Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/NHKQ3K8Q2pzMVjcRCTlwowmb_2c.roa
File: NHKQ3K8Q2pzMVjcRCTlwowmb_2c.roa (raw, json)
Hash identifier: wuyN8ICkYQUyicQX08i09dMEEjfkkZ3HvKu1onG6zBk=
Subject key identifier: 34:72:90:DC:AF:10:DA:9C:CC:56:37:11:09:39:70:A3:09:9B:FF:67
Certificate issuer: /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial: 019568B9
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/NHKQ3K8Q2pzMVjcRCTlwowmb_2c.roa
Signing time: Thu 03 Mar 2022 09:26:39 +0000
ROA not before: Thu 03 Mar 2022 09:26:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211090
IP address blocks: 91.239.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26568889 (0x19568b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Validity
Not Before: Mar 3 09:26:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=347290dcaf10da9ccc563711093970a3099bff67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:f8:50:42:3a:59:11:5e:77:1b:97:c2:f4:
38:44:29:5f:32:d8:9b:35:ca:bd:f2:da:d2:d6:2d:
5d:a8:38:ae:30:68:d9:c2:f1:2f:70:59:94:c0:a2:
e5:28:2f:1d:e2:bc:92:38:5c:f4:b8:40:24:44:44:
9e:2f:a9:2e:c1:43:3f:7f:ba:b3:2b:10:3b:20:0c:
e2:ef:3e:ed:d0:d4:10:a3:e9:25:2b:1a:43:fe:be:
a5:a5:56:af:54:9a:55:9d:1a:ed:22:8a:a5:bf:3d:
10:06:b8:44:4f:a4:91:63:15:04:06:b1:bf:b9:9c:
ec:cd:a3:a9:f2:4c:a3:58:c0:fe:63:87:09:39:61:
0b:ed:7d:af:d7:2d:f0:03:af:0b:38:ca:af:8f:4f:
14:02:09:0c:e0:3e:d2:1a:17:7a:5d:52:f5:e0:64:
f9:8d:96:d8:ad:8e:19:dc:7b:b1:48:70:4a:56:94:
df:3f:9d:09:b9:81:cc:dc:56:b3:62:4f:2c:d8:e4:
1b:af:72:d7:e6:09:8e:99:9a:98:53:b2:8e:5d:21:
c8:49:0b:59:f9:c1:b7:ae:72:16:20:28:3c:94:ac:
7e:b2:24:02:f0:3c:7b:54:52:01:55:49:a1:c6:a1:
0c:06:d3:39:80:81:bd:10:bc:38:ac:6a:41:7f:b3:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:90:DC:AF:10:DA:9C:CC:56:37:11:09:39:70:A3:09:9B:FF:67
X509v3 Authority Key Identifier:
keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/NHKQ3K8Q2pzMVjcRCTlwowmb_2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.119.0/24
Signature Algorithm: sha256WithRSAEncryption
35:97:90:6b:77:a5:56:7c:1c:31:a2:fe:bf:2e:00:24:93:ab:
9c:40:3e:6b:0c:ae:15:6c:9b:f2:de:9b:0f:f7:47:b5:69:40:
9d:c6:56:3d:d8:17:91:41:15:30:5f:6f:a5:fe:3e:dc:49:e9:
19:04:9d:f3:5b:73:65:cf:36:d7:2d:50:c2:da:50:e7:2e:6c:
e0:79:ce:a7:1f:ed:ec:a0:1e:91:d2:05:55:83:5c:7a:ae:45:
60:b5:7b:f4:52:82:f4:ae:16:2d:f6:4f:35:ac:d8:d6:e0:46:
ec:50:03:cb:5b:c7:61:d6:10:4d:5b:f5:16:a1:62:53:d6:0c:
85:15:dc:4b:09:e7:f2:ee:2b:9a:d9:b0:b0:3c:fa:8d:30:8f:
7b:87:58:38:02:88:6e:13:f5:78:06:26:1f:dd:95:b2:8f:71:
0b:cb:68:35:04:18:8e:1e:7d:4a:bd:6b:48:8d:08:70:37:90:
95:01:8c:d5:29:70:80:bf:43:2c:b2:1f:d5:e4:2e:d7:9b:07:
67:10:4b:ec:a1:4b:ff:92:bf:1d:3e:07:56:d6:45:85:85:36:
02:c7:c1:bc:a6:39:57:23:70:18:df:87:46:1f:b0:d5:9f:72:
a4:27:77:85:32:1a:df:8a:a0:06:10:18:64:50:09:37:81:ac:
ed:8a:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:26 2025 by rpki-client