Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/Nxjl7NN4YdQJfZh87WnjrKRhdcE.roa
File: Nxjl7NN4YdQJfZh87WnjrKRhdcE.roa (raw, json)
Hash identifier: GgE0vrsOuqZljITO5ELjw2FU4JIRvHDQwfS6+hiWdE4=
Subject key identifier: 37:18:E5:EC:D3:78:61:D4:09:7D:98:7C:ED:69:E3:AC:A4:61:75:C1
Certificate issuer: /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial: 01856C413AAAA401D29F8509A085FEE4574B
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/Nxjl7NN4YdQJfZh87WnjrKRhdcE.roa
Signing time: Sun 01 Jan 2023 07:34:52 +0000
ROA not before: Sun 01 Jan 2023 07:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16075
IP address blocks: 193.104.220.0/24 maxlen: 24
2001:67c:13c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3a:aa:a4:01:d2:9f:85:09:a0:85:fe:e4:57:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Validity
Not Before: Jan 1 07:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3718e5ecd37861d4097d987ced69e3aca46175c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:33:cf:4e:ef:d3:cc:2d:9f:d7:b9:b1:2d:
0b:48:0b:23:ab:c2:05:af:fa:42:4b:3f:b4:35:94:
0e:11:cb:a5:a1:a6:dc:f9:19:64:eb:ee:f1:19:01:
fa:e5:43:c0:3d:ad:02:29:42:44:0d:c4:82:c5:b0:
9e:21:0b:66:04:9d:63:0f:1f:96:27:07:62:82:8e:
05:56:2c:0a:05:99:d8:24:78:12:cf:cc:5b:c6:9f:
fb:78:33:24:d0:2b:df:cb:d8:78:14:d0:6c:d5:d1:
ef:1d:a6:2f:5d:d4:17:fb:a0:57:89:b2:a6:e2:d7:
78:64:57:54:14:9e:d3:58:8b:8d:01:3c:e6:1f:01:
7a:5c:00:c3:41:11:a8:88:b5:7f:3d:cd:22:ce:58:
10:a0:72:b9:14:15:4d:d5:30:7a:0f:5b:04:8c:cc:
9e:09:1f:2e:1a:12:b0:74:92:ae:7c:05:08:3c:08:
8f:86:68:11:ac:3e:14:37:dd:25:d7:76:e4:c7:7d:
44:64:ff:33:d8:88:19:39:40:10:7f:b5:67:70:fc:
7f:ab:2b:41:17:d2:17:66:88:dd:5b:f9:59:99:31:
5e:16:4f:95:68:71:0c:a9:af:ad:cb:33:7a:41:7b:
e6:5e:eb:55:2e:9b:f4:10:1d:65:9e:c8:aa:46:d9:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:E5:EC:D3:78:61:D4:09:7D:98:7C:ED:69:E3:AC:A4:61:75:C1
X509v3 Authority Key Identifier:
keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/Nxjl7NN4YdQJfZh87WnjrKRhdcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.220.0/24
IPv6:
2001:67c:13c::/48
Signature Algorithm: sha256WithRSAEncryption
0d:29:ff:99:b1:32:0e:e4:5c:6e:c4:dd:9a:76:e9:fa:13:9a:
0a:6b:e2:d3:7a:14:96:7f:48:ff:18:e1:0b:61:3f:92:69:98:
56:1d:8f:72:55:2b:06:e1:2f:6a:d2:27:2c:26:05:2a:2e:cb:
8a:ba:32:56:79:d4:10:a6:db:f1:8e:a0:80:4b:d1:a8:3a:2b:
6d:59:eb:52:c9:69:81:35:68:7f:77:cc:c0:27:06:7d:3d:f8:
08:4b:7c:f1:2e:0a:3f:a5:71:89:e0:09:a9:6b:62:2a:d6:39:
e6:fa:3e:3c:b0:27:a5:04:96:8f:e6:2e:82:16:6e:31:96:b8:
fb:61:31:7d:08:d8:24:e1:4f:35:dc:85:5b:55:62:ed:cd:9c:
ae:13:83:61:53:fa:78:7b:9c:88:ed:2d:e5:6d:92:24:d0:f5:
80:88:aa:11:4b:06:eb:bb:e7:7c:dc:28:58:cb:8e:b7:92:aa:
da:38:b0:dd:09:94:d4:b3:dc:d0:db:46:6b:1a:d4:92:fa:83:
24:03:f0:5a:3b:3c:82:cb:67:47:8b:43:23:bc:13:a2:99:d9:
93:28:eb:3c:a4:b6:4f:a9:09:e8:6d:f9:62:c6:f6:35:ee:0b:
89:37:e6:b5:1c:d2:aa:84:24:50:a4:f1:87:e6:8c:28:98:a7:
2d:ce:3d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:32 2025 by rpki-client