Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/nfWdRX1g37kvDzCtoXbqxhC_UZc.roa
File: nfWdRX1g37kvDzCtoXbqxhC_UZc.roa (raw, json)
Hash identifier: ox2f5l1on43cZIQDABC/74AxJNArwT/IODsfosC0H7k=
Subject key identifier: 9D:F5:9D:45:7D:60:DF:B9:2F:0F:30:AD:A1:76:EA:C6:10:BF:51:97
Certificate issuer: /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial: 50072F
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/nfWdRX1g37kvDzCtoXbqxhC_UZc.roa
Signing time: Sat 01 Jan 2022 03:57:19 +0000
ROA not before: Sat 01 Jan 2022 03:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29027
IP address blocks: 185.103.88.0/24 maxlen: 24
185.103.89.0/24 maxlen: 24
185.103.90.0/24 maxlen: 24
185.103.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5244719 (0x50072f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
Validity
Not Before: Jan 1 03:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9df59d457d60dfb92f0f30ada176eac610bf5197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d3:87:b7:0f:f2:37:51:35:85:20:5b:1b:23:
ae:4a:b7:85:e6:3d:00:e0:3b:da:a9:29:6e:4b:f4:
03:b8:2a:85:3e:73:df:63:9a:85:86:97:51:81:b4:
4b:f5:42:f8:fb:bd:09:ad:40:19:e3:3f:12:54:e8:
35:02:2a:19:67:80:ad:14:c8:46:4f:5a:4c:46:b3:
7e:e4:0d:ef:32:60:04:80:ee:22:73:04:62:d1:e1:
0a:fd:73:88:ae:59:75:89:2f:39:0c:80:06:9a:57:
83:53:a3:b2:5d:60:78:f5:81:2d:21:87:e9:4e:77:
be:fd:59:a7:96:d9:28:0a:57:95:27:dd:4e:c8:7f:
65:52:7c:48:6b:4b:8d:d9:16:bc:4d:a3:6d:af:c4:
8c:6e:ad:2f:2b:6b:ef:52:8c:95:e7:f4:f1:42:9c:
6c:1d:5c:32:94:35:f4:39:c6:cf:31:df:a5:4b:4a:
ad:23:bc:11:0b:65:c9:7e:ba:c4:0f:5e:ba:03:e5:
2f:3f:71:f3:f6:db:eb:16:79:05:bf:da:6f:6a:6c:
c6:0e:fb:3a:57:8b:26:2b:26:44:f3:f3:3d:0e:a4:
8c:70:fb:73:8c:b5:9a:5c:9a:ee:92:04:63:fa:1a:
06:6b:d5:cf:9c:74:86:58:57:56:b0:1f:c8:71:7f:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:9D:45:7D:60:DF:B9:2F:0F:30:AD:A1:76:EA:C6:10:BF:51:97
X509v3 Authority Key Identifier:
keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/nfWdRX1g37kvDzCtoXbqxhC_UZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.88.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:29:55:c9:8b:f1:a9:32:44:73:ee:f3:47:56:cc:af:df:dc:
2b:1a:66:c1:2f:89:fb:2d:bd:2b:ab:2d:ad:c0:2d:3d:f8:9f:
a4:10:5c:25:d8:61:26:49:2b:7d:9a:b9:42:63:d0:87:e4:38:
3e:70:f3:36:51:56:64:cf:48:b6:1e:f9:ad:e7:9f:a9:01:e0:
48:fe:1d:b6:df:b9:a6:b4:df:eb:12:50:6f:c3:33:dd:23:f2:
3b:37:86:bd:8e:8b:38:5c:bc:0a:d7:f2:c7:25:66:29:3a:9d:
90:48:d4:6d:c8:02:0d:48:db:c5:6a:2f:7c:68:b6:a6:60:de:
40:91:29:52:eb:36:67:ba:2a:d4:a5:46:dc:bb:54:5a:07:25:
58:7a:f3:d2:40:50:fd:e6:7c:a0:44:90:96:d6:bc:63:bf:29:
44:84:02:38:1b:84:2e:7d:65:4c:09:af:cb:5c:1f:e1:37:fd:
03:59:0b:db:51:9e:66:8a:f2:9d:9d:31:93:ba:c4:e9:89:05:
99:6e:33:c7:12:d0:3b:0f:e7:59:b0:d6:d4:6f:e3:e0:8e:24:
09:ee:65:6b:da:18:8a:4b:0f:b8:6b:42:de:4d:e2:4f:8d:37:
4f:96:7f:71:79:73:41:9d:07:90:48:6f:a8:0d:5e:38:73:7d:
94:ef:5a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:25 2025 by rpki-client