Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/NpuYSvow9i2Pwd9Oszm7sFHj1Cc.roa
File: NpuYSvow9i2Pwd9Oszm7sFHj1Cc.roa (raw, json)
Hash identifier: uDnLZzLYdg+vHQ/I/Yd2rUe9NG2SycdEmev6Ct6rD8Y=
Subject key identifier: 36:9B:98:4A:FA:30:F6:2D:8F:C1:DF:4E:B3:39:BB:B0:51:E3:D4:27
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 01856CCADD50A28B3C1FC03A995BEC28586E
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/NpuYSvow9i2Pwd9Oszm7sFHj1Cc.roa
Signing time: Sun 01 Jan 2023 10:05:12 +0000
ROA not before: Sun 01 Jan 2023 10:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15626
IP address blocks: 2a05:9407::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:dd:50:a2:8b:3c:1f:c0:3a:99:5b:ec:28:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jan 1 10:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=369b984afa30f62d8fc1df4eb339bbb051e3d427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:94:bc:f3:39:e8:cd:ac:26:e9:11:10:fa:
e7:af:a0:bc:23:56:df:23:92:87:b8:01:72:27:e3:
77:a7:44:41:c5:eb:3b:b1:33:c8:cb:61:c0:d9:37:
ad:bf:76:01:5d:44:bc:23:a4:a6:72:55:b0:45:59:
3d:bb:e2:f2:65:34:d0:c8:fe:32:0d:bd:b0:cc:df:
89:8d:7b:eb:f2:58:c9:56:bd:e7:41:6d:43:c5:79:
ca:97:4f:75:1d:81:83:25:c6:01:68:26:86:4b:6b:
12:85:df:44:96:fd:d1:c7:9e:bb:b0:f4:ff:71:08:
ed:7b:7e:2e:3f:34:c7:af:fb:82:e5:70:de:19:1b:
ad:d6:7b:24:d7:0c:f5:05:47:72:89:e1:3d:6e:96:
52:5b:59:4f:87:41:af:16:ac:90:95:fb:e4:4f:f4:
da:46:4b:67:44:f0:47:e7:f7:d1:ed:3f:82:27:2c:
fe:3f:5b:36:02:b4:54:25:94:11:88:db:e1:a6:b6:
59:f4:86:f5:57:8f:c0:25:f7:00:74:69:1b:8a:f4:
3b:d6:d9:92:c8:b5:29:d7:f2:65:55:bc:32:fa:42:
80:15:07:db:7e:e1:f1:69:94:b5:75:85:ff:67:e9:
e2:19:45:87:78:a1:e8:a3:22:9f:25:4b:e8:a9:9b:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:98:4A:FA:30:F6:2D:8F:C1:DF:4E:B3:39:BB:B0:51:E3:D4:27
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/NpuYSvow9i2Pwd9Oszm7sFHj1Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9407::/32
Signature Algorithm: sha256WithRSAEncryption
38:1e:26:c7:6e:38:3a:2c:9c:86:ef:74:a5:da:17:95:f1:f6:
13:d8:51:ad:b8:18:d2:e3:4c:c6:b1:68:1d:74:d7:94:bf:7c:
23:bd:79:c4:28:a1:25:74:a6:8d:cc:b9:d8:77:fe:9e:28:f7:
c6:02:f8:f5:5e:85:6c:a0:a0:26:57:0f:d3:bb:1c:5a:e2:de:
07:91:99:1f:16:68:7f:73:6a:cc:cf:51:b0:94:b3:6f:79:78:
83:66:9b:5e:d3:6e:96:f1:c1:11:9b:28:e1:15:4a:87:f3:86:
0e:fd:55:b7:c2:ff:0c:bb:6e:a9:fa:c0:5d:79:44:8f:60:3c:
8e:7b:ce:59:14:54:7f:e1:cb:07:36:a0:c2:a1:61:b0:f4:63:
e0:ad:ac:98:9d:15:3b:1e:89:94:cb:7e:0c:48:9f:2e:17:3d:
a3:84:2e:ab:d2:ed:9f:05:d9:65:92:68:80:b1:8e:58:7a:ff:
0a:87:fb:14:cc:49:ef:16:5a:4e:0c:e3:fe:b1:a6:e4:a2:b0:
94:64:9e:51:0f:fe:df:db:99:61:f0:b7:98:6e:ca:30:df:fb:
76:86:16:0d:80:7c:d3:f1:b3:dc:94:94:4f:87:7b:2a:23:10:
85:13:4c:a2:81:e7:38:94:6e:b1:03:17:d5:02:b7:92:e8:77:
cc:97:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:39 2025 by rpki-client