82:69:b7:47:cf:63:1c:0e:63:19:27:65:fb:0e:3d:4b:
e4:89:28:12:11:be:08:d3:b3:5f:56:69:ba:c3:d3:a7:e4:c6:
49:03:5b:3e:be:68:8c:6e:1b:61:69:26:8d:b5:8b:89:e1:5e:
8d:97:ff:5e:64:92:6d:d2:19:94:14:65:15:2f:cb:9f:f6:6f:
5e:b8:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:10 2025 by rpki-client