Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NaOPCVEWtSNwPnT7BMLFfpLwkfE.roa
File: NaOPCVEWtSNwPnT7BMLFfpLwkfE.roa (raw, json)
Hash identifier: yzRLzNBvby6NiQpcZIjNWd4C3oDIenAMLtbYrj+AHQE=
Subject key identifier: 35:A3:8F:09:51:16:B5:23:70:3E:74:FB:04:C2:C5:7E:92:F0:91:F1
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0185704BC14551C32FB7E10B849BA0F392D1
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NaOPCVEWtSNwPnT7BMLFfpLwkfE.roa
Signing time: Mon 02 Jan 2023 02:24:50 +0000
ROA not before: Mon 02 Jan 2023 02:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
193.106.68.0/22 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:c1:45:51:c3:2f:b7:e1:0b:84:9b:a0:f3:92:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jan 2 02:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35a38f095116b523703e74fb04c2c57e92f091f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:c5:16:0c:e5:77:06:3f:e0:e9:0c:d7:54:
dc:75:49:2b:d6:68:cc:5c:0e:eb:ed:88:31:e3:c4:
18:2b:5b:11:60:4f:86:24:81:12:fb:e8:f7:2f:07:
62:a4:a4:e0:e8:1c:25:7d:38:c5:d6:be:c7:21:dc:
ca:be:6d:a4:b3:67:fd:37:db:9e:34:bc:22:05:50:
94:0d:bb:57:01:ba:73:3c:9d:86:9b:c5:38:da:18:
0a:db:ce:51:22:d7:6a:68:29:4a:18:52:47:0b:ee:
86:67:61:85:3b:23:26:01:80:59:18:4d:f7:4a:b0:
46:8b:bf:3d:fe:4a:26:5f:6a:84:fe:f4:f9:c6:db:
09:57:0d:fc:6d:71:44:27:a8:d8:30:78:eb:52:9a:
62:2a:c3:5b:7f:51:ca:7b:c9:95:6e:40:2b:be:c4:
f7:16:b8:9c:2c:75:30:1e:9d:e9:42:24:ac:68:13:
70:74:0f:46:d5:6f:57:3a:e3:9f:6d:b1:e7:1e:23:
73:60:18:8c:2b:6d:c2:7a:71:89:62:61:94:ec:37:
3a:c5:d4:6e:5d:f1:75:2c:ea:07:c4:d8:8a:79:18:
a2:36:47:e7:96:09:4d:d4:58:3a:f8:96:72:4a:d8:
5a:00:7f:ae:05:12:7c:f7:1b:38:a6:63:bc:9a:6a:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:8F:09:51:16:B5:23:70:3E:74:FB:04:C2:C5:7E:92:F0:91:F1
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NaOPCVEWtSNwPnT7BMLFfpLwkfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
193.106.68.0/22
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
52:96:1a:7a:8e:dc:d4:a8:3f:55:38:8c:93:7c:49:4a:58:4f:
4d:f3:99:2d:12:a3:03:1c:21:20:bd:4e:d8:2a:6f:ed:5e:7f:
6b:9e:35:76:79:46:25:52:48:65:90:26:72:ad:30:92:f4:e2:
ee:f4:f1:35:18:ab:c2:a7:48:4d:65:56:83:ec:c7:e0:ff:6a:
cf:16:7d:ab:e0:e5:19:4e:a6:3d:90:9b:25:d9:51:4b:ef:61:
ae:0d:4b:1c:08:be:89:e7:d9:be:ba:03:1c:ea:ce:e7:07:ea:
bc:cb:d7:f9:40:e0:32:b8:89:9f:b5:1e:81:d6:e8:54:72:1e:
75:1b:d6:1a:62:0c:f9:8c:ca:17:0a:c1:08:67:2a:2a:03:73:
ed:8a:b5:c1:7e:a4:58:a6:3c:b9:45:47:f6:53:95:e2:3a:49:
68:8a:3e:d8:64:32:40:a6:49:b5:12:33:20:5f:2b:ba:dd:4b:
d2:95:7d:ac:d8:a5:ee:27:88:a2:f4:b3:3b:90:cb:5c:ac:f2:
45:dc:dd:76:be:fa:f6:f7:c2:c8:cd:90:6e:09:74:c4:84:f4:
89:c5:a6:3c:e8:7c:5e:1e:f4:29:56:eb:7d:66:21:af:94:18:
2c:7c:b0:0e:08:c1:ea:ee:a1:a1:6b:b5:a2:9f:3b:e7:d3:39:
af:4c:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:29 2025 by rpki-client