Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/nFjp6OOagm5VRjOBB9-DPBtjoug.roa
File: nFjp6OOagm5VRjOBB9-DPBtjoug.roa (raw, json)
Hash identifier: Jj8lnN54Z/psUNwSwTiCTm5BkdDUvalXUEpj6y4Y24k=
Subject key identifier: 9C:58:E9:E8:E3:9A:82:6E:55:46:33:81:07:DF:83:3C:1B:63:A2:E8
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 01856C0A4507A613E3224ABAC9DDE1E7F57F
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/nFjp6OOagm5VRjOBB9-DPBtjoug.roa
Signing time: Sun 01 Jan 2023 06:34:50 +0000
ROA not before: Sun 01 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197876
IP address blocks: 77.73.80.0/21 maxlen: 24
2a03:ab80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:45:07:a6:13:e3:22:4a:ba:c9:dd:e1:e7:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Jan 1 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c58e9e8e39a826e5546338107df833c1b63a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:19:7b:e8:ff:c2:29:5a:45:80:60:fd:d4:
b2:bb:28:aa:7a:0f:51:72:35:51:bd:7e:29:39:48:
cc:60:1e:69:69:a6:87:61:4d:40:38:3f:e5:fb:93:
60:23:2b:33:b2:53:30:4b:eb:26:f4:05:93:b3:84:
3d:f1:d0:8e:9a:2e:d3:69:40:72:71:a1:5b:c2:b4:
ea:58:66:5c:3e:05:0c:74:98:cf:63:92:ee:06:70:
75:ef:76:52:6f:35:bd:b3:ff:62:67:f3:6b:77:8e:
da:e6:f3:0a:b0:c2:3e:bb:74:3d:ac:07:70:ce:e4:
58:63:ae:28:55:36:88:e4:fd:07:55:ab:b0:03:45:
2d:68:c8:50:0b:cf:86:a0:18:d6:f8:6d:e6:1a:ba:
23:61:fc:3c:02:df:b8:21:9c:22:99:55:52:cf:72:
a6:7c:9d:b6:5c:b6:1c:1c:5a:2d:eb:5e:26:0b:c1:
f6:cd:93:ff:c7:95:01:8c:a0:24:a1:ba:ec:af:79:
04:e0:cc:86:41:38:69:76:5a:61:91:5b:ba:0a:f3:
ac:fb:67:a3:40:be:e4:22:3b:18:33:c5:d2:f7:0d:
e4:a3:fe:72:d6:c3:45:ec:d0:78:75:eb:09:cc:d6:
91:6b:33:a7:f3:ae:74:af:2c:25:c2:fe:2a:9b:d2:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:E9:E8:E3:9A:82:6E:55:46:33:81:07:DF:83:3C:1B:63:A2:E8
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/nFjp6OOagm5VRjOBB9-DPBtjoug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.80.0/21
IPv6:
2a03:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
15:b3:9f:db:f6:5e:06:25:c7:da:61:22:f9:ea:c7:78:e7:12:
39:75:18:12:2b:8b:8e:a3:f1:d5:24:4d:09:cf:1a:a8:bd:11:
1d:eb:4c:86:cd:51:9a:fb:a1:c6:82:11:8a:51:ee:cb:9d:3a:
5a:70:43:5e:67:67:53:94:17:75:d4:db:f0:fd:88:72:d6:88:
fa:c7:a6:bf:50:c8:81:b7:03:5b:dd:37:13:7a:41:4a:9d:73:
c4:78:ee:6a:a6:2f:35:02:f8:b7:57:e0:66:42:21:fe:4f:c9:
a3:0e:98:20:e5:6b:4b:89:98:86:64:eb:32:4e:b5:56:7c:79:
76:e3:3a:a4:b1:4c:74:6a:94:33:3f:9a:89:6b:0c:7b:22:bf:
fc:66:84:9a:8f:a3:62:55:70:9e:1b:de:b2:14:4d:bc:59:6a:
5f:02:a0:3b:86:40:48:23:ec:a9:d8:3e:c8:9f:f9:2a:ad:32:
1d:3b:b7:c8:00:88:41:6a:6e:9a:74:15:42:ea:ef:fd:6a:48:
89:cb:fa:41:70:32:cd:a3:dc:8d:53:27:85:80:93:4b:8e:2c:
74:9b:fa:5d:d2:98:be:6c:a1:7e:b3:bc:f0:96:df:f6:5a:35:
97:a7:9f:fe:04:5f:d1:60:b8:e5:38:a8:d2:fd:6c:5f:4d:f2:
0a:93:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:39 2025 by rpki-client