Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/N6CX36Tlkf3KfjJeuMV6NIHLnH0.roa
File: N6CX36Tlkf3KfjJeuMV6NIHLnH0.roa (raw, json)
Hash identifier: cspPizXvPz17hrsB8XS/Pg2Agx2KCgyNwgjvS6GVBk4=
Subject key identifier: 37:A0:97:DF:A4:E5:91:FD:CA:7E:32:5E:B8:C5:7A:34:81:CB:9C:7D
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 01856CF86EA6613965E4DC31BE117E8EAE39
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/N6CX36Tlkf3KfjJeuMV6NIHLnH0.roa
Signing time: Sun 01 Jan 2023 10:54:58 +0000
ROA not before: Sun 01 Jan 2023 10:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47420
IP address blocks: 176.52.185.0/24 maxlen: 24
2a02:f181:3000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:6e:a6:61:39:65:e4:dc:31:be:11:7e:8e:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 10:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37a097dfa4e591fdca7e325eb8c57a3481cb9c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:70:bb:92:e5:01:f5:22:91:86:b4:bb:d2:
ae:2a:39:bb:7d:38:81:8f:d8:ed:c7:ee:e1:23:6d:
d0:32:71:85:17:8d:94:09:c2:98:ee:dd:6c:ce:7f:
d7:6b:ad:9d:41:29:fe:18:86:b1:04:9e:35:b8:54:
23:50:a8:a7:0f:2f:b4:77:03:21:0f:6b:86:ea:59:
a9:13:18:ec:85:63:c2:7a:7d:e5:ea:81:e2:6d:08:
22:ec:80:ac:4d:62:76:ec:ee:b2:c9:c9:02:48:b7:
8b:1a:8c:d0:c5:2c:2f:12:d7:ad:be:3f:e3:53:3e:
85:3e:de:3e:53:a1:90:0f:6e:3a:4b:88:1c:30:78:
1d:f8:6e:eb:86:35:bc:3f:7b:44:60:fc:5c:da:5e:
5a:83:e3:03:64:df:fa:72:f7:43:2a:fc:24:21:2d:
5d:b8:37:ee:0f:6a:c6:16:ff:4d:c3:92:e2:a0:5d:
0c:a0:62:23:df:58:80:3f:3b:87:5b:af:11:92:9d:
8f:6f:a9:40:f9:9b:83:60:1c:b0:05:eb:55:b7:6c:
ca:d0:c9:1f:b0:ed:20:bb:6d:16:90:2f:11:a2:c8:
34:1a:96:21:48:6e:86:23:55:2c:31:9d:70:64:08:
5b:ce:80:1d:87:bd:67:43:a5:72:8b:36:e7:96:82:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:97:DF:A4:E5:91:FD:CA:7E:32:5E:B8:C5:7A:34:81:CB:9C:7D
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/N6CX36Tlkf3KfjJeuMV6NIHLnH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.185.0/24
IPv6:
2a02:f181:3000::/48
Signature Algorithm: sha256WithRSAEncryption
66:ea:af:7d:42:cf:36:3b:83:03:da:6d:77:84:a8:d5:d3:49:
c4:25:fe:93:f6:ef:aa:a7:55:05:38:6f:fd:68:cf:4b:48:46:
6b:83:db:3f:bd:d1:81:73:5f:6e:dd:b8:6a:3a:46:ce:fc:4b:
85:28:69:eb:de:27:15:f8:d1:8c:e7:ae:bc:8c:e1:51:84:b2:
30:20:06:cb:df:30:95:9f:4f:48:bf:09:39:c4:2d:0a:97:4a:
4a:7f:fa:cd:17:61:e7:c8:5b:bb:c7:c5:84:49:50:b0:0c:7b:
4a:fd:1b:33:a5:8c:f0:0a:4c:8b:8d:91:4e:b8:9f:7f:57:17:
8d:87:f8:52:7e:db:70:64:ef:31:62:40:eb:71:93:95:2a:4e:
d0:5f:e6:d7:7e:65:8a:04:e8:a2:24:02:b2:ee:a0:63:f8:ba:
da:c0:39:e4:ee:e7:06:29:a1:65:57:b8:58:b1:0f:15:e4:3d:
f3:45:26:09:b6:06:94:63:00:66:32:8b:67:27:5c:e8:ed:b2:
86:76:38:cd:f4:6a:7e:91:20:9e:9e:0a:45:1c:d4:8b:5a:cb:
dc:a1:47:e2:dc:d9:2a:b4:8d:60:e3:80:bf:5f:f7:e5:ef:df:
97:b3:92:8e:3e:4f:eb:f7:19:35:f6:80:23:1a:4c:2d:ba:b7:
a8:75:bf:77
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVs+G6mYTll5NwxvhF+jq45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2
YmQ2MzkwHhcNMjMwMTAxMTA1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2EwOTdkZmE0ZTU5MWZkY2E3ZTMyNWViOGM1N2EzNDgxY2I5YzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPRwu5LlAfUikYa0u9KuKjm7fTiB
j9jtx+7hI23QMnGFF42UCcKY7t1szn/Xa62dQSn+GIaxBJ41uFQjUKinDy+0dwMh
D2uG6lmpExjshWPCen3l6oHibQgi7ICsTWJ27O6yyckCSLeLGozQxSwvEtetvj/j
Uz6FPt4+U6GQD246S4gcMHgd+G7rhjW8P3tEYPxc2l5ag+MDZN/6cvdDKvwkIS1d
uDfuD2rGFv9Nw5LioF0MoGIj31iAPzuHW68Rkp2Pb6lA+ZuDYBywBetVt2zK0Mkf
sO0gu20WkC8Rosg0GpYhSG6GI1UsMZ1wZAhbzoAdh71nQ6VyizbnloKj3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDegl9+k5ZH9yn4yXrjFejSBy5x9MB8GA1UdIwQY
MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt
MDkxYzJkMzAzZmU4LzEvTjZDWDM2VGxrZjNLZmpKZXVNVjZOSUhMbkgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4
LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAsDS5MA8E
AgACMAkDBwAqAvGBMAAwDQYJKoZIhvcNAQELBQADggEBAGbqr31CzzY7gwPabXeE
qNXTScQl/pP276qnVQU4b/1oz0tIRmuD2z+90YFzX27duGo6Rs78S4UoaeveJxX4
0YznrryM4VGEsjAgBsvfMJWfT0i/CTnELQqXSkp/+s0XYefIW7vHxYRJULAMe0r9
GzOljPAKTIuNkU64n39XF42H+FJ+23Bk7zFiQOtxk5UqTtBf5td+ZYoE6KIkArLu
oGP4utrAOeTu5wYpoWVXuFixDxXkPfNFJgm2BpRjAGYyi2cnXOjtsoZ2OM30an6R
IJ6eCkUc1Itay9yhR+Lc2Sq0jWDjgL9f9+Xv35ezko4+T+v3GTX2gCMaTC26t6h1
v3c=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:22 2025 by rpki-client