Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/NH-dDJYnVG42S9Xt1I81E0AZ1lw.roa
File: NH-dDJYnVG42S9Xt1I81E0AZ1lw.roa (raw, json)
Hash identifier: KR5KbphLud/Ay8vHjpZIOMTcksVb7gnbbFyhP3JwF8Y=
Subject key identifier: 34:7F:9D:0C:96:27:54:6E:36:4B:D5:ED:D4:8F:35:13:40:19:D6:5C
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 0118C911
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/NH-dDJYnVG42S9Xt1I81E0AZ1lw.roa
Signing time: Thu 23 Jun 2022 08:54:24 +0000
ROA not before: Thu 23 Jun 2022 08:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197019
IP address blocks: 185.8.236.0/22 maxlen: 24
2a02:2b88:2:1::306a:1/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18401553 (0x118c911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jun 23 08:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=347f9d0c9627546e364bd5edd48f35134019d65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:05:46:47:cc:f3:df:20:11:7d:9f:6a:de:
b2:c9:bf:15:88:a3:05:5d:18:29:71:75:3a:4a:6c:
f1:c7:3a:f2:12:6b:b0:59:97:e8:3d:95:3b:03:ce:
6f:c4:fe:d7:61:e7:12:e1:dd:26:9c:bd:25:41:09:
89:12:29:fd:ce:22:14:6e:ac:5e:c3:ca:48:2e:88:
a6:55:a2:11:47:90:0e:ff:8c:8c:14:21:50:b0:c3:
f5:b9:54:01:0a:55:2e:e7:78:dc:7c:3c:e9:56:5a:
82:88:c1:0d:12:44:a9:38:4b:85:3f:22:36:97:4e:
52:0d:1c:2b:20:a0:f6:1e:6b:0f:ad:7c:f8:2b:e8:
0b:2f:af:2a:0a:fc:35:bd:fa:16:85:22:56:1d:d4:
ac:fa:94:4a:b6:0c:56:ec:33:5c:f4:62:e6:60:ea:
57:e5:99:ec:5b:6d:8b:43:c0:87:02:eb:ee:a2:dd:
9d:ac:4f:01:18:bb:eb:83:04:ce:92:f1:3e:d7:21:
0a:89:16:71:54:9f:c9:60:ea:2b:7c:d3:f3:af:be:
17:fa:db:37:d2:8b:b7:77:3f:30:1e:ab:68:52:24:
3d:27:55:45:fb:97:bc:07:92:b1:1f:2a:2f:b0:0e:
11:0f:b1:1c:c0:7a:05:c8:fc:f1:02:d5:4a:14:20:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7F:9D:0C:96:27:54:6E:36:4B:D5:ED:D4:8F:35:13:40:19:D6:5C
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/NH-dDJYnVG42S9Xt1I81E0AZ1lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.236.0/22
IPv6:
2a02:2b88:2:1:0:0:306a:1/128
Signature Algorithm: sha256WithRSAEncryption
76:31:c5:a6:3f:ac:ad:f6:4a:73:62:42:5e:f5:6a:df:f4:6c:
54:44:7d:58:0e:d4:61:7a:a4:5b:f7:d3:ef:fb:77:89:e4:ac:
69:98:41:e6:e3:a6:b3:fc:cb:6d:85:4f:9e:e1:13:05:f0:aa:
0b:6c:68:a3:4f:3b:ab:fa:ab:4c:de:95:18:2b:03:6c:87:68:
9d:b3:52:18:f5:d3:d5:3a:6b:fb:b9:f7:14:3f:ef:50:6d:73:
22:6c:31:f3:7a:c2:8e:7f:25:af:63:34:ff:2b:db:67:83:db:
93:d3:48:0a:78:7e:d0:f3:5a:39:b5:a6:12:ea:41:a4:41:cf:
5b:67:90:cc:dd:f2:86:d4:e0:7a:fb:2a:48:82:19:0e:78:aa:
62:40:d7:1d:1c:64:9c:71:a7:77:53:0d:2c:ac:75:e7:a5:bc:
4c:a8:ac:38:bb:d4:d2:2d:28:62:a3:e8:78:eb:3c:7a:77:a7:
3d:be:79:aa:ab:96:c7:47:dd:ce:b8:c1:c2:8f:9e:af:20:d7:
be:fb:50:8a:05:cb:9c:34:62:00:23:66:a6:ff:56:54:d7:ca:
be:c2:18:af:86:15:82:e3:1f:56:cb:c3:3e:47:fc:1e:82:17:
da:40:ca:55:4d:bd:5a:e8:52:2b:1d:95:a9:94:17:a9:17:47:
0a:da:40:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:28:29 2025 by rpki-client