Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/nGV8EhhHRq99Lrn8eJSSH4-MZrY.roa
File: nGV8EhhHRq99Lrn8eJSSH4-MZrY.roa (raw, json)
Hash identifier: m0claOlC8LucDa9cu+Jdu8TWm+7VWMlkPWnn+PM/cCA=
Subject key identifier: 9C:65:7C:12:18:47:46:AF:7D:2E:B9:FC:78:94:92:1F:8F:8C:66:B6
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 0955F793
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/nGV8EhhHRq99Lrn8eJSSH4-MZrY.roa
Signing time: Sat 01 Jan 2022 07:57:38 +0000
ROA not before: Sat 01 Jan 2022 07:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59542
IP address blocks: 2a02:a43f:9800::/37 maxlen: 37
2a02:a43f:9000::/37 maxlen: 37
2a02:a43f:9000::/36 maxlen: 36
2a02:a43f:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156628883 (0x955f793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jan 1 07:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c657c12184746af7d2eb9fc7894921f8f8c66b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:5c:60:07:52:d1:1b:8f:fc:71:9b:3a:fb:
e5:5e:35:44:88:e2:e8:de:0d:23:0e:b7:b0:b4:00:
a0:2e:43:1c:b6:77:9a:b8:13:d2:f8:a8:0e:ab:a4:
3d:bc:34:c1:16:8c:92:f3:e5:3b:33:ea:55:5d:7e:
65:73:0d:18:dd:22:43:58:e8:04:ea:bf:ae:77:2f:
6c:04:1e:c8:ac:0a:21:19:64:08:03:a2:41:92:7a:
33:c5:4a:39:d7:42:f0:26:60:b9:65:fa:20:e4:45:
22:bb:e3:eb:1c:d4:63:5e:0e:86:2c:b0:72:38:c2:
35:61:71:2b:1a:05:15:40:e4:3e:20:7c:c4:b0:2c:
ae:80:10:cd:00:e0:47:af:be:d6:ac:6a:82:34:f8:
a5:5c:f7:93:de:d9:8a:bc:af:28:49:d7:03:eb:fe:
74:50:92:4e:e3:05:c9:22:0f:0f:cd:1d:f1:d0:8d:
e2:25:23:04:ff:9e:87:5a:04:26:02:8f:e7:08:3c:
30:74:ff:de:39:d7:cb:f7:b6:46:67:1e:b8:69:50:
98:7a:44:60:26:29:1b:a4:b5:da:7f:33:a0:43:5e:
31:75:d8:89:14:1a:f7:26:4f:27:99:6c:63:fc:aa:
a4:bf:da:76:82:46:79:90:88:11:67:a7:9a:e2:a8:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:7C:12:18:47:46:AF:7D:2E:B9:FC:78:94:92:1F:8F:8C:66:B6
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/nGV8EhhHRq99Lrn8eJSSH4-MZrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:a43f:9000::/36
2a02:a43f:f000::/36
Signature Algorithm: sha256WithRSAEncryption
33:25:3d:1d:2b:91:4b:f2:18:f6:9a:89:3c:73:b4:dd:2e:d9:
d5:66:67:e5:3d:c2:0f:b5:13:48:2a:de:ff:e3:56:35:8f:c5:
6a:ac:0e:b1:6f:d4:ff:b0:e2:7c:4c:4d:41:fa:7d:bf:79:bc:
eb:c9:3e:d3:b8:fa:3e:f7:70:9c:21:ba:c2:32:b3:b3:f7:37:
ee:74:95:63:ba:f6:2b:98:9e:0e:c9:d8:31:cf:14:57:c8:e4:
05:21:46:85:36:94:bc:3c:31:3c:6b:31:45:aa:ab:e1:bf:d9:
87:8f:46:a1:1b:77:67:0f:e8:80:93:18:e2:78:7c:98:64:fc:
50:97:93:a8:9e:60:79:10:df:4f:5d:3f:5e:db:db:55:82:6f:
7f:67:be:d5:20:94:3a:85:c9:79:94:5b:86:66:9e:90:cb:05:
1e:43:bb:b8:e2:e4:78:aa:3b:af:36:0a:0e:5e:d4:06:b9:7a:
d9:be:ce:25:3b:83:6c:21:58:56:13:07:30:b8:f5:aa:7d:1b:
8b:7d:3a:46:9f:1e:9a:ed:99:73:12:a7:b0:0e:f8:2d:c6:b5:
13:a1:5a:6c:85:e5:23:10:9c:f1:31:34:14:1f:da:b6:9c:97:
25:32:61:2d:01:60:5a:2e:a2:8f:ed:4c:eb:22:20:20:4c:01:
78:06:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:36 2025 by rpki-client