Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/NMLYdOSVqLez3SLc9UMcXpRHtcw.roa
File: NMLYdOSVqLez3SLc9UMcXpRHtcw.roa (raw, json)
Hash identifier: 0koxzDt7lNB6ssEY8B1o+M2qxdmwGTFgYmeCjTcGMiA=
Subject key identifier: 34:C2:D8:74:E4:95:A8:B7:B3:DD:22:DC:F5:43:1C:5E:94:47:B5:CC
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 0946DB73
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/NMLYdOSVqLez3SLc9UMcXpRHtcw.roa
Signing time: Sat 01 Jan 2022 06:01:17 +0000
ROA not before: Sat 01 Jan 2022 06:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64427
IP address blocks: 212.114.90.0/24 maxlen: 24
185.181.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155638643 (0x946db73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Jan 1 06:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34c2d874e495a8b7b3dd22dcf5431c5e9447b5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:d3:b9:be:e2:cc:b3:e4:24:a3:5f:eb:6d:
41:48:a0:c9:72:ed:c6:89:37:a7:10:97:5a:c3:51:
db:d5:8a:f7:81:35:50:fc:96:a9:c8:a9:18:ee:f5:
3c:ce:d6:70:5c:28:b4:33:c2:0d:33:db:66:e3:91:
56:2b:7d:ed:97:78:07:6e:84:07:68:87:21:fe:d0:
4a:69:8d:88:33:07:25:3f:e9:20:84:0c:1a:fb:4d:
55:08:b9:c8:01:2f:a5:77:8e:e9:4a:ca:ac:6d:b8:
2c:14:51:5b:5a:04:be:08:29:02:5c:0a:d2:09:48:
ab:31:dd:b5:e5:aa:7c:33:95:ab:de:ab:f9:14:53:
18:fa:a8:27:a7:2c:95:43:36:12:47:4e:bd:1d:25:
72:c7:94:9b:cc:2c:41:05:ae:70:5d:b1:f5:08:ae:
55:37:3b:dd:06:92:d6:83:fb:42:2a:e6:82:26:27:
42:00:de:57:94:9f:4b:9c:7d:6f:84:ca:8d:64:fc:
6a:6c:3d:12:d9:98:10:0c:6e:d6:1d:55:72:48:35:
12:09:0e:bc:7a:7e:a6:3f:cb:4e:a0:ea:b5:9c:33:
b9:e0:8f:3c:5c:9c:10:c5:51:83:25:3e:1a:4a:65:
97:59:5b:bb:02:dc:33:a3:33:ed:3e:46:9e:05:6c:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C2:D8:74:E4:95:A8:B7:B3:DD:22:DC:F5:43:1C:5E:94:47:B5:CC
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/NMLYdOSVqLez3SLc9UMcXpRHtcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.188.0/24
212.114.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3a:2d:d3:08:88:08:61:19:e3:97:46:6e:80:8a:e4:88:5e:
59:20:25:af:0f:30:09:06:b8:d1:5a:2c:b6:68:51:b8:39:44:
5b:39:ea:dc:54:44:c8:93:93:1d:17:a2:9c:27:56:e9:0c:0a:
92:be:ad:4c:41:8a:00:a8:96:d7:2a:02:13:f8:fa:e8:eb:7e:
ea:c8:6a:38:35:1a:92:4b:37:b1:b5:5b:58:f5:59:21:7e:4b:
48:a8:9e:f1:88:89:5b:68:ec:49:b4:16:de:2a:07:75:a1:55:
61:5e:d2:e8:34:56:4c:19:b3:5a:b5:06:14:58:dc:dc:6e:f2:
6d:c2:63:31:18:19:10:cb:a6:08:65:82:ce:40:50:73:c8:3c:
9f:f8:32:97:3c:b5:5c:0c:2f:1b:14:b0:cf:92:1d:8a:bd:03:
92:47:64:50:64:9e:0f:e0:a2:ba:98:4d:e7:d8:06:25:d6:d7:
40:75:6c:38:ad:c7:9b:40:f1:a1:c4:85:aa:86:dd:5c:b6:34:
4e:bf:9a:dc:9d:8f:54:c0:d2:d5:b7:93:1a:79:79:1a:d1:9c:
fd:55:bf:fc:c9:d4:92:01:7f:09:5c:98:20:0f:29:5f:2a:63:
1f:c1:e3:42:59:3c:46:c7:fa:86:65:d2:44:a7:a3:2e:30:e8:
1c:5b:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:28 2025 by rpki-client