Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/NPO8gmcAmgBG2PZHPJa2RNCUwVI.roa
File: NPO8gmcAmgBG2PZHPJa2RNCUwVI.roa (raw, json)
Hash identifier: BvkgcyUJThJygwR/UBFj4a+CLJllU9wpCV8b1lBWJ3M=
Subject key identifier: 34:F3:BC:82:67:00:9A:00:46:D8:F6:47:3C:96:B6:44:D0:94:C1:52
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 03C672D9
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/NPO8gmcAmgBG2PZHPJa2RNCUwVI.roa
Signing time: Sat 01 Jan 2022 11:53:52 +0000
ROA not before: Sat 01 Jan 2022 11:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209309
IP address blocks: 2a0d:9843::/32 maxlen: 32
2a0d:9847::/32 maxlen: 32
2a0d:9845::/32 maxlen: 32
2a0d:9841::/32 maxlen: 32
2a0d:9844::/32 maxlen: 32
2a0d:9842::/32 maxlen: 32
2a0d:9840::/32 maxlen: 32
2a0d:9846::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63337177 (0x3c672d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 1 11:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34f3bc8267009a0046d8f6473c96b644d094c152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:d2:58:f2:6e:9a:04:0e:3d:bc:c5:b8:6e:
ea:d8:c9:eb:a4:6d:5a:03:8f:8c:01:47:ad:4f:bc:
76:3d:51:30:a0:b3:0c:e5:28:8f:2b:fe:ff:b7:09:
bc:ce:0e:af:6f:f2:38:fb:61:06:77:72:a1:a1:25:
f5:53:c0:6f:d3:69:a4:87:33:d5:89:a6:01:21:78:
0c:62:78:59:6e:46:57:38:90:bd:77:22:02:d7:44:
ec:f6:b5:99:7b:f3:1c:6c:20:a0:01:90:f7:62:5b:
20:43:6f:3b:08:0a:11:cc:89:82:81:4b:25:f4:aa:
17:8a:a0:2a:cb:2f:3d:3a:96:d5:5b:27:93:3d:ca:
c0:e3:b1:a5:98:16:5c:a8:94:bb:7c:20:ff:ff:31:
56:fc:70:87:d5:68:de:dc:54:aa:50:05:6a:0d:b0:
8c:1c:d8:a1:65:54:b0:0d:b5:13:5b:01:d0:5c:0b:
86:e0:b8:1d:55:ac:98:e9:0d:2a:c4:6f:25:5f:68:
76:c1:36:34:1a:61:a6:60:bf:33:16:42:b3:e7:26:
ca:ef:97:41:50:e2:51:0c:5c:b5:5a:aa:08:21:bf:
5d:4f:0a:0b:f5:72:89:16:e8:9b:83:52:6c:da:47:
3d:a4:32:e9:1d:fb:82:62:6f:43:2d:74:4a:1d:f9:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:BC:82:67:00:9A:00:46:D8:F6:47:3C:96:B6:44:D0:94:C1:52
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/NPO8gmcAmgBG2PZHPJa2RNCUwVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9840::/29
Signature Algorithm: sha256WithRSAEncryption
94:78:b9:be:62:1d:bc:d6:49:ba:f2:47:95:ee:fa:57:27:f8:
4f:15:9f:0b:bb:40:8c:c1:58:0a:42:e4:e1:bf:71:ce:69:8d:
06:a4:4f:f7:c8:34:9c:31:e0:98:2e:14:b3:57:df:46:62:ed:
c2:96:b1:8d:3e:a7:87:a4:05:c7:7d:40:a7:56:85:90:95:bc:
20:95:8c:01:3f:f3:56:ae:1e:7e:47:c2:36:62:2f:d1:ef:2a:
26:d3:f5:be:7a:6c:54:80:e5:d8:98:c8:37:b7:65:da:97:96:
1b:37:03:19:71:a2:28:f5:48:78:98:b7:9b:82:b4:fc:06:d1:
97:34:06:20:77:27:d8:17:ad:f2:a6:c7:77:21:48:97:13:a9:
ee:19:c7:a9:50:9a:41:c2:12:ab:b8:d2:83:cd:13:46:49:98:
3d:ab:1d:48:ce:1a:42:aa:97:3c:f2:bd:5e:b7:bf:73:36:a7:
da:cb:1d:55:e5:dd:cd:e1:5b:3e:01:88:5b:f2:9f:b6:1b:fb:
b6:96:46:a0:da:e9:cb:1e:70:c4:d4:a7:bf:c7:b6:32:96:dd:
ce:5d:0c:87:fe:2a:67:45:2d:1e:12:31:be:ff:ac:31:12:bc:
ae:a3:51:b0:b7:1a:4c:4a:94:fc:dd:ad:9f:d4:cd:e1:dc:47:
6a:be:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:25 2025 by rpki-client