Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Nh7-U1EsMolBZRvLmakhjhu1vgg.roa
File: Nh7-U1EsMolBZRvLmakhjhu1vgg.roa (raw, json)
Hash identifier: do6d++e9F47/lAyDxj5RYTILI0zSvnt6e1v9LsnM+mQ=
Subject key identifier: 36:1E:FE:53:51:2C:32:89:41:65:1B:CB:99:A9:21:8E:1B:B5:BE:08
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 01886C6E415999735C4AE8AE03D2B88EDCE7
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Nh7-U1EsMolBZRvLmakhjhu1vgg.roa
Signing time: Tue 30 May 2023 11:32:24 +0000
ROA not before: Tue 30 May 2023 11:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8966
IP address blocks: 5.195.166.0/24 maxlen: 24
5.195.167.0/24 maxlen: 24
5.195.166.0/23 maxlen: 24
5.195.175.0/24 maxlen: 24
5.195.173.0/24 maxlen: 24
5.195.174.0/24 maxlen: 24
195.229.12.0/24 maxlen: 24
195.229.27.0/24 maxlen: 24
195.229.31.0/24 maxlen: 24
195.229.34.0/24 maxlen: 24
31.219.177.0/24 maxlen: 24
195.229.3.0/24 maxlen: 24
195.229.0.0/24 maxlen: 24
195.229.1.0/24 maxlen: 24
195.229.4.0/24 maxlen: 24
195.229.0.0/19 maxlen: 19
195.229.2.0/24 maxlen: 24
195.229.6.0/24 maxlen: 24
195.229.5.0/24 maxlen: 24
5.195.208.0/24 maxlen: 24
5.195.223.0/24 maxlen: 24
194.170.186.0/24 maxlen: 24
2001:8f8:d002::/48 maxlen: 48
2001:8f8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:6e:41:59:99:73:5c:4a:e8:ae:03:d2:b8:8e:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: May 30 11:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=361efe53512c328941651bcb99a9218e1bb5be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:3e:82:01:ab:7c:48:e3:33:f6:17:24:03:
76:0c:8f:3c:ed:5d:20:cf:3a:56:64:0a:e3:9a:d6:
33:9d:62:d6:d3:26:2d:3d:67:fc:4c:5f:64:0b:51:
cb:e2:c9:5c:9d:22:49:1d:39:2a:04:93:f4:ae:a8:
e0:24:d7:75:69:df:7d:a7:f9:7e:55:0b:ad:7f:bf:
a0:6d:78:ca:a0:3a:03:6b:44:f8:b2:a7:3b:3d:7a:
fb:31:92:28:65:56:9f:f4:73:a0:23:4b:2d:11:cb:
29:64:10:0b:92:c5:ee:40:cc:ab:e5:2e:b4:65:c8:
27:54:43:bd:6b:0b:85:7a:9b:57:ac:1e:65:df:de:
3d:07:73:fa:63:dc:40:5b:0a:d9:9a:8e:b9:9f:97:
c7:12:4d:69:40:a0:a3:7d:a4:6b:e9:37:91:f8:9b:
e9:82:6d:2a:af:1f:63:2a:9a:7b:03:c4:22:43:2c:
bf:fe:b6:81:a7:39:5e:09:3e:07:65:40:75:5f:2d:
02:3a:57:ed:3b:61:82:a6:82:71:45:87:9d:53:30:
80:a4:4c:13:06:00:f9:48:d5:a1:c8:76:4e:95:b0:
2e:14:d9:04:15:f0:e7:41:6a:98:5b:be:93:0f:fa:
73:c6:3d:3b:47:ee:ce:23:df:fb:2e:a6:04:26:00:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:FE:53:51:2C:32:89:41:65:1B:CB:99:A9:21:8E:1B:B5:BE:08
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Nh7-U1EsMolBZRvLmakhjhu1vgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.195.166.0/23
5.195.173.0-5.195.175.255
5.195.208.0/24
5.195.223.0/24
31.219.177.0/24
194.170.186.0/24
195.229.0.0/19
195.229.34.0/24
IPv6:
2001:8f8::/32
Signature Algorithm: sha256WithRSAEncryption
6e:60:3c:29:a3:ff:b2:b3:7b:e5:27:20:3d:e8:18:34:0b:d3:
17:bb:e0:54:0c:64:af:30:39:0b:b4:66:a7:3a:1d:7b:66:e2:
25:80:78:af:3e:d8:c9:bd:c0:f0:e6:81:73:b4:5a:e3:3e:79:
83:fc:89:fd:82:69:74:37:1f:20:ca:ff:71:a0:2c:78:f6:93:
ae:90:3d:1b:b6:a5:fa:ab:f4:7a:30:f2:4c:d8:47:0b:96:a3:
90:c9:1b:cd:3c:c1:41:43:ed:14:74:95:a3:a3:57:d4:97:8f:
55:30:1e:be:06:41:e5:98:77:ba:14:b2:fd:05:34:03:f7:45:
a0:2b:17:99:0b:56:8e:32:76:8e:a3:70:10:7b:ed:16:c9:1b:
01:80:5f:07:22:99:6e:5b:0a:21:d5:f0:b1:7f:5c:57:ae:2b:
f7:ac:87:3d:93:05:85:3c:9f:fd:6a:7d:5e:db:12:44:ba:a4:
f6:bc:5d:fc:80:c2:86:46:5a:8f:f0:b0:95:84:d9:aa:ea:fa:
53:5c:a4:d4:96:56:53:68:17:d8:a3:28:c1:ac:43:e1:b6:81:
fa:22:ec:08:dc:e7:6c:32:50:88:c1:84:93:91:c7:e9:21:03:
d7:e2:d8:29:00:8f:66:a8:0a:a4:57:60:e6:1b:c8:81:85:6b:
29:73:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:40:29 2025 by rpki-client