Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NpviDo9jXlADDJQW0y6pYIPHWec.roa
File: NpviDo9jXlADDJQW0y6pYIPHWec.roa (raw, json)
Hash identifier: RKBpkxy5XVNOYkkBJ1yNb7oJ91TIUqzXOiyT7/jA+nQ=
Subject key identifier: 36:9B:E2:0E:8F:63:5E:50:03:0C:94:16:D3:2E:A9:60:83:C7:59:E7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018943652D395C9067B9C083BDC703AC8A9A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NpviDo9jXlADDJQW0y6pYIPHWec.roa
Signing time: Tue 11 Jul 2023 05:20:51 +0000
ROA not before: Tue 11 Jul 2023 05:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.132.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:65:2d:39:5c:90:67:b9:c0:83:bd:c7:03:ac:8a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 11 05:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=369be20e8f635e50030c9416d32ea96083c759e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:8a:41:4a:b4:9b:41:3a:2d:5e:e6:66:08:
85:af:3e:91:e1:fe:1c:13:a4:08:57:68:75:f7:fc:
2b:49:34:dd:17:f8:5d:3a:8c:b7:04:2f:09:18:7e:
80:83:99:fd:1c:41:ef:1b:26:aa:68:e4:39:a3:fe:
4b:d6:ca:83:cd:32:a9:b2:99:cc:1d:f8:d6:13:c7:
94:3d:54:39:1b:f9:9c:c1:c4:5d:bd:65:d3:4a:8d:
68:e1:73:ef:90:f5:76:ba:50:9d:f9:e2:84:cb:10:
ce:dd:74:51:2b:b5:e3:49:dd:6d:2d:ce:fb:0e:ee:
b9:2a:40:bc:21:c7:d1:81:c9:3f:7f:e6:b8:25:20:
d5:5d:53:54:8d:e9:74:b2:14:b4:b3:60:aa:c8:c0:
ff:7b:7f:15:a5:da:a9:c4:61:6d:ae:be:05:70:ec:
62:44:a2:6d:92:21:fd:66:b6:d6:ed:e9:63:3b:77:
9a:09:96:61:b5:e7:ae:a6:f3:49:89:13:34:59:e5:
53:e3:d9:31:21:c8:c6:d0:14:42:a3:a1:ff:a4:8f:
fc:a0:b9:66:e3:61:b1:49:ba:c6:8e:12:a8:6f:bf:
75:b5:49:47:f4:f0:61:e5:00:ee:86:70:a9:e0:a2:
31:37:f3:c3:f4:6a:c5:24:0a:ae:ce:e1:dc:98:b5:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:E2:0E:8F:63:5E:50:03:0C:94:16:D3:2E:A9:60:83:C7:59:E7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NpviDo9jXlADDJQW0y6pYIPHWec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5c:98:30:60:41:3c:57:61:04:df:9c:bf:f8:dc:89:37:2d:
96:fd:d7:c1:4f:06:1a:bd:15:ee:9d:a8:0f:18:bc:e0:3e:34:
03:de:65:f2:cd:1a:ca:45:96:0b:3d:0f:62:97:50:2f:cb:c4:
30:f8:5d:06:1c:2b:4e:1b:88:d5:cd:0e:1a:31:c2:51:45:00:
70:8b:48:e6:9a:5b:6c:77:50:eb:63:46:31:45:63:49:ed:ab:
ed:3a:83:d9:d4:06:da:08:21:97:a7:86:4e:0b:71:ff:6a:bd:
aa:28:17:2e:84:10:a6:40:f6:43:23:f9:dd:cb:43:b3:d2:4a:
87:9b:73:dc:79:28:64:0e:d1:8f:b6:a0:e3:5e:2a:b8:e1:5e:
07:76:c0:d7:26:df:69:b2:e5:45:11:33:36:75:d4:cc:3c:41:
c0:86:96:b6:03:34:06:7f:f9:b5:b8:37:81:3c:12:34:19:ab:
b7:e2:6a:db:d1:dc:75:89:0c:dd:80:4f:bf:50:f0:8e:c7:32:
7a:ba:f8:e1:c6:c7:56:66:cb:06:01:13:cb:60:19:18:62:fd:
62:6a:75:2b:3a:9c:77:d4:08:95:8b:a9:63:2c:ac:80:bf:a2:
0a:fc:ac:09:0e:54:f1:7c:53:6f:82:f0:ce:8b:42:b1:09:98:
4f:f7:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:45:27 2025 by rpki-client