Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/nWM9QRFqtzMs4RsXl82_kA7ATDk.roa
File: nWM9QRFqtzMs4RsXl82_kA7ATDk.roa (raw, json)
Hash identifier: VFXGIi+skltxTs4G2lJXjru4TV0TwsLE3Is5nWafX4o=
Subject key identifier: 9D:63:3D:41:11:6A:B7:33:2C:E1:1B:17:97:CD:BF:90:0E:C0:4C:39
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 02CE6A
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/nWM9QRFqtzMs4RsXl82_kA7ATDk.roa
Signing time: Tue 15 Feb 2022 13:12:26 +0000
ROA not before: Tue 15 Feb 2022 13:12:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210771
IP address blocks: 185.252.6.0/24 maxlen: 24
185.252.7.0/24 maxlen: 24
185.252.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183914 (0x2ce6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Feb 15 13:12:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d633d41116ab7332ce11b1797cdbf900ec04c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:e7:d5:54:60:fb:2e:99:d3:56:2d:40:9d:
2e:e6:60:fd:44:e6:99:35:a2:24:cb:03:db:29:c8:
4c:48:0c:3f:4c:95:ee:8d:8e:64:22:7e:86:d9:64:
ca:99:f3:d0:38:72:6b:29:11:52:c1:cb:ed:c7:10:
34:c5:dd:16:6f:f4:3f:b7:68:b1:b4:06:db:69:2b:
61:da:52:3d:9e:94:e5:da:9c:b9:e9:46:17:bd:9e:
40:f1:26:3d:69:ea:d1:1c:68:30:cc:00:84:b7:ec:
a2:ff:67:5c:84:ce:04:ea:f1:7a:1c:64:41:9b:20:
47:15:f4:96:0c:b5:d7:32:c0:b6:12:0c:bc:68:1e:
36:3d:3a:72:b4:b8:7e:77:5f:75:2f:66:f9:cc:02:
cf:69:f5:0f:a9:17:f3:0c:3d:17:fa:2c:a0:0d:a2:
be:34:d7:de:d3:6c:a4:8f:00:2b:3d:c1:da:e4:a4:
f9:74:1a:2f:6b:e2:58:9d:c7:0b:50:56:e7:d6:28:
8a:1f:61:6c:fb:01:cd:8d:cf:1d:11:23:51:97:35:
6f:34:e2:90:2a:e2:a7:96:a1:23:8f:41:05:b4:24:
65:ee:ee:12:a0:66:49:f9:14:69:e4:48:35:9f:76:
47:b1:ee:97:5a:39:22:98:59:78:7f:99:63:14:11:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:63:3D:41:11:6A:B7:33:2C:E1:1B:17:97:CD:BF:90:0E:C0:4C:39
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/nWM9QRFqtzMs4RsXl82_kA7ATDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.5.0-185.252.7.255
Signature Algorithm: sha256WithRSAEncryption
aa:9f:b4:56:fb:58:7e:f7:32:92:c5:05:e2:55:65:58:57:b2:
63:27:35:2f:74:08:31:fc:9a:1e:0c:94:5d:0e:bf:9b:2b:13:
cd:73:b0:fb:87:72:d6:76:90:11:52:29:a3:05:25:53:7e:c5:
ff:3c:3b:0e:74:0e:58:da:ed:7e:a8:34:fc:ac:0c:03:a0:55:
b2:25:88:67:c2:e5:09:92:fc:2b:49:48:f0:bb:44:6f:0a:ce:
02:43:49:8f:d4:4e:35:f3:61:db:49:12:03:da:05:c8:db:86:
08:92:c3:1f:2d:0a:e0:fd:0a:2f:30:f9:07:47:0c:93:f2:75:
06:b1:57:84:da:94:86:a5:48:93:f7:3c:6d:22:e0:bb:50:ff:
3d:bd:65:8e:0a:79:c9:f6:e3:54:f2:ef:08:d7:25:e3:d8:0c:
1a:d9:48:6c:19:dd:6d:31:69:b8:c7:2a:a0:64:6e:3b:67:25:
9b:26:f3:d6:a8:f8:80:01:cf:f3:73:98:eb:35:0f:9d:24:8c:
ba:6e:c0:9e:3f:cd:30:6a:dd:da:3b:34:e2:05:aa:18:7f:3b:
db:75:c8:a7:e4:75:c1:4b:0f:21:ba:d3:65:d9:68:7b:eb:2b:
ea:14:53:e1:23:09:d4:3c:03:ea:2f:61:dd:00:b3:70:db:c3:
eb:73:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:24 2025 by rpki-client