Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/NMqo7UWfkQ_aRZuxMGaXz-4PsJ8.roa
File: NMqo7UWfkQ_aRZuxMGaXz-4PsJ8.roa (raw, json)
Hash identifier: tYi7PmC7gvEi3AVC+Ae5S5II4WrMFcBSkk327h8ixR0=
Subject key identifier: 34:CA:A8:ED:45:9F:91:0F:DA:45:9B:B1:30:66:97:CF:EE:0F:B0:9F
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65F2BA15CCBF52286E6B3FF15B4EEA
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/NMqo7UWfkQ_aRZuxMGaXz-4PsJ8.roa
Signing time: Sun 01 Jan 2023 08:14:58 +0000
ROA not before: Sun 01 Jan 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59975
IP address blocks: 93.179.93.0/24 maxlen: 24
93.179.94.0/24 maxlen: 24
95.181.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:f2:ba:15:cc:bf:52:28:6e:6b:3f:f1:5b:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34caa8ed459f910fda459bb1306697cfee0fb09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:ae:16:7e:7e:d3:9f:04:0d:09:90:be:63:
b8:d4:87:7e:4f:5f:db:38:5e:55:a4:c5:00:7c:a2:
33:d4:c1:34:56:e5:d6:21:74:db:7b:60:2f:5b:fb:
61:70:f5:8c:4b:2a:43:41:66:fe:74:a7:b4:df:bd:
b4:f5:ab:c0:de:86:1e:e4:ac:1c:24:db:87:40:fc:
25:9f:45:9e:a7:aa:86:54:42:38:f5:1d:22:8e:c0:
d0:c6:8f:18:3c:9e:15:b8:af:73:ab:33:91:93:06:
80:04:d6:60:55:cd:7b:b8:33:34:f4:18:dc:17:63:
36:9b:31:4a:91:27:cc:32:25:d3:c9:36:84:ed:26:
77:f5:00:30:8f:20:45:06:29:76:bf:1c:1e:8b:4e:
d8:6d:e9:53:af:f8:8d:e3:03:c3:79:76:ab:76:24:
8d:e0:45:37:e9:5b:b9:d6:74:77:ac:3a:ef:0b:e2:
48:37:91:3a:de:02:ac:99:14:d0:8b:a6:b8:04:bc:
0d:44:01:1c:3c:57:d0:51:68:15:38:5d:dc:8e:7d:
a1:0a:4f:ce:92:f7:fc:a4:9c:0f:92:f0:b7:46:d2:
12:64:85:2c:06:6a:5e:1e:05:c9:a5:ee:76:7b:6e:
c7:a9:2d:b8:7e:4c:91:a7:ea:2a:2c:12:80:1f:cf:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:A8:ED:45:9F:91:0F:DA:45:9B:B1:30:66:97:CF:EE:0F:B0:9F
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/NMqo7UWfkQ_aRZuxMGaXz-4PsJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.93.0-93.179.94.255
95.181.145.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f3:21:a6:82:6a:8b:4c:19:07:ff:6d:e2:87:b5:fe:db:ff:
d2:2b:6b:68:a4:24:72:01:9c:b0:4e:87:c3:91:94:58:90:8b:
c4:ee:8d:8d:ae:b8:8e:75:7b:ca:1c:96:5e:d0:07:7c:ee:23:
be:89:d0:87:f4:18:0f:44:7e:9b:05:75:78:d9:2b:31:8f:58:
20:4c:f2:22:bd:bf:cc:05:e5:2f:b9:d2:32:a7:94:a0:f4:a4:
d7:cb:ac:65:f9:c0:39:90:d9:81:62:dc:f9:1d:cf:8d:c6:1f:
2a:00:93:10:f8:a6:ba:8a:5d:cc:99:14:06:50:a6:c6:02:7d:
c3:ad:95:b9:c1:22:eb:7c:df:07:c1:9a:10:50:d6:04:eb:15:
5d:ae:ca:2f:3e:a9:f2:a5:cb:90:88:1a:8d:49:d8:64:8a:4c:
a2:18:15:f6:80:44:15:bf:2c:a7:a4:54:41:e3:3d:95:9b:a9:
e3:3a:0c:86:63:fe:df:96:cb:79:0e:dc:29:4c:6d:2d:b9:dd:
b5:cc:65:09:ac:ce:48:89:c0:f2:84:0a:96:3c:be:8d:db:50:
e5:a2:4b:f3:53:dc:13:c2:89:32:85:34:46:01:42:ee:e6:c1:
78:68:5d:15:ae:d5:cf:3c:9b:93:da:29:e0:b3:9f:57:45:8e:
22:a7:9e:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:11:30 2025 by rpki-client