Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/PNPQBdfC7up4MmlF-132xAMNgKQ.roa
File: PNPQBdfC7up4MmlF-132xAMNgKQ.roa (raw, json)
Hash identifier: /5ngTesMQYxq4pHxXv9sVsriWnKx3ltN2NQwt92kZLc=
Subject key identifier: 3C:D3:D0:05:D7:C2:EE:EA:78:32:69:45:FB:5D:F6:C4:03:0D:80:A4
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 01856C0A4E9828FD3D8D0411023861F99FE5
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/PNPQBdfC7up4MmlF-132xAMNgKQ.roa
Signing time: Sun 01 Jan 2023 06:34:52 +0000
ROA not before: Sun 01 Jan 2023 06:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44916
IP address blocks: 185.175.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:4e:98:28:fd:3d:8d:04:11:02:38:61:f9:9f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 06:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cd3d005d7c2eeea78326945fb5df6c4030d80a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:8d:c8:e4:e9:09:b4:cc:c1:97:90:c5:7b:
e3:02:63:dc:c7:1a:d0:4d:ab:0b:a1:05:de:09:1b:
28:ad:e9:90:7e:6f:d3:64:37:b1:27:01:db:b1:b7:
01:9e:fb:08:d2:fa:d3:09:ff:ea:75:1f:9d:65:b7:
5c:2f:0d:0f:86:24:0a:f0:ae:22:a2:c7:b0:f1:2e:
cb:fb:fc:a2:68:91:1d:1f:96:dc:77:0b:75:0b:24:
fc:e0:0e:23:16:1b:d9:1e:2d:1d:2c:93:ee:89:a7:
7b:51:d3:d4:f0:91:ef:4f:0a:14:62:08:f5:11:88:
26:ce:b1:c4:00:22:b3:d1:40:93:4f:02:fc:df:27:
79:3a:a0:d4:d4:3a:70:ef:93:f3:af:3b:c5:06:1b:
06:68:b0:6f:39:4a:cd:1d:a8:c2:a8:51:97:e2:ed:
b8:d3:e2:12:5a:29:c5:39:fc:58:00:24:96:5f:2c:
5e:a4:ea:8f:13:fd:d0:cf:e9:31:63:65:63:35:1b:
1a:70:6e:47:17:1c:85:57:27:5a:e3:2e:70:da:de:
fe:06:ed:ed:85:de:33:56:88:e9:39:8e:76:4b:bc:
cc:c6:d7:8c:ad:35:2d:5f:a1:4f:6b:a3:ab:23:3c:
77:58:ab:13:d7:56:77:44:bb:33:a9:3d:68:51:98:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D3:D0:05:D7:C2:EE:EA:78:32:69:45:FB:5D:F6:C4:03:0D:80:A4
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/PNPQBdfC7up4MmlF-132xAMNgKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.92.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0e:bb:41:34:04:01:96:05:2c:c8:43:83:c8:c5:ed:b5:73:
6d:b7:7a:b5:58:56:17:32:a1:e9:89:55:12:cd:a9:3f:b9:a7:
aa:4a:b6:83:a2:98:02:fe:9c:26:22:2b:35:59:95:69:1d:1f:
be:7b:75:24:28:82:04:9c:34:38:82:39:36:16:24:03:41:f3:
cd:57:56:d9:ba:2c:0f:b6:40:b4:c4:06:8c:a9:a5:da:46:13:
84:a2:f0:bd:35:c7:d0:1b:3f:be:89:60:aa:73:c4:42:0d:aa:
82:40:bc:81:9b:93:3d:4a:c5:08:28:e3:35:17:ac:21:b1:ce:
46:a0:e0:48:dd:61:93:8b:13:f8:bb:c4:fe:e9:48:c3:cb:d1:
1c:fa:95:87:96:df:da:fe:0a:9e:9e:56:eb:93:1b:8b:80:05:
09:64:f1:90:94:4d:ed:52:2d:bb:d8:bb:12:1a:22:7d:d4:55:
77:a5:77:05:09:bf:ea:b5:93:b1:73:45:dd:f6:39:f1:4d:26:
a7:36:9d:33:0a:0c:59:6e:37:06:42:98:58:8d:7d:50:9d:15:
7f:12:09:8c:f3:cf:f1:6d:d5:9f:49:f5:87:ad:5d:91:61:60:
a1:68:6c:96:3f:e7:c0:05:ba:d2:58:47:ee:d8:f7:34:07:fb:
3f:f7:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:29 2025 by rpki-client