Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/ne-NvpDsZAfmjjueyIbr_dursTQ.roa
File: ne-NvpDsZAfmjjueyIbr_dursTQ.roa (raw, json)
Hash identifier: SW4caJSzX71Cz3xEe9cUcWthZK+ml2iz40HQiG5Yh0U=
Subject key identifier: 9D:EF:8D:BE:90:EC:64:07:E6:8E:3B:9E:C8:86:EB:FD:DB:AB:B1:34
Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial: 01856F94BAA298C902E5AEA84921C0E21F8B
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/ne-NvpDsZAfmjjueyIbr_dursTQ.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31736
IP address blocks: 192.162.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:ba:a2:98:c9:02:e5:ae:a8:49:21:c0:e2:1f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9def8dbe90ec6407e68e3b9ec886ebfddbabb134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:1e:40:6c:e7:33:ca:9e:89:31:18:b8:6f:
af:bc:fa:10:4e:88:c8:c3:d2:60:16:a7:41:ce:7d:
bb:a0:a7:0a:ee:86:75:6a:30:4e:56:dc:5e:55:7e:
0b:46:35:61:8d:12:29:60:2c:83:14:67:7b:a4:ac:
7a:59:5c:81:1d:d1:96:99:d4:92:a1:53:da:e3:60:
24:56:88:a5:d3:56:31:13:cb:1f:af:d9:3d:4c:07:
32:cd:3b:d7:7a:26:c8:8f:f6:08:6e:da:07:b3:7e:
ce:43:13:66:a0:63:32:aa:97:5e:25:5e:0e:c9:d2:
f8:f8:0b:b9:3f:34:89:a3:5e:4f:30:1f:cb:76:92:
cc:fe:ea:a6:10:7b:cf:01:ec:2c:d1:e1:a4:e6:62:
71:cb:b9:b8:ff:1f:18:41:4c:e6:f5:49:17:f3:bb:
06:41:2a:19:89:fa:b2:b6:c9:67:59:6d:17:a4:a4:
6d:94:82:77:02:a6:ea:2d:76:bd:aa:2c:53:9f:4d:
19:5b:f7:e0:0e:5a:45:a0:84:39:c3:a4:f3:18:55:
06:69:31:20:a0:aa:12:94:d6:7d:22:f3:b1:5f:3c:
6b:62:07:b2:ac:92:66:23:f8:43:9e:7c:fb:9d:a9:
26:65:0c:1d:4e:c3:d1:9c:07:c4:3d:8d:07:4e:06:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:8D:BE:90:EC:64:07:E6:8E:3B:9E:C8:86:EB:FD:DB:AB:B1:34
X509v3 Authority Key Identifier:
keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/ne-NvpDsZAfmjjueyIbr_dursTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:94:a5:aa:b3:0f:59:4f:9d:b2:c1:e4:e2:0b:c1:10:f1:55:
25:5c:f0:d2:35:56:c2:ed:88:44:66:42:7c:9f:07:b4:83:1b:
70:10:09:72:fb:c5:c0:80:3c:b8:12:c6:69:44:04:7b:9b:bc:
f3:a8:9e:0a:94:96:71:ca:a5:4d:e3:94:04:85:26:5e:c2:b3:
bc:e8:f7:92:c9:e6:18:ce:14:92:5a:05:fb:81:09:dd:ba:2f:
d4:a8:59:a0:3e:40:96:be:b1:42:a1:a1:ed:22:15:83:44:0b:
89:66:f8:10:b5:bc:12:93:34:13:a5:c4:90:63:c7:05:4b:64:
2c:ee:62:e3:ae:94:f9:23:96:c2:eb:e2:67:53:01:cb:b0:d4:
6b:db:c8:88:64:c7:ef:dd:db:39:bb:67:91:c7:2e:a3:90:40:
62:b3:22:57:da:c8:0d:47:99:ba:17:0f:8b:1e:87:99:95:00:
80:95:68:b2:28:db:1b:85:11:eb:64:5a:9c:55:0d:a8:11:7b:
d7:69:c9:ee:ff:48:ca:43:bf:24:9f:58:b7:2d:54:22:70:63:
75:ef:94:3f:a0:5e:3a:8e:8b:ad:34:d8:86:ba:ae:e6:ed:65:
aa:ec:b1:6b:2b:f8:22:fa:46:d4:5b:d5:08:d0:50:73:62:70:
bc:bf:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:58 2025 by rpki-client